Search - shadow walker

[Hook api] ShadowWalker1.0

Description: 展示一个简单的实现，关于虚拟内存“钩子”和它的潜在应用的高级内核rootkits-Shadow Walker demonstrates a simple implementation of virtual memory "hooking" and it s potential application to advanced kernel rootkits.
Platform: | Size: 100352 | Author: 袁晓辉 | Hits:

[ADO-ODBC] SW

Description: Shadow Walker as seen at Black Hat and Phrack 63. Shadow Walker as seen at Black Hat and Phrack 63. Shadow Walker as seen at Black Hat and Phrack 63.-Shadow Walker as seen at Black Hat and Phrack 63. Shadow Walker as seen at Black Hat and Phrack 63. Shadow Walker as seen at Black Hat and Phrack 63. Shadow Walker as seen at Black Hat and Phrack 63.
Platform: | Size: 198656 | Author: kkakekikoku | Hits:

[OS program] FU_Lite

Description: Shadow Walker is not a weaponized attack tool. Its functionality is limited and it makes no effort to hide it s hook on the IDT or its page fault handler code. It provides only a practical proof of concept implementation of virtual memory subversion. By inverting the defensive software implementation of non executalbe memory, we show that it is possible to subvert the view of virtual memory relied upon by the operating system and almost all security scanner applications. Due to its exploitation of the TLB architecture, Shadow Walker is transparent and exhibits an extremely light weight performance hit. Such characteristics will no doubt make it an attractive solution for viruses, worms, and spyware applications in addition to rootkits. -Shadow Walker is not a weaponized attack tool. Its functionality is limited and it makes no effort to hide it s hook on the IDT or its page fault handler code. It provides only a practical proof of concept implementation of virtual memory subversion. By inverting the defensive software implementation of non executalbe memory, we show that it is possible to subvert the view of virtual memory relied upon by the operating system and almost all security scanner applications. Due to its exploitation of the TLB architecture, Shadow Walker is transparent and exhibits an extremely light weight performance hit. Such characteristics will no doubt make it an attractive solution for viruses, worms, and spyware applications in addition to rootkits.
Platform: | Size: 24576 | Author: kkakekikoku | Hits:

Category

Source Code

Web/Internet

Develop Tools

Document

Other

Search in results

OS

Platform

Language

File Type

Search list

[Hook api] ShadowWalker1.0

[ADO-ODBC] SW

[OS program] FU_Lite

[Driver Develop] sw_remove

[Button control] CMyMoveButton

[Internet-Network] SetKeyValue2.5

CodeBus www.codebus.net