Location:
Search - DuplicateHandle
Search list
Description: 一种新的穿透防火墙的数据传输技术,过程如下: 1. 找出目标进程 2. 找出SOCKET句柄 2. 用DuplicateHandle()函数将其SOCKET转换为能被自己使用. 3. 用转换后的SOCKET进行数据传输-a new firewall penetration data transmission technology, the process is as follows : 1. The process of identifying two goals. Identify SOCKET handle two. With DuplicateHandle () function to be converted to SOCKET their own use. 3. After the conversion used for data transmission SOCKET
Platform: |
Size: 28341 |
Author: 劳波 |
Hits:
Description: 非常巧妙的防止文件被删除（DuplicateHandle）
Platform: |
Size: 951 |
Author: undefined |
Hits:
Description: 使用DuplicateHandle DOS界面 可以查询当前开启文件句柄 将文件句柄插入到系统进程 保护文件不被删除 接触保护功能几个选项 有源码 能运行
Platform: |
Size: 1017408 |
Author: catface |
Hits:
Description: 非常巧妙的防止文件被删除（DuplicateHandle）-Very clever to prevent the files are deleted (DuplicateHandle)
Platform: |
Size: 1024 |
Author: undefined |
Hits:
Description: 利用句柄复制进行文件占坑实现阻止文件删除，外加枚举进程内所有打开的文件、搜索文件句柄所在进程、卸载相关句柄。-Copy files using handles accounting realize pit stop delete files, plus the process of enumeration of all open files, search file handles where the process of unloading the relevant handler.
Platform: |
Size: 115712 |
Author: |
Hits:
Description: 邪八制造出的一款利用DuplicateHandle函数防止文件被删除、改名等操作 ...
-Eight of evil to create a function to prevent the use of DuplicateHandle files are deleted, renamed, such as the operation ...
Platform: |
Size: 125952 |
Author: 流云 |
Hits:
Description: Inline HOOK ObReferenceObjectByHandle 保护进程-Inline HOOK ObReferenceObjectByHandle
Platform: |
Size: 1024 |
Author: 朱芮男 |
Hits:
Description: Ring3 下采用复制句柄的方式打开进程，并终止，可以干掉很多反病毒软件和一些驱动保护的进程-Ring3 used under way to open the process of copying handle and terminate, you can get rid of a lot of anti-virus software and a number of drive protection in the process of
Platform: |
Size: 21504 |
Author: 康康 |
Hits: