Location:
Search - ring0
Search list
Description: 使win9x处于ring0模式下的代码
Platform: |
Size: 42436 |
Author: |
Hits:
Description: 适用于所有windows的硬盘IDE信息获得工具，包括硬盘序列号，硬盘最大容量等。 最主要的是windows9x下面，采用了不调用驱动直接进入ring0的技术。-applies to all windows IDE drives information access tools, including the hard drive serial number, the largest hard drive capacity, etc.. The most important thing is Windows Now, using a driver not call directly into ring0 technology.
Platform: |
Size: 137901 |
Author: 俞训峰 |
Hits:
Description: 通过汇编获得Ring0级权限，可用在驱动开发上-through the compilation Rign0 level competence available on the Driver Development
Platform: |
Size: 26699 |
Author: guyu |
Hits:
Description: 从RING0级下启动RING3级的应用程序源代码-from RING0 activated RING3-level application program source code
Platform: |
Size: 69883 |
Author: fengdian |
Hits:
Description: 一段进入ring0的代码。-section of the code into ring0.
Platform: |
Size: 1561 |
Author: maki |
Hits:
Description: 一个最新最完整的ntifs.h导入库程序，用于开发无驱动的RING0程序。
Platform: |
Size: 48896 |
Author: wqwqwq |
Hits:
Description: ring0--hook NtContinue+source_code
ring0下面hookNtContinue 使用drx7寄存器实现的hook
this code hooks ntoskrnl!NtContinue to set dr7 to 0 (no updating of dr7)
so NtContinue called from ring3 cannot alter drX registers...
This hook will only PREVENT drX clearing from SEH (kiuser->ntcontinue)
and will not alter debugging using ring3 debuggers (olly->SetThreadContext)
mainly developed for personal reasearch and as anti-bpm...
Hook NtContinue (not exported from ntoskrnl.exe but exported in ntdll.dll with service number) to set dr7 to 0 prior to calling original NtContinue so debug registers won t be changed from seh and ring3 code =)
Its use for some targets such as armadillo... but never posted code...
by deroko
Platform: |
Size: 6421 |
Author: 张京 |
Hits:
Description: RING0下关闭360 需要加载驱动 可以学习学习-RING0 shut down 360 to load the driver can learn to learn
Platform: |
Size: 7168 |
Author: 梁小华 |
Hits:
Description: Hook NtQueryDirectoryFile隐藏文件
仅限32位系统-Hook NtQueryDirectoryFile hidden files is limited to 32-bit systems
Platform: |
Size: 5120 |
Author: 刘海宁 |
Hits:
Description: HOOK技术的Ring0级进程保护组件设计与实现-HOOK-class process technology Ring0 component design and implementation of protection
Platform: |
Size: 655360 |
Author: hackwin |
Hits:
Description: Win7下测试成功 xp自己去试验
前面的说明一定要看哦-hello 360
Platform: |
Size: 3072 |
Author: ccc |
Hits:
Description: Ring0下注册表键值的枚举与隐藏。实现注册表项的枚举、隐藏。实现病毒开机自启动注册表项目检测.-Under the registry key enumeration Ring0 and hidden. Enumeration entry achieving the registry, hidden. Achieved since the launch of the registry items boot virus detection.
Platform: |
Size: 405504 |
Author: zyj |
Hits:
Description: 无驱动R3进R0，VC源码
无驱动R3进R0，VC源码-No driver R3 into R0, VC source into the non-drive R3 R0, VC source
Platform: |
Size: 2069504 |
Author: asasj57 |
Hits:
Description: ring0读写特定端口，读写msr，读写内存等。-ring0 read rdmsr,wrmsr ,read memory and so on.
Platform: |
Size: 10240 |
Author: |
Hits:
Description: 获取ring0权限的驱动及源码，WINIO3.0与Winring0_1_3
Platform: |
Size: 825634 |
Author: wuhaobiao717@126.com |
Hits:
Description: VB ring0 deletefiles
Platform: |
Size: 12288 |
Author: 杨康 |
Hits:
Description: Intel的CPU将特权级别分为4个级别：RING0,RING1,RING2,RING3。Windows只使用其中的两个级别RING0和RING3，RING0只给操作系统用，RING3谁都能用。如果普通应用程序企图执行RING0指令，则Windows会显示“非法指令”错误信息。-Intel' s CPU privilege level will be divided into four levels: RING0, RING1, RING2, RING3. Windows uses only one of the two levels RING0 and RING3, RING0 only to the operating system used, RING3 anyone can. If the application attempts to execute common commands RING0, Windows will display " Illegal Instruction" error message.
Platform: |
Size: 5120 |
Author: 仔仔 |
Hits:
Description: 强删文件RING0代码，驱动强制删除文件-Delete files RING0 code, driving force to delete files
Platform: |
Size: 3072 |
Author: mfl |
Hits:
Description: ring0读写特定端口，读写msr，读写内存等。-ring0 read rdmsr,wrmsr ,read memory and so on.
Platform: |
Size: 11264 |
Author: mmb3b433donyaqu |
Hits:
Description: ring0读写特定端口，读写msr，读写内存等。-ring0 read rdmsr,wrmsr ,read memory and so on.
Platform: |
Size: 10240 |
Author: bmeveengc |
Hits:
«
1
2
3
4
56
7
8
9
10
...
14
»