Location:
Search - hook ssdt
Search list
Description: 通过SSDT绕过IceSword的inline Hook来关闭IceSword
Platform: |
Size: 154950 |
Author: inking |
Hits:
Description: SSDT Hook ZwQuerySystemInformation 隐藏进程
Platform: |
Size: 41793 |
Author: inking |
Hits:
Description: 再谈内核及进程保护，利用hook掉系统ssdt保护进程的例子。
Platform: |
Size: 6829 |
Author: 好好的 |
Hits:
Description: 这是一个SSDT HOOK源代码，希望对大家有点作用
Platform: |
Size: 1390 |
Author: agg |
Hits:
Description: 驱动级隐藏进程代码,SSDT HOOK
Platform: |
Size: 105281 |
Author: red_angelx |
Hits:
Description:
Platform: |
Size: 3604480 |
Author: 徐善 |
Hits:
Description: 伪造ssdt表拦截SSDT的HOOK,可以防止黑客修改SSDT-SSDT Table interception forged ssdt the HOOK, can prevent hackers modify the SSDT
Platform: |
Size: 5120 |
Author: c_s |
Hits:
Description: 通过伪造SSDT来拦截对SSDT的HOOK调用-By forging SSDT to intercept calls to the SSDT' s HOOK
Platform: |
Size: 5120 |
Author: c_s |
Hits:
Description: SSDT Hook snippet - so i can download some source code off this site
Platform: |
Size: 2449408 |
Author: Zerith |
Hits:
Description: 利用SSDT HOOK 巧过 LINK HOOK的驱动源码。。合适新手熟悉内核学习-Clever use of SSDT HOOK LINK HOOK been driven source. . Appropriate learning novice familiar with the kernel
Platform: |
Size: 2048 |
Author: 郭嘉 |
Hits:
Description: this is an example on How to make a rootkit using Delphi
Platform: |
Size: 2048 |
Author: n3m0 |
Hits:
Description: 随着计算机的发展，越来越多人用上了个人计算机，而主流的操作系统是Microsoft的Windows。这种操作系统占据着PC操作系统市场的90 以上。但问题也随之而来，越来越多的针对该平台的病毒、木马、黑客程序、恶意程序、流氓软件以及间谍程序盗窃和破坏用户数据。
研究发现，大多数上述非法程序是通过注册表来达到自启动的。那么只要我们拦截上述程序对注册表的访问，便可禁止他们启动，达到了保护用户数据的目的。在本次设计中，使用了SSDT Hook这种技术对注册表的访问进行拦截。这种拦截技术通用，功能强大。-With the development of the computer more and more people were using personal computers, while the mainstream operating system is Microsoft s Windows. The operating system, PC operating system market occupies 90 or more. But the problem has cropped up more and more of the platform for viruses, Trojans, hacker programs, malware, rogue software and spyware, theft and destruction of user data.
Study found that most of these illegal programs is through the registry to achieve from the start. So long as we block access to the registry the program can be launched against them to achieve the purpose of the protection of user data. In this design, the technology used SSDT Hook to intercept access to the registry. The interception technology universal and powerful.
Platform: |
Size: 2985984 |
Author: ZYM |
Hits:
Description: SSDT HOOK引擎，调用HookService()之前应该先调用InitServicesTalbe()来对SSDT进行一次性的保存，避免后面多次HOOK就要保存多次
！-SSDT HOOK engine, called HookService () should be called before InitServicesTalbe () to save on a one-time SSDT avoid HOOK will save many times the back!
Platform: |
Size: 4096 |
Author: agf |
Hits:
Description: reset 系统SSDT表，恢复被其他驱动hook修改的函数-SSDT table reset the system, restore the hook to modify the function of other drivers
Platform: |
Size: 2032640 |
Author: lin |
Hits:
Description: 一个采用ssdt hook技术实现的hips,驱动使用ddk编译，应用层使用VC6.0编写的。-A technology used ssdt hook the hips, drive to use ddk compiler, written in the application layer using VC6.0.
Platform: |
Size: 198656 |
Author: |
Hits:
Description: 简单的SSDT的Hook，可以让想学习SSDT HOOK的朋友们学习学习。-The simple SSDT Hook, you can make friends want to learn SSDT HOOK learn to learn.
Platform: |
Size: 10240 |
Author: 王恺轶 |
Hits:
Description: SSDT Hook & ibt Hook Import
Platform: |
Size: 122880 |
Author: Jang |
Hits:
Description: ssdt恢复的。可以恢复被hook的ssdt，达到过游戏保护的功能-ssdt recovery
Platform: |
Size: 12288 |
Author: 蔡文登 |
Hits:
Description: 机器狗新变种使用了一些流行的技术，包含了修复 SSDT Hook 、修复 FSDHook 、并对一些系统还原软件进行有针对的 Hook ，使能达到突破还原软件保 护的目的。做了那么多，最终目的还是下载大量的木马到用户的系统上。-The machine dog new varieties used some of the more popular technology, including the repair SSDT Hook, repair FSDHook, and for some system restore software to have in the Hook of, that can achieve breakthrough software the purpose of the reduction. Do so many, the final purpose or download a lot of Trojan horse to a user s system.
Platform: |
Size: 169984 |
Author: 锁匠 |
Hits:
Description: 通过修改ssdt表 hook掉ZwTerminateProcessZwLoadDriver以及ZwSetSystemInformation
是一份比较简单易读的驱动程序入门源码
是zmpi软件的进程防护拦截模块-By modifying the SSDT hook ZwTerminateProcess
ZwLoadDriver and ZwSetSystemInformation
Is a relatively simple driver entry source.
Is the zmpi software process protection interception module
Platform: |
Size: 6144 |
Author: 张皓秋 |
Hits: