Location:
Search - ring3
Search list
Description: 这是一个汇编与VC结合的程序，在Ring3级获取Ring0级的操作-This is a compilation and VC combination of procedures, the Ring3 level access Ring0 class operation
Platform: |
Size: 3072 |
Author: 站长 |
Hits:
Description: 从ring3切换到ring0的代码--The code which can exchange ring3 to ring0
Platform: |
Size: 4096 |
Author: 站长 |
Hits:
Description: 在RING0中使用RING3函数MessageBox.-in RING0 use RING3 MessageBox function.
Platform: |
Size: 217088 |
Author: exc |
Hits:
Description: 在Ring0层中调用Ring3层的功能 需要安装DDK-in Rign0 layer called Ring3 layer functions need to install DDK
Platform: |
Size: 932864 |
Author: 大家庭 |
Hits:
Description: Windows2000 XP 从Ring3层进入Ring0层的一种方法-Windows XP Ring3 layer from the layer into Rign0 a way
Platform: |
Size: 20480 |
Author: 大家庭 |
Hits:
Description: byshell v0.67 beta2,是一个测试中的ring3 NT rootkit。-byshell v0.67 beta2, is a test of ring3 NT rootkit.
Platform: |
Size: 272384 |
Author: 苹果 |
Hits:
Description: Win32病毒入门 -- ring3篇.pdf-Win32 virus entry-- ring3 chapter. Pdf
Platform: |
Size: 286720 |
Author: inwing |
Hits:
Description: 从RING0级下启动RING3级的应用程序源代码-from RING0 activated RING3-level application program source code
Platform: |
Size: 70656 |
Author: fengdian |
Hits:
Description: 从RING3进入RING0的方法,不需要驱动-RING0 from entering RING3 method does not require drivers
Platform: |
Size: 4096 |
Author: |
Hits:
Description: ExcpHook is an open source (see license.txt) Exception Monitor for Windows made by Gynvael Coldwind (of Team Vexillium). t uses a ring0 driver to hook KiExceptionDispatch procedure to detect the exceptions, and then shows information about the exception on stdout (using the ring3 part of the program ofc).
The difference between this method, and the standard debug API method it that this method monitores all of XP processes, and the program does not have to attach to any other process to monitor it, hence it s harder to detect.
The code currently is considered as ALPHA, and it has been reported to BSoD sometimes (on multi core/cpu machines). Take Care!
Platform: |
Size: 53248 |
Author: 张京 |
Hits:
Description: 从ring3跳到ring0的源代码，用汇编语言编写。-Ring3 Skip ring0 from the source code, using assembly language preparation.
Platform: |
Size: 4096 |
Author: 木头 |
Hits:
Description: Windows NT/2000/XP/Server 2003 获取Ring0的便捷工具
程序创建了几个段：
IDT,GDT,SSDT,Linear
为创建Ring3,Ring0之间的互交便捷-Windows NT/2000/XP/Server 2003 to obtain a convenient tool Ring0 program to create a few paragraphs: IDT, GDT, SSDT, Linear for the creation of Ring3, Ring0 between the interactive and convenient
Platform: |
Size: 1024 |
Author: peacekeep |
Hits:
Description: Ring0和Ring3下的Rootkit源代码。很棒。-Ring3 under Ring0 and Rootkit source code. Great.
Platform: |
Size: 245760 |
Author: DNA |
Hits:
Description: 一个非常实用的ring3下检查隐藏进程实例。-Ring3 a very practical example of the process of inspection to hide.
Platform: |
Size: 15360 |
Author: KingOX |
Hits:
Description: 使用内核方法检测隐藏文件，包括ring0,ring3的代码。
Platform: |
Size: 656384 |
Author: macro |
Hits:
Description: Hook CreateFileA ，Ring3下的inline Hook-Hook CreateFileA, Ring3 under inline Hook
Platform: |
Size: 4107264 |
Author: QQ |
Hits:
Description: 在delphi中实现让ring3的程序运行在ring0-In delphi to achieve so that the program runs ring3 in ring0
Platform: |
Size: 18432 |
Author: pp |
Hits:
Description: Ring3下远程注入DLL干掉IceSword-DLL injection under Ring3 remote kill IceSword
Platform: |
Size: 37888 |
Author: wangyuanqing |
Hits:
Description: 应用层与内核层相结合实现进程的监控，ring3 & ring0 ,主动防御的基础功能，代码清晰，学习的好材料-process monitor ，ring3 and ring0
Platform: |
Size: 75776 |
Author: goodone |
Hits:
Description: 网上的大多数第一代机器狗ring3层代码都缺少几个声明，这个能完全编译，ring0层没带，请自己弄，ring3是直接寻址方式的。qq 295333637-Most of the first generation of online ring3 dog layer codes are the lack of a number of statements, this can be fully compiled, ring0 layer did not have, please get their own, ring3 direct addressing mode. qq 295333637
Platform: |
Size: 128000 |
Author: 沈学雄 |
Hits: