Location:
Search - dddk
Search list
Description: 用DDDK编写驱动,修改SSDT表HOOK NTDebugActiveProcess函数
钩子函数中可以判断PID号,决定是否放行,放行则在钩子函数中调用原来的NTDebugActiveProcess函数.否则直接返回False.HOOK成功后所有调用DebugActiveProcess的程序将会失效.当然可以按照你的需要HOOK更多的系统服务函数.同一服务函数的服务号在每个操作系统版本中是不同的.下面附件中编译完成的驱动请在WinXP SP2的环境下测试.否则可能会导致直接重启
Platform: |
Size: 3704 |
Author: 张京 |
Hits:
Description: 用delphi开发驱动的必看的代码!!!!谁说delphi不能开发驱动来着?-Use delphi to develop code-driven must-see!!!! Who delphi development should not come forward to drive?
Platform: |
Size: 1076224 |
Author: 红蚂蚁 |
Hits:
Description: 用DDDK编写驱动,修改SSDT表HOOK NTDebugActiveProcess函数
钩子函数中可以判断PID号,决定是否放行,放行则在钩子函数中调用原来的NTDebugActiveProcess函数.否则直接返回False.HOOK成功后所有调用DebugActiveProcess的程序将会失效.当然可以按照你的需要HOOK更多的系统服务函数.同一服务函数的服务号在每个操作系统版本中是不同的.下面附件中编译完成的驱动请在WinXP SP2的环境下测试.否则可能会导致直接重启-Used to prepare DDDK drive, modify SSDT Table HOOK NTDebugActiveProcess function hook function can determine the PID number, decide whether to release, release in the hook function to call the original function NTDebugActiveProcess. False.HOOK Otherwise, after the success of a direct return all calls DebugActiveProcess procedures will be failure. You can, of course, in accordance with the needs of more system services HOOK function. the same service function of the service in each of the operating system versions are different. following the completion of the annex to compile drivers in WinXP SP2 test environment. or else may lead to the resumption of direct
Platform: |
Size: 3072 |
Author: 张京 |
Hits:
Description: Delphi是优美而强大的语言，但是在开发驱动程序方面却不在行，有了这个单元，你就可以用你喜爱的语言来开发驱动程序了-Delphi is a beautiful and powerful language, but in the development of driver is not good, with this unit, you can use your favorite language to develop a driver
Platform: |
Size: 1076224 |
Author: 陈向阳 |
Hits:
Description: Delphi Driver Development Kit v0.0.4 - unpacked, cause the old one s gave virus warnings because of the packer it was packed with.-Delphi Driver Development Kit v0.0.4- unpacked, cause the old one s gave virus warnings because of the packer it was packed with.
Platform: |
Size: 1108992 |
Author: Raivis |
Hits:
Description: Delphi能不能开发Windows的驱动程序（这里的驱动程序当然不是指VxD了^_^）一直是广大Delphi fans关注的问题。姑且先不说能或者不能，我们先来看看用Delphi开发驱动程序需要解决哪些技术上问题。
Delphi的链接器是无法生成Windows内核模式程序的，因此用delphi无法直接生成驱动程序。M$的链接器是可以生成Windows内核模式程序的，那么是否可以用Delphi生成目标文件，然后用M$链接呢？要这么做必须要解决以下的问题：
Delphi生成的目标文件是OMF格式的，而M$ link虽然声称支持OMF格式的目标文件，但基本无用。最好能将OMF格式转换成COFF格式，EliCZ大侠的OMF2D正好可以解决这个问题。解决了目标格式的问题，一切都OK了吗？远没这么简单。继续之前，让我们先来看一下著名的DDDK吧。
DDDK（Delphi Driver Development Kit）是The Hacker Defender Project team发布的一个用Delphi开发Windows驱动程序的工具包，目前最新版是0.0.4版。DDDK是将常用的驱动API用Delphi做了层包装放在DDDK单元中，就像下面这样：-Delphi research-driven development chapter
Platform: |
Size: 1280000 |
Author: YF |
Hits:
Description: delphi driver devolopment kit v4
dddk v4
clean and don t contain virus(s).
Platform: |
Size: 1227776 |
Author: themrigi |
Hits:
Description: Visual C写的VirtualCOM虚拟串口驱动，基于DDDK，在Visual C环境下打开工程文件直接编译，可以扩充功能。
-VirtualCOM virtual serial port driver, written in Visual C based on DDDK, Visual C environment to open the project file directly compile and can extend the functionality.
Platform: |
Size: 9216 |
Author: nu |
Hits:
Description: 使用sfilter的透明加解密代码，需要安装dddk，哪个版本都行 ，经测试可直接使用。
-Use the sfilter transparent encryption and decryption code, you need to install dddk, which version of the line, has been tested and can be used directly.
Platform: |
Size: 37888 |
Author: 消极 |
Hits:
Description: 1.增加外部修改文件，内部将提示的功能
2.修改了EasySYS退出时的一个隐藏BUG
3.samples增加一Hook实现ProtectProcess示例
4.增加单元函数,结构体快速浏览
5.修改了DDDK以.lib的形式进行配置,上次添加的HookzwOpenProcess示例请大家在编译选项加上DDDK.lib重新生成sys
-1. Increase external modified file, the function of the internal will prompt
2. Modify the EasySYS exits a hidden bugs
3. Samples increase a Hook to achieve ProtectProcess example
4. Increase the cell function, structure a quick scan
5. Revised DDDK to. Lib configured, in the form of the last added HookzwOpenProcess sample please add DDDK at compile options. Lib to regenerate the sys
Platform: |
Size: 4389888 |
Author: 贺 |
Hits: