Location:
Search - process dump
Search list
Description: 一个windows的exe进程dump程序。-windows of a dump exe process procedures.
Platform: |
Size: 27787 |
Author: 马骏 |
Hits:
Description: This is an example how one could hide a process on Windows based
operation systems from task viewers like ProcDump (G-RoM, Lorian
& Stone) or ProcessExplorer (SysInternals).
It could e.g. be used as some kind of dump protection.
The way to get this done is very different on NT and 9x machines.
-This is an example how one could hide a Proce ss based on Windows operation systems from task viewers like ProcDump (G-RoM Lorian
Platform: |
Size: 38797 |
Author: gogo |
Hits:
Description: Windows PE文件格式分析与PEDUMP的实现-Windows PE File Format Analysis and realization of PEDUMP
Platform: |
Size: 1012736 |
Author: zhangyi |
Hits:
Description: 一个windows的exe进程dump程序。-windows of a dump exe process procedures.
Platform: |
Size: 27648 |
Author: 马骏 |
Hits:
Description: This is an example how one could hide a process on Windows based
operation systems from task viewers like ProcDump (G-RoM, Lorian
& Stone) or ProcessExplorer (SysInternals).
It could e.g. be used as some kind of dump protection.
The way to get this done is very different on NT and 9x machines.
-This is an example how one could hide a Proce ss based on Windows operation systems from task viewers like ProcDump (G-RoM Lorian
Platform: |
Size: 38912 |
Author: gogo |
Hits:
Description: 可以用dump命令检查数据区，验证程序的运行结果-Dump command can be used to check data areas, the operation of the verification process results
Platform: |
Size: 1024 |
Author: 休猫 |
Hits:
Description: SocketSniff allows you to watch the Windows Sockets (WinSock) activity of
the selected process.
For each created socket, the following information is displayed: socket
handle, socket type, local and remote addresses, local and remote ports,
total number of send/receive bytes, and more. You can also watch the
content of each send or receive call, in Ascii mode or as Hex Dump.-SocketSniff allows you to watch the Windows Sockets (WinSock) activity of
the selected process.
For each created socket, the following information is displayed: socket
handle, socket type, local and remote addresses, local and remote ports,
total number of send/receive bytes, and more. You can also watch the
content of each send or receive call, in Ascii mode or as Hex Dump.
Platform: |
Size: 43008 |
Author: coskun |
Hits:
Description: Dump PEB(Process Environment Block) s Information
Platform: |
Size: 26624 |
Author: achykim |
Hits:
Description: Heap Dump Utility
Usage: heap ProcessID, 0 is current process.
Platform: |
Size: 34816 |
Author: tumbata |
Hits:
Description: 在一拖三循环变频控制系统中实现三台泵的换机过程-implement of the process of alter dump at cycle frequency conversion systems.
Platform: |
Size: 13521920 |
Author: 刘秀锋 |
Hits:
Description: 它在输入和输出之间增加了“输入井”和“输出井”的排队转储环节，以消除用户的“联机”等待时间。在系统输入模块收到作业输入请求信号后，输入管理模块中的读过程负责将信息从输入装置中读入输入井缓冲区。当缓冲区满时，由写过程将信息从缓冲区写到外存的输入井中，读过程和写过程反复循环，直到一个作业输入完毕。当读过程读到一个硬件结束标志之后，系统再次驱动写过程把最后一批信息写入外存输入井并调用中断处理程序结束该次输入。-It increased between input and output " input shaft" and " output shaft," the line dump links to eliminate the user' s " online" waiting time. Input module in the system receives the input request signal operation, the input management module of the reading process is responsible for the information read from the input device input buffer wells. When the buffer is full, the write buffer is written to process the information from the external memory input wells, reading and writing process during recycling of the input until a job is completed. When reading the hardware end of the process of reading a sign, the system re-write process-driven information is written to external memory to the last batch input and call the interrupt handler well end the second input.
Platform: |
Size: 25664512 |
Author: yjj |
Hits:
Description: 本文首先指出了DUMP技术的原理，并尝试着编写一个实现于LordPE的基本功能的dump，并针对dump的编写一层一层的突出了dump过程中所注意的事项，对其加以不断的完善；讨论了一般的anti-dump的原理和解决的办法，用实践说明在脱壳中dump的技巧。最后比较了几种常用的dump工具的优劣。-DUMP this paper points out the principle, and try to write an implementation of the basic functions in LordPE dump, and the preparation for the dump the dump level by level, the prominent attention in the process of its continuous improvement to be discussed the general principles of anti-dump and solutions, with practical instructions in the shelling in the dump techniques. Finally, we compare several common pros and cons of dump tool.
