Location:
Search - ring0 memory
Search list
Description: 该源码提供了windows驱动程序的实现方法,通过调用该驱动程序winio可以让你的应用程序直接进入ring0级操作端口和物理内存,并附含了VC和VB使用示例等，驱动程序采用VC编程，适用Windows98/2000/xp -The source provides a windows driver realize method, by calling the driver winio can make your application directly to ring0-class ports and physical memory operation, together with the VC and VB with the use of examples and so on, the driver made the use of VC process, the application of Windows98/2000/xp
Platform: |
Size: 190464 |
Author: qinlei |
Hits:
Description: 本书是一本介绍Windows核心技术及高级技巧的专著。从系统内核编程出发，使用大量的例子帮助读者理解这些编程技术，讲述了线程同步及隐藏、系统钩子深入分析、读写物理磁盘的关键技术、读写物理内存和其他进程内存的核心技术、Windows 9x下调用16位实模式和保护模式代码的核心技术、直接读写端口技术、可执行文件加壳的技巧、PE结构分析、Ring0的实现、Windows API截取技术、屏幕取词技术等方面的内容。全书对热点源代码进行了深入剖析和讲解，同时本书汇聚了作者利用Soft-ICE跟踪调试经验，作者多年的编程心得和技巧一览无遗。随书附送的光盘提供了书中涉及的程序源代码。-This book is an introduction Windows core technology and advanced techniques monographs. Starting from the system kernel programming, using a large number of examples to help readers understand the programming techniques described thread synchronization and hidden, system hooks in-depth analysis of the physical disk read and write the key technology, reading and writing physical memory and other processes memory the core technology, Windows 9x next call 16-bit real mode and protected-mode code, the core technology, direct read and write port technology, executable packers skills, PE structural analysis, Ring0 realization, Windows API interception technology, Capture Characters from Screen Technology and other aspects. The book on the hot source code in-depth analysis and explanation, while the book brings together authors tracked the use of Soft-ICE debugging experience, the author many years of programming experience and skills at a glance. CD-ROM supplied with the book provides the p
Platform: |
Size: 49120256 |
Author: 龙文 |
Hits:
Description: Check ring0 vulnerability in Windows kernels.
Checked:
1. SYSENTER
2. IO Write Memory
3. Bus Write Memory
4. Reset CPU in ring0
5. Zero IDT
Platform: |
Size: 9216 |
Author: hamlo |
Hits:
Description: My Mini 操作系统 源码.目前已经实现的功能：
阶段1：
1 BootSect
2 Kernel Loader （已经进入保护模式，并且将必要的参数传递给Kernel）
3 Kernel (开启页式存储，物理内存的简单管理，为中断提供了一套基本的接口，利用Bget建立了一个简单的堆)
阶段2：
1 优化了一部分代码，包括内核堆，内核栈的重新布置
2 初始化了一个TSS，用以处理特权级变化
3 将GDT从以前的KernelLoader空间到自己的空间
4 引入进程的概念（用双向链表来管理）
5 实现了第一个Ring3进程（但是此刻IF位置0，暂不响应时钟中断）
阶段3：
1 现在系统中有2个进程
2 开启时钟中断，对进程进行调度
3 现在每个进程有两个栈（Ring3栈，Ring0内核栈），中断处理程序也有了自己的内核栈，这样子，无论你的ISR多么复杂都不会乱了。
阶段4：
1 优化了中断处理过程，实现了中断的重入
2 实现了进程优先级的概念
3 开启键盘中断，进程中可以可以读取键盘输入（代码模仿，还有BUG，以后修正）
未来计划（如果谁有兴趣一起做的话，welcome ！）：
1 继续完善键盘输入功能
2 将每个任务（进程）的输入，输出隔离开来-My Mini operating system source code
Already implemented features:
Phase 1:
1 BootSect
2 Kernel Loader (has entered the protected mode, and the necessary parameters to the Kernel)
3 Kernel (open page storage, a simple physical memory management, interrupt provides a basic set of interfaces, using Bget created a simple heap)
Phase 2:
An optimized part of the code, including kernel stack, kernel stack of re-arrangement
2 Initializes a TSS, to deal with privilege level change
3 to GDT from the previous KernelLoader space to their own space
4 introduces the concept of the process (using two-way linked list to manage)
5 to achieve the first Ring3 process (but at the moment IF position 0, they will not respond to the clock interrupt)
Stage 3:
1 Now the system has two processes
2 Turn the clock interrupt, the process scheduling
3, each process now has two stacks (Ring3 stack, Ring0 kernel stack), the interrupt handler also has its own kernel stack, this way, no ma
Platform: |
Size: 67584 |
Author: 程光 |
Hits:
Description: 简单代码打造无敌内存清零和过NP的内存读写-Simple code to create invincible memory cleared and the memory read and write over NP
Platform: |
Size: 112640 |
Author: hyutu |
Hits:
Description: ring0读写特定端口，读写msr，读写内存等。-ring0 read rdmsr,wrmsr ,read memory and so on.
Platform: |
Size: 10240 |
Author: |
Hits:
Description: 在ring0层通过内存扫描，检测系统中的隐藏进程-Detection Based on memory scanning hidden processes
Platform: |
Size: 1667072 |
Author: arvin |
Hits:
Description: 驱动中的内存内核管理详细记载用法等
物理内存
B、 虚拟内存
C、 Ring0地址和Ring3地址
D、 驱动程序和进程的关系
E、 分页和非分页内存
F、 分配内核内存
-Driver in the memory core management records in detail, such as the use of
Platform: |
Size: 11264 |
Author: 蔡中伟 |
Hits:
Description: ring0读写特定端口，读写msr，读写内存等。-ring0 read rdmsr,wrmsr ,read memory and so on.
Platform: |
Size: 11264 |
Author: mmb3b433donyaqu |
Hits:
Description: ring0读写特定端口，读写msr，读写内存等。-ring0 read rdmsr,wrmsr ,read memory and so on.
Platform: |
Size: 10240 |
Author: bmeveengc |
Hits:
Description: 通过winio调用让你的应用程序直接进入ring0级操作端口和物理内存(Through the winio call to your application directly into the ring0 level operating port and physical memory)
Platform: |
Size: 203776 |
Author: 583540466
|
Hits: