Search - ssdt - CodeBus

[Hook api] ssdthookinlinehook

Description: 这是一个SSDT HOOK源代码，希望对大家有点作用
Platform: | Size: 1390 | Author: agg | Hits:

[Windows Develop] gh0st

Description: 非常强悍的一款远程控制软件，功能强大，具有回复SSDT功能
Platform: | Size: 1036516 | Author: siliemor | Hits:

[Windows Develop] pcsharevip

Description: 高级会员办的远程木马，能实隐藏能力相当强，上线稳定，屏幕传输快，修改SSDt公能
Platform: | Size: 1669038 | Author: siliemor | Hits:

[Windows Kernel] apihook ssdt

Description: apihookssdt
Platform: | Size: 10502 | Author: sunhao1 | Hits:

[Driver Develop] 驱动级隐藏进程

Description: 驱动级隐藏进程代码,SSDT HOOK
Platform: | Size: 105281 | Author: red_angelx | Hits:

[Driver Develop] 注册表监控系统

Description: 监控注册表的软件，在驱动层hook ssdt表，拦截所有关于注册表的操作
Platform: | Size: 218032 | Author: wuming621@126.com | Hits:

[SourceCode] 意天进程保护开发包(进程防杀组件)

Description: 1、开发包用途该开发包用于软件开发人员使用该组件保护自己软件进程不被杀掉. 2、Demo测试方法 (1)进demo目录双击reg.bat对ProcProtectCtrl.dll组件进行注册 (2)双击VCTest.exe运行demo例程 (3)在"请输入进程ID"编辑框中输入想要保护的进程的ID(ID可参考任务管理器),输入-1为保护自身进程 (4)打开任务管理器,尝试杀掉被保护的进程 3、开发包使用方法(C & C++系) (1)把dll目录里所有文件拷到您软件的运行目录(exe所在目录) (2)把inc目录里的文件拷到软件项目里 (3)在您自己程序头文件里include "ProcProtectCtrl.h" 在cpp文件里 include "ProcProtectCtrl_i.c" (4)建立IProcProtect* m_pProcProtect 成员变量或全局变量 (5)在程序开始处调用如下代码以完成组件创建工作 hResult = ::CoCreateInstance(CLSID_ProcProtect, NULL, CLSCTX_INPROC_SERVER, IID_IProcProtect, (void**) &m_pProcProtect); if(!SUCCEEDED(hResult)) { m_pProcProtect->Register(_T("YitProcProtectCtrlSample")); ::AfxMessageBox(_T("ProcProtect component create failed!")); } (6)调用m_pProcProtect->Protect(m_lPid, TRUE, &dwResult)对进程进行保护m_lPid为进程id (7)程序退出前调用m_pProcProtect->Release();以释放资源特别注意:必需把ProcProtectCtrl.sys、ProcProtectCtrl.dll放到您exe所在目录里并注册ProcProtectCtrl.dll，具体代码可参考VCTest 4、软件说明意天进程保护开发包(进程防杀组件)是意天软件推出的一款进程保护开发包,用该开发包主要可使开发人员保护自己的进程不被taskmanager等工具杀掉,同时taskmanager等工具也无法获得进程的详细信息.该开发包主要使用驱动采用SSDT拦截技术实现 ,上层接口采用com封装,因此既使您用VB;CB;Delphi等开发工具也可以简单的把该组件变成自己软件的一部分,让您的软件不再被taskmanager随意杀掉!(注:不可用该开发包来实现恶意软件,否则后果自负!)
Platform: | Size: 950053 | Author: yuzhong25@163.com | Hits:

[Windows Develop] myhook

Description: 利用这个程序: 1.可以监视在你的电脑运行的程序, 把在你的电脑运行过的程序的时间和名字记录下来 2.可以阻止你规定的禁用程序的执行, 比如不让玩游戏。 3.这个程序需要加入注册表, 在系统启动时就运行, 达到监视的目的。注册表大概都不陌生，就是这里: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-use of this procedure : 1. You can monitor the computer running program, on your computer one of the procedures of the time and record the names of two. You can stop the implementation of the banned procedures, such as not playing games. 3. This procedure needs to join the registry, the system started running on to achieve the purpose of surveillance. The registry probably not unfamiliar, is here : HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run
Platform: | Size: 436224 | Author: 毕胜 | Hits:

[VHDL-FPGA-Verilog] data_transfer

Description: 同步串行数据发送电路SSDT的基本功能是将并行数据转换成串行数据并进行同步发送。系统写入和读出时序完全兼容Intel8086时序。系统以同步信号开始连续发送四个字节，在发送中出现5个1时插入一个0，在四个数据发送结束而下一次同步没有开始之前，发送7FH，这时中间不需要插入零 -synchronous serial data transmission circuit SSDT the basic function is to convert parallel data into serial and the same this step. System write and read sequential fully compatible Intel8086 timing. Synchronized signal system to start sending four consecutive bytes, in this emerging 5 1:00 insert a 0, at the end of four data sent and the next synchronization not started before, sending seven FH, then the middle is not inserted
Platform: | Size: 557056 | Author: chengp | Hits:

[VHDL-FPGA-Verilog] TOKEN_vrilog

Description: 同步串行数据发送电路SSDT的基本功能是将并行数据转换成串行数据并进行同步发送。系统写入和读出时序完全兼容Intel8086时序。系统以同步信号开始连续发送四个字节，在发送中出现5个1时插入一个0，在四个数据发送结束而下一次同步没有开始之前，发送7FH，这时中间不需要插入零 -synchronous serial data transmission circuit SSDT the basic function is to convert parallel data into serial and the same this step. System write and read sequential fully compatible Intel8086 timing. Synchronized signal system to start sending four consecutive bytes, in this emerging 5 1:00 insert a 0, at the end of four data sent and the next synchronization not started before, sending seven FH, then the middle is not inserted
Platform: | Size: 363520 | Author: chengp | Hits:

[OS program] Agony

Description: 隐藏文件，注册表，端口，内核的ROOTKIT！-hidden documents, the registry, port, the kernel of ROOTKIT!
Platform: | Size: 36864 | Author: 于皓 | Hits:

[Delphi VCL] hide_process

Description: DELPHI下隐藏进程的几种方法,附完整源码,包括SDK-DELPHI process under the hidden several ways, with complete source code, including the SDK
Platform: | Size: 96256 | Author: 休格兰 | Hits:

[VC/MFC] IFS4

Description: IFS 学习心得-4-文件系统过滤器驱动程序基本框架.doc -IFS learned-4- file system filter driver for the basic framework. Doc
Platform: | Size: 3072 | Author: | Hits:

[OS program] APC

Description: 使用QueueUserAPC技术插入进程代码，可以躲过部分主动防御软件的检测-QueueUserAPC process technology used to insert the code, you can avoid some of the detection of active defense software
Platform: | Size: 1024 | Author: 李星 | Hits:

[Software Engineering] Silberman-Butler

Description: 鼎鼎大名的反rootkit工具RAIDE的官方设计文档！-Anti-rootkit tools鼎鼎大名raide the official design document!
Platform: | Size: 325632 | Author: songlei | Hits:

[Driver Develop] sysMonitor

Description: 一个实现系统注册表，进程启动和驱动加载的主动防御源代码-Realize a system registry, the process of start-up and drive to load the source code of the active defense
Platform: | Size: 408576 | Author: 石大 | Hits:

[Windows Develop] K

Description:
Platform: | Size: 3604480 | Author: 徐善 | Hits:

Category

Source Code

Web/Internet

Develop Tools

Document

Other

Search in results

OS

Platform

Language

File Type

Search list