Platform: |
Size: 3517440 |
Author: naiooit |
Hits:
Description: 进程查看工具，用于查看和操作流程。
其最基本的功能包括：
*查看，终止，暂停和恢复进程
*重新启动进程，创建转储文件，分离从
任何调试，查看堆，注入的DLL等。
*查看详细过程的信息，统计，和
性能信息
*查看，终止，挂起和恢复线程
*查看详细令牌包括修改的信息（
权限）
*查看和卸载模块
*查看内存区域
*查看环境变量
*查看和关闭处理
*查看，控制和编辑服务
*查看和关闭网络连接-Process Hacker is a tool for viewing and manipulating processes.
Its most basic functionality includes:
* Viewing, terminating, suspending and resuming processes
* Restarting processes, creating dump files, detaching from
any debuggers, viewing heaps, injecting DLLs, etc.
* Viewing detailed process information, statistics, and
performance information
* Viewing, terminating, suspending and resuming threads
* Viewing detailed token information (including modifying
privileges)
* Viewing and unloading modules
* Viewing memory regions
* Viewing environment variables
* Viewing and closing handles
* Viewing, controlling and editing services
* Viewing and closing network connections
Platform: |
Size: 7748608 |
Author: 先后 |
Hits:
Description: 一个简单的调试器
主要功能 :1.单步步入 2.单步步过 3.运行 4.自动步过 5.指令记录 6.自动步入 7.跳出函数体 8.dump被调试进程 9.INT3断点 10.硬件断点 11.多内存断点 12.API断点 13.对DLL导出函数的反汇编 14.导入函数名的解析 15.内嵌了一个PE查看工具默认显示被调试程序的PE信息.可以选择查看其他的程序PE信息.
所有的功能都可以使用命令和菜单 快捷键来完成，可以拖拽
-A simple debugger interface simple cottage Windbg. Main features: 1. Single step into the 2 single-step through 3 run 4 automatically step through 5 command record 6 automatically into 7 out of a function body 8.dump debugging process 9.INT3 breakpoint 10. hardware breakpoints 11 and more memory breakpoint 12.API breakpoint 13. DLL export functions for disassembly 14 import function name resolution 15. built a PE View the default display tool program being debugged PE information. can choose to view information about other programs PE all the functions you can use keyboard shortcuts and menu commands to complete, you can drag and drop. code issues in the hope of useful to you Oh. See specific use Help menu
Platform: |
Size: 661504 |
Author: 曹林开 |
Hits:
Description: 用来抓取网卡数据包的程序，通过原始的socket，抓取网卡收到的所有的帧-Used to process the packet capture card
Platform: |
Size: 2048 |
Author: zhouhaigang |
Hits:
Description: MFC的进程管理器，进程路径，内存地址，模块信息，可以挂起，创建，终止，dump进程到文件。-MFC s process manager, process path, the memory address, the module information, you can hang, create, and finally
dump process information to file.
Platform: |
Size: 4362240 |
Author: 李乔 |
Hits:
Description: fbpwn是一款基于java的facebook 个人资料dump工具。它能够自动向好友发送列取Facebook个人资料的请求并处理接受通知。一旦受害者接受申请，它就会自动dump所有用户信息，照片和好友列表到本地文件夹中。-fbpwn is a java-based the facebook personal data dump tool. It can be automatically sent to the friends request listings Facebook Profile and process to accept the notice. Once the victim accepts the application, it will automatically dump all user information, photos and friend list to a local folder.
Platform: |
Size: 10159104 |
Author: pudn |
Hits:
Description: windows进程内存转储(dump)工具，它能够附加到进程，读取进程的整个内存，然后，将进程整个内存的数据保存到磁盘上。该工具不同于LordPE 和OllyDump，因为它可以下载进程的整个内存到磁盘上。-windows process memory dump (dump) tool, which can be attached to the process, read the entire memory of the process, and then the entire memory of the process data is saved to disk. The the tool unlike LordPE Ollydump because it can download the entire process memory to disk.
Platform: |
Size: 706560 |
Author: ljh |
Hits:
Description: 用来抓取网卡数据包的程序，通过原始的socket，抓取网卡收到的所有的帧-Used to process the packet capture card
Platform: |
Size: 2048 |
Author: andThe |
Hits:
Description: A windows exe process dump program-A Windows exe process dump program
Platform: |
Size: 25600 |
Author: bjslkqa |
Hits: