Location:
Search - ssdt hook
Search list
Description: 通过SSDT绕过IceSword的inline Hook来关闭IceSword
Platform: |
Size: 154950 |
Author: inking |
Hits:
Description: 再谈内核及进程保护，利用hook掉系统ssdt保护进程的例子。
Platform: |
Size: 6829 |
Author: 好好的 |
Hits:
Description: 监控注册表的软件，在驱动层hook ssdt表，拦截所有关于注册表的操作
Platform: |
Size: 218032 |
Author: wuming621@126.com |
Hits:
Description: 利用这个程序: 1.可以监视在你的电脑运行的程序, 把在你的电脑运行过的程序的时间和名字记录下来 2.可以阻止你规定的禁用程序的执行, 比如不让玩游戏。 3.这个程序需要加入注册表, 在系统启动时就运行, 达到监视的目的。注册表大概都不陌生，就是这里: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-use of this procedure : 1. You can monitor the computer running program, on your computer one of the procedures of the time and record the names of two. You can stop the implementation of the banned procedures, such as not playing games. 3. This procedure needs to join the registry, the system started running on to achieve the purpose of surveillance. The registry probably not unfamiliar, is here : HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run
Platform: |
Size: 436224 |
Author: 毕胜 |
Hits:
Description: 伪造ssdt表拦截SSDT的HOOK,可以防止黑客修改SSDT-SSDT Table interception forged ssdt the HOOK, can prevent hackers modify the SSDT
Platform: |
Size: 5120 |
Author: c_s |
Hits:
Description: 通过伪造SSDT来拦截对SSDT的HOOK调用-By forging SSDT to intercept calls to the SSDT' s HOOK
Platform: |
Size: 5120 |
Author: c_s |
Hits:
Description: 利用HOOK SSDT表达到隐藏进程信息，内有驱动代码和加载代码-Use the expression to hide the process HOOK SSDT information, there are driver code and load code
Platform: |
Size: 39936 |
Author: 裴小伟 |
Hits:
Description: HOOK SSDT的代码，SSDT不用我说了吧，懂驱动的都明白。-HOOK SSDT code, SSDT I do not say it, understand the drivers can understand.
Platform: |
Size: 33792 |
Author: 东方容克 |
Hits:
Description: reset 系统SSDT表，恢复被其他驱动hook修改的函数-SSDT table reset the system, restore the hook to modify the function of other drivers
Platform: |
Size: 2032640 |
Author: lin |
Hits:
Description: 关于恢复hook ssdt的源码，可以过一般的游戏保护-Recovery hook ssdt on the source, can be protected over most games
Platform: |
Size: 4096 |
Author: 陈凡 |
Hits:
Description: 该驱动通过hook ssdt ZwOpenProcess，来保护保护suserice.exe。
只是练练手，含金量不高。
锐捷客户端Su1xDriver.sys逆向，附源码-The drive through the hook ssdt ZwOpenProcess, to protect the protection suserice.exe. Just practice your hand, gold is not high. Ruijie client Su1xDriver.sys reverse, with source
Platform: |
Size: 27648 |
Author: ljh |
Hits:
Description: hook ssdt的驱动的实现，隐藏进程。-hook driver
Platform: |
Size: 701440 |
Author: 张继辉 |
Hits:
Description: ssdt恢复的。可以恢复被hook的ssdt，达到过游戏保护的功能-ssdt recovery
Platform: |
Size: 12288 |
Author: 蔡文登 |
Hits:
Description: 相比WIN32，WIN64的SSDT发生了较大的变化，在WIN32下挂钩SSDT的代码已经不能在WIN64下使用了。该代码实现win64下挂钩 ssdt-Compared to the WIN32, WIN64 the SSDT occur larger hook SSDT under WIN32 code has been used in WIN64. The code to achieve win64 hook ssdt
Platform: |
Size: 259072 |
Author: dell2500 |
Hits:
Description: 这份是重载内核，知道重载内核能干什么了，基本所有的ssdt和shadow ssdt都能恢复，神马hook之类的弱爆了-This is overloaded kernel know to reload the kernel can do the basic the all ssdt and shadow ssdt, will recover, of Shenma hook like a weak burst
Platform: |
Size: 32768 |
Author: 王涛 |
Hits:
Description: 进程隐藏与检测，在驱动中通过hook ssdt表来实现进程隐藏的目的！-Hidden process detection process hidden in the drive through the hook ssdt table!
Platform: |
Size: 1517568 |
Author: 杜旭东 |
Hits:
Description: 这是一份读取SSDT表的源代码，里面也有HOOk的例子-a code which can read SSDT and Hook some SSDT funtion NtUserFindWindowEx FindWindow NtUserGetForegroundWindow GetForegroundWindow NtUserQueryWindow GetWindowThreadProcessId NtUserWindowFromPoint WindowFromPoint NtUserBuildHwndList EnumWindows NtUserSetWindowLong SetWindowLong 经XP/Win 2003/Vista/Win7测
Platform: |
Size: 67584 |
Author: luyi |
Hits:
Description: hook系统描述表，ssdt表，vs2005编译通过-hook system description table, ssdt table
Platform: |
Size: 318464 |
Author: jyw |
Hits:
Description: 过大多数网游反外挂代码 恢复各种SSDT inline hook-anti SSDT inline hook
Platform: |
Size: 517120 |
Author: kakak |
Hits:
Description: 主要通过hook ssdt api 进行驱动保护 -Mainly driven by hook ssdt api protection
Platform: |
Size: 17112064 |
Author: song |
Hits: