Search - ring0 ring3

Search - ring0 ring3 - List

[assembly language] ring0 DL : 0: 从ring3跳到ring0的源代码，用汇编语言编写。
Update : 2008-10-13 Size : 4.25kb Publisher : 木头
[Driver Develop] CheckHiddenFile DL : 0: 使用内核方法检测隐藏文件，包括ring0,ring3的代码。
Update : 2008-10-13 Size : 569.12kb Publisher : macro
[OS program] asmvcring DL : 0: 这是一个汇编与VC结合的程序，在Ring3级获取Ring0级的操作-This is a compilation and VC combination of procedures, the Ring3 level access Ring0 class operation
Update : 2025-02-17 Size : 3kb Publisher : 站长
[Other] 从ring3切换到ring0的代码 DL : 0: 从ring3切换到ring0的代码--The code which can exchange ring3 to ring0
Update : 2025-02-17 Size : 4kb Publisher : 站长
[OS program] ring0nodriver DL : 0: 无驱动执行 Ring0 代码的源程序-No drive the implementation of the source code Ring0
Update : 2025-02-17 Size : 73kb Publisher : waterwhu
[Speech/Voice recognition/combine] CallMsgRing0 DL : 0: 在RING0中使用RING3函数MessageBox.-in RING0 use RING3 MessageBox function.
Update : 2025-02-17 Size : 212kb Publisher : exc
[Driver Develop] CallRing3FormRing0 DL : 0: 在Ring0层中调用Ring3层的功能需要安装DDK-in Rign0 layer called Ring3 layer functions need to install DDK
Update : 2025-02-17 Size : 911kb Publisher : 大家庭
[Driver Develop] r3_2_r0 DL : 0: Windows2000 XP 从Ring3层进入Ring0层的一种方法-Windows XP Ring3 layer from the layer into Rign0 a way
Update : 2025-02-17 Size : 20kb Publisher : 大家庭
[Windows Develop] winring0 DL : 0: API RING 0级调用，是一个非常好的例子，我真的是佩服了！-RING 0 API call is a very good example, I really admire!
Update : 2025-02-17 Size : 522kb Publisher : SUN
[Driver Develop] KernelExec DL : 0: 从RING0级下启动RING3级的应用程序源代码-from RING0 activated RING3-level application program source code
Update : 2025-02-17 Size : 69kb Publisher : fengdian
[Hook api] hookntcontinue DL : 0: ring0--hook NtContinue+source_code ring0下面hookNtContinue 使用drx7寄存器实现的hook this code hooks ntoskrnl!NtContinue to set dr7 to 0 (no updating of dr7) so NtContinue called from ring3 cannot alter drX registers... This hook will only PREVENT drX clearing from SEH (kiuser->ntcontinue) and will not alter debugging using ring3 debuggers (olly->SetThreadContext) mainly developed for personal reasearch and as anti-bpm... Hook NtContinue (not exported from ntoskrnl.exe but exported in ntdll.dll with service number) to set dr7 to 0 prior to calling original NtContinue so debug registers won t be changed from seh and ring3 code =) Its use for some targets such as armadillo... but never posted code... by deroko-ring0- hook NtContinue+ source_codering0 use the following hookNtContinue register drx7 realize the hook this code hooks ntoskrnl! NtContinue to set dr7 to 0 (no updating of dr7) so NtContinue called from ring3 cannot alter drX registers ... This hook will only PREVENT drX clearing from SEH (kiuser-> ntcontinue) and will not alter debugging using ring3 debuggers (olly-> SetThreadContext) mainly developed for personal reasearch and as anti-bpm ... Hook NtContinue (not exported from ntoskrnl.exe but exported in ntdll. dll with service number) to set dr7 to 0 prior to calling original NtContinue so debug registers won t be changed from seh and ring3 code =) Its use for some targets such as armadillo ... but never posted code ... by deroko
Update : 2025-02-17 Size : 6kb Publisher : 张京
[Driver Develop] R3toR0 DL : 0: 从RING3进入RING0的方法,不需要驱动-RING0 from entering RING3 method does not require drivers
Update : 2025-02-17 Size : 4kb Publisher :
[Driver Develop] ExcpHookMonitor_0.0.4 DL : 0: ExcpHook is an open source (see license.txt) Exception Monitor for Windows made by Gynvael Coldwind (of Team Vexillium). t uses a ring0 driver to hook KiExceptionDispatch procedure to detect the exceptions, and then shows information about the exception on stdout (using the ring3 part of the program ofc). The difference between this method, and the standard debug API method it that this method monitores all of XP processes, and the program does not have to attach to any other process to monitor it, hence it s harder to detect. The code currently is considered as ALPHA, and it has been reported to BSoD sometimes (on multi core/cpu machines). Take Care!
Update : 2025-02-17 Size : 52kb Publisher : 张京
[Hook api] HookLibrary DL : 0: Hook Api Library 0.2 [Ring0&3] By Anskya Email:Anskya@Gmail.com ring3 inline hook For Api Thank: 前29A高手也一直都是我的偶像...z0mbie大牛...这里膜拜一下使用的LDE32引擎是翻译他老人家的...C->Delphi... 说明: 1.利用堆栈跳转没有使用传统的jmp xxxx 长跳转,使用容易理解的push xxxx+ret 仔细看代码容易理解...封装完好. 2.内存补丁结构: 补丁1:|push xxx--钩子处理过程|ret| 补丁2:|保存原始补丁地址|保存原始地址代码长度|原始地址的代码|push xxxxxx|ret| 更新说明: 0.2: 支持Ring0 Inline Hook 0.1: Ring3 Inline Hook -Hook Api Library 0.2 [Ring0
Update : 2025-02-17 Size : 6kb Publisher : david
[assembly language] ring0 DL : 0: 从ring3跳到ring0的源代码，用汇编语言编写。-Ring3 Skip ring0 from the source code, using assembly language preparation.
Update : 2025-02-17 Size : 4kb Publisher : 木头
[GUI Develop] getRing0 DL : 0: Windows NT/2000/XP/Server 2003 获取Ring0的便捷工具程序创建了几个段： IDT,GDT,SSDT,Linear 为创建Ring3,Ring0之间的互交便捷-Windows NT/2000/XP/Server 2003 to obtain a convenient tool Ring0 program to create a few paragraphs: IDT, GDT, SSDT, Linear for the creation of Ring3, Ring0 between the interactive and convenient
Update : 2025-02-17 Size : 1kb Publisher : peacekeep
[Driver Develop] CheckHiddenFile DL : 0: 使用内核方法检测隐藏文件，包括ring0,ring3的代码。
Update : 2025-02-17 Size : 641kb Publisher : macro
[USB develop] USBEncDec DL : 0: 一个内核开发的usb加密解密驱动，包括完整的ring0，ring3代码。-Development of a kernel usb drive encryption and decryption, including complete ring0, ring3 code.
Update : 2025-02-17 Size : 496kb Publisher : macro
[OS program] r0code DL : 0: 在delphi中实现让ring3的程序运行在ring0-In delphi to achieve so that the program runs ring3 in ring0
Update : 2025-02-17 Size : 18kb Publisher : pp
[OS program] ProcessMonitor DL : 0: 应用层与内核层相结合实现进程的监控，ring3 & ring0 ,主动防御的基础功能，代码清晰，学习的好材料-process monitor ，ring3 and ring0
Update : 2025-02-17 Size : 74kb Publisher : goodone

« 12 3 4 5 »