Location:
Search - ring0
Search list
Description: 拦截createprocessex进入ring0-Intercept createprocessex into ring0
Platform: |
Size: 29696 |
Author: delphi |
Hits:
Description: température FPGA projet fichier te mpérature FPGA projet fichier te mpérature FPGA projet fichier-température FPGA projet fichier température FPGA projet fichier température FPGA projet fichier température FPGA projet fichier température FPGA projet fichier
Platform: |
Size: 1024 |
Author: aymen |
Hits:
Description: 实现ring0权限下的任务管理器机制。没别的了-Ring0 mechanism to achieve the task manager under the purview.
Platform: |
Size: 13312 |
Author: 龙金鑫 |
Hits:
Description: API hooking bypass ideas, ring0/ring3
Platform: |
Size: 258048 |
Author: The Munsta |
Hits:
Description: Byshell是一个无进程、无DLL、无启动项的、集多种Rootkit技术特征的独立功能远程控制后门程序(Backdoor)。其利用线程注射DLL到系统进程，解除DLL映射并删除自身文件和启动项，关机时恢复。它是内核级的木马程序，主要部分工作在Ring0，因此有很强的隐蔽性和杀伤力。-Byshell is a no process, no DLL, no startup items, the collection features a variety of Rootkit technology independent function remote control backdoor (Backdoor). Its use threads to system process DLL injection to relieve and remove itself DLL files and mapping start, shutdown recovery. It is a kernel-level Trojan, the main part of the work in Ring0, and therefore have a strong concealment and destruction.
Platform: |
Size: 543744 |
Author: 阿苏 |
Hits:
Description: DeviceIoControl函数在ring0和ring3的交互示例
不用多说了吧-DeviceIoControl function in an interactive example ring0 and ring3 Needless to say it. . .
Platform: |
Size: 14336 |
Author: 玉涵 |
Hits:
Description: 一个简易版Hips, 目前实现的有程序运行监控, 注册表修改监控, 驱动加载监控, 时间修改监控
这个是ring0-A simple version of the Hips, the current implementation of the program to run monitoring, registry changes to monitor, drive load monitoring, time to modify the monitoring
This is ring0
Platform: |
Size: 32768 |
Author: Lhen |
Hits:
Description: ring3与ring0通信，配合之前的Shadow hook！简单明了-ring3 communicate with ring0, with the previous Shadow hook! Foolproof
Platform: |
Size: 1935360 |
Author: xiongx |
Hits:
Description: xlib自用库，常用函数整合。For Ring0/3-xlib For Ring0/3
Platform: |
Size: 404480 |
Author: triones |
Hits:
Description: 枚举与删除映像回调,映像回调可以拦截RING3 和 RING0的映像加载。-
Enumerate and delete image correction, image correction can intercept RING3 and RING0 the image is loaded.
Platform: |
Size: 5120 |
Author: 石林 |
Hits:
Description: windows,2000xp下采用无驱Ring0-windows, 2000xp adopt hassel Ring0
Platform: |
Size: 5120 |
Author: oot9t949zhiixi |
Hits:
Description: Check ring0 vulnerability in Windows kernels.Checked:1. SYSENTER2. IO Write Memory3. Bus Write Memory4. Reset CPU in ring05. Zero IDT
Platform: |
Size: 10240 |
Author: yym4m29chenwen9 |
Hits:
Description: 程序直接进RING0读取MBR的IO代码修改版-RING0 read directly into the MBR code modified version of the IO
Platform: |
Size: 5120 |
Author: yym4m29chenwen9 |
Hits:
Description: RTL special definitions for ring0 & ring3 in one header.
Platform: |
Size: 9216 |
Author: ddjvj415hao |
Hits:
Description: 用户态与内核态的通信，是windows内核的ring3与ring0 的通信
Platform: |
Size: 8192 |
Author: hhflf865badn |
Hits:
Description: 通过对本代码中的函数简单调用可以取到系统的Ring0权限。-Through a simple function of the code to the system call can take Ring0 permission.
Platform: |
Size: 3072 |
Author: vvczc872bei |
Hits:
Description: 直接进Ring0运行的DELPHI代码.不需要任何特权-Ring0 run directly into the DELPHI code. Does not require any special privileges
Platform: |
Size: 3072 |
Author: vvczc872bei |
Hits:
Description: windows,2000xp下采用无驱Ring0-windows, 2000xp adopt hassel Ring0
Platform: |
Size: 5120 |
Author: ctaman |
Hits:
Description: Check ring0 vulnerability in Windows kernels.Checked:1. SYSENTER2. IO Write Memory3. Bus Write Memory4. Reset CPU in ring05. Zero IDT
Platform: |
Size: 9216 |
Author: ashnhhunbei5 |
Hits:
Description: 程序直接进RING0读取MBR的IO代码修改版-RING0 read directly into the MBR code modified version of the IO
Platform: |
Size: 4096 |
Author: v9xfxxinghe |
Hits:
«
1
2
...
7
8
9
10
11
1213
14
»