Location:
Search - rootkit
Search list
Description:
Platform: |
Size: 127446 |
Author: iqpkeq |
Hits:
Description: 几款ROOTKIT，都不错
发出来，希望需要得人又帮助-paragraphs, the issue has been pretty good, in the hope that those who need help
Platform: |
Size: 574302 |
Author: 高闻言 |
Hits:
Description: 检测进程的代码,可以查出当前Rootkit进程。推荐!(使用挂钩线程调度链表)
-detection process code, we find the current Rootkit process. Recommended! (Using thread scheduling chain link)
Platform: |
Size: 490837 |
Author: 刘某 |
Hits:
Description: rootkit技术，欢迎下载，英文书名：Rootkits:Subverting the Windows Kernel
计算机安全图书中第一本关于终极后门程序——Rootkit的详尽指南！
世界级软件安全专家、rootkit.com创始人Greg Hoglund教您全面掌握rootkit，提升自己的安全防范能力
Platform: |
Size: 64550 |
Author: 谢淼 |
Hits:
Description: ROOTKIT 相关
Platform: |
Size: 13995 |
Author: 潘海峰 |
Hits:
Description: adore linux rootkit , 版本 0.4。2, 原理：通过lkm实现修改内核，做到文件等的隐藏，运行稳定，值 得研究，特别是其中的思想-adore, version 0.4. 2, Principle : lkm achieve change kernel, so the hidden documents and stable operation, worthy of study, especially the thinking
Platform: |
Size: 15237 |
Author: bei |
Hits:
Description: 代码hook了所有256个中断向量,在debdgview下打印输出了中断历程,使用是请加载.sys驱动程序,具体代码请看.c文件
Platform: |
Size: 33978 |
Author: happyforall |
Hits:
Description: 一份anti - rootkit代码
Platform: |
Size: 135199 |
Author: weolar |
Hits:
Description: 使用硬件虚拟化技术的rootkit
Platform: |
Size: 345387 |
Author: okyuyu |
Hits:
Description: Rootkit 1。 内核hook 隐身术 ring0中调用ring3程序 其他
Platform: |
Size: 6086340 |
Author: 359380123@qq.com |
Hits:
Description: rootkit工具，可以隐藏进程和驱动-rootkit tool to hide processes and drive
Platform: |
Size: 112640 |
Author: 魏慧乾 |
Hits:
Description: NT Rootkit-NT Rootkit
Platform: |
Size: 258048 |
Author: |
Hits:
Description: 和fport接近的一个东西，但是可以看被rootkit隐藏了的端口-and typically close to one thing, but can be seen to be hidden rootkit port
Platform: |
Size: 23552 |
Author: 缪羽 |
Hits:
Description: Open Handle as a part of Hacker Defender rootkit
Platform: |
Size: 24576 |
Author: 缪羽 |
Hits:
Description: Hacker defender - NT Rootkit - Delphi版-Hacker defender-NT Rootkit-version of Delphi
Platform: |
Size: 183296 |
Author: 唐复生 |
Hits:
Description: 这篇文档是在Windows NT操作系统下隐藏对象、文件、服务、进程等的技术。这种方法是基于Windows API函数的挂钩。 这篇文章中所描述的技术都是从我写rootkit的研究成果，所以它能写rootkit更有效果并且更简单。这里也同样包括了我的实践。 在这篇文档中隐藏对象意味着改变某些用来命名这些对象的系统函数，使它们将忽略这些对象的名字。这样一来我们改动的那些函数的返回值表示这些对象根本就不存在。 最基本的方法(除去少数不同的)是我们用原始的参数调用原始的函数，然后我们改变它们的输出。 在这篇文章里将描述隐藏文件、进程、注册表键和键值、系统服务和驱动、分配的内存还有句柄。-This document is in the Windows NT operating system hidden objects, documents, services, process technology. This method is based on the Windows API function link. This article describes techniques are, I wrote rootkit from the results of research, so it was rootkit more effective and more simple. Here, too, including my practice. In this document hidden object means certain changes to these objects naming system functions so that they will ignore these objects by name. So we change those functions return values, said these objects simply do not exist. The most basic method (excluding a few different) is that we should call the original parameters of the original function, and then we change their output. In this article will describe the hidden files, processes, registry keys, and keys, s
Platform: |
Size: 14336 |
Author: 龙 |
Hits:
Description: byshell v0.67 beta2,是一个测试中的ring3 NT rootkit。-byshell v0.67 beta2, is a test of ring3 NT rootkit.
Platform: |
Size: 272384 |
Author: 苹果 |
Hits:
Description: Rootkit，用来隐藏进程， 是从系统底层彻底隐藏哦（用process32frist等看不到）。
原本出自www.rootkit.com 我把他修改抽象出了一个hideme函数。 只要在程序中调用就可以了。 另外需要一个sys的支持，我放进来了。 但可能会被某些杀毒软件以为是病毒哦！-Rootkit, to hide the process from the system is completely hidden Oh bottom (using other process32frist see). Originally from www.rootkit.com I put him to revise the abstract hideme out of a function. As long as the procedure call on it. Also needs a sys support, I put up. It might be thought that some antivirus software is a virus!
Platform: |
Size: 6144 |
Author: 胡俊杰 |
Hits:
Description: rootkit检测应用程序的是否被hook，里面包含了源码。包含应用层和驱动层代码。-rootkit detection application procedures whether the hook, which contains the source code. Includes application layer and layer-driven code.
Platform: |
Size: 59392 |
Author: 刘春远 |
Hits:
Description: 一个用delphi开发的开源rootkit代码，可以隐藏文件，目录，进程，句柄等信息。-used to develop an open-source code rootkit can hide files, directories, processes, handle such information.
Platform: |
Size: 247808 |
Author: 杨树 |
Hits:
«
1
23
4
5
6
7
8
9
10
...
20
»