Search - ring0

Search - ring0 - List

【Windows Develop】 keyspy DL : 0: ring3下读取物理地址执行ring0代码，在ring0代码嵌入汇编指令直接读取I/O端口。优秀的键盘记录源码.-ring3 to read the physical address of the next Executive ring0 code, the code embedded in the ring0 assembly instructions directly read I/O ports. Excellent keylogger source code
Update : 2024-05-04 Size : 107520 Publisher : kingmax
【OS program】 rtl DL : 0: RTL special definitions for ring0 & ring3 in one header.
Update : 2024-05-04 Size : 8192 Publisher : Pudn4everFF
【OS Develop】 vs DL : 0: My Mini 操作系统源码.目前已经实现的功能：阶段1： 1 BootSect 2 Kernel Loader （已经进入保护模式，并且将必要的参数传递给Kernel） 3 Kernel (开启页式存储，物理内存的简单管理，为中断提供了一套基本的接口，利用Bget建立了一个简单的堆) 阶段2： 1 优化了一部分代码，包括内核堆，内核栈的重新布置 2 初始化了一个TSS，用以处理特权级变化 3 将GDT从以前的KernelLoader空间到自己的空间 4 引入进程的概念（用双向链表来管理） 5 实现了第一个Ring3进程（但是此刻IF位置0，暂不响应时钟中断）阶段3： 1 现在系统中有2个进程 2 开启时钟中断，对进程进行调度 3 现在每个进程有两个栈（Ring3栈，Ring0内核栈），中断处理程序也有了自己的内核栈，这样子，无论你的ISR多么复杂都不会乱了。阶段4： 1 优化了中断处理过程，实现了中断的重入 2 实现了进程优先级的概念 3 开启键盘中断，进程中可以可以读取键盘输入（代码模仿，还有BUG，以后修正）未来计划（如果谁有兴趣一起做的话，welcome ！）： 1 继续完善键盘输入功能 2 将每个任务（进程）的输入，输出隔离开来-My Mini operating system source code Already implemented features: Phase 1: 1 BootSect 2 Kernel Loader (has entered the protected mode, and the necessary parameters to the Kernel) 3 Kernel (open page storage, a simple physical memory management, interrupt provides a basic set of interfaces, using Bget created a simple heap) Phase 2: An optimized part of the code, including kernel stack, kernel stack of re-arrangement 2 Initializes a TSS, to deal with privilege level change 3 to GDT from the previous KernelLoader space to their own space 4 introduces the concept of the process (using two-way linked list to manage) 5 to achieve the first Ring3 process (but at the moment IF position 0, they will not respond to the clock interrupt) Stage 3: 1 Now the system has two processes 2 Turn the clock interrupt, the process scheduling 3, each process now has two stacks (Ring3 stack, Ring0 kernel stack), the interrupt handler also has its own kernel stack, this way, no ma
Update : 2024-05-04 Size : 67584 Publisher : 程光
【OS program】 Ring3RunRing0Code DL : 0: 无驱动Ring3执行Ring0层的代码，爱好安全的朋友值得研究研究-No driver Ring3 Executive Ring0 layer code, loving Hacker s friends, is worth studying the Code
Update : 2024-05-04 Size : 1764352 Publisher : 黄文彬
【Driver Develop】 BehaviorMon DL : 3: 东辉主动防御源代码1.8.7！包含进程拦截、注册表拦截、进程强杀、文件强删等一系列高水平代码！发表在黑客防线杂志！-Donghui active defense source code 1.8.7! Contains the process block, registry interceptors, strong kill the process, file deletion and a series of strong high-level code! Line of magazines published in the hacker!
Update : 2024-05-04 Size : 2359296 Publisher : 虎子
【Disk Tools】 mini_ext2 DL : 0: 代码功能： 1、利用io端口读磁盘 2、读ext2文件系统中的文件注意： 1、代码只在ring0状态下测试通过。 2、代码没有读分区表的功能，group0的位置是通过查看磁盘文件得来的，每个磁盘的group0的位置可能不同。 3、此代码仅作为用io端口读磁盘和读ext2文件系统的参考代码。-Code function: 1, 2, using io-port read disk, read ext2 file system files Note: 1, the code only in ring0 state test. 2, the code does not read the partition table of the function, group0 position is obtained by viewing the disk file, each disk group0 location may be different. 3, this code only as a disk with the io-port read and read ext2 file system reference code.
Update : 2024-05-04 Size : 6144 Publisher : 张志强
【Other】 WindowsDrive DL : 0: Windows驱动编程入门,主要是在Windows平台下使用wdk编写ring0级代码-Windows driver document
Update : 2024-05-04 Size : 70656 Publisher : 杨洪强
【Windows Develop】 K-Trojan_5 DL : 0: Grab pass: Edialer, The Bat!, Outlook Express, Internet Explorer, ICQ[2003 & Lite], FAR, Windows Commander, Dial-Up [98 & NT]. List of installed program RING0 FW bypass throught hide IExplorer window Intercept passwords: mail, FTP, auth [base64] web Formgrabber Selfdelete (if need) WORM 3 upgrade link Search file by mask && upload to web-server
Update : 2024-05-04 Size : 626688 Publisher : Andrey
【Delphi VCL】 4 DL : 0: delphi 内嵌汇编，使代码运行在Ring0 所需要的驱动文件一并放在压缩包里了。-delphi embedded assembly, make the code run in Ring0 driver files needed have been placed in the compression file.
Update : 2024-05-04 Size : 181248 Publisher : 施坤
【Delphi VCL】 DRIVER_ring0 DL : 0: 驱动进RING0，代码可能稍微老一点，但是好使哦，希望对大家有帮助！-Driven into the RING0, the code might be slightly old point, but so Oh, we want to help!
Update : 2024-05-04 Size : 627712 Publisher : 天阳
【Driver Develop】 TaskMgrRing0 DL : 0: Task Manager at ring0 driver source code
Update : 2024-05-04 Size : 2048 Publisher : mehack
【OS program】 qwe DL : 0: 程序用内核驱动的方式进入ring0,然后访问EPROCESS结构,在EPROCESS结构中找到进程链,从而可实现进程的枚举,但是由于PID 为0的系统进程Idle并没有在这个链上.所以通过这种方法自然也就找不出它来.程序输出可以用softice或DebugView工具查看. 本程序只在XP下调试通过.-Procedures with the way the kernel driver into the ring0, then visit EPROCESS structure, the structure found in EPROCESS process chain, which can realize the process of enumeration, but because the system process PID to 0 in the Idle and no chain. So by this method naturally can not find it to. process output can softice or DebugView tool to view. This program only under XP through debugging.
Update : 2024-05-04 Size : 2048 Publisher : zhangliang84
【Hook api】 HOOK-class DL : 0: HOOK技术的Ring0级进程保护组件设计与实现-HOOK-class process technology Ring0 component design and implementation of protection
Update : 2024-05-04 Size : 655360 Publisher : jiouj8
【Windows Develop】 r3_to_r0 DL : 0: 从ring3切换到ring0的代码,windows内核代码-Switch to ring0 from ring3 code, windows kernel code
Update : 2024-05-04 Size : 4096 Publisher : 佩雷拉
【OS program】 findhideprocess DL : 0: 检测隐藏进程，多个实例，从ring3到ring0都有，很好的参考资料-Detect hidden processes, multiple instances, from ring3 to ring0 have, a very good reference
Update : 2024-05-04 Size : 807936 Publisher : wlf
【Other】 ByASMcode DL : 0: ASM纯净,编写的病毒感染的文件、变形入口代码,自己加密等功能,是一种EPO的没有任何病毒签名,都是为了对抗反病毒软件的特征码抗病毒、行为杀毒及虚拟机抗病毒、现有的代码,未提供任何破坏功能,但可以积极的感染可执行文件和感染的文件很难恢复, 请注意除了这事还提供了Ring0功能,主要用于感染运行中的可执行文件-Pure by ASM virus written, has infected file, entry code deformation, oneself encryption, and other functions, is a EPO without any Signature of virus, are designed to confront the antivirus software of flexlm antivirus, behavior antivirus and virtual machine antivirus, existing code Didn t provide any destruction of functions, but can active infect executable files, and infected file is hard to restore, which please note In addition to this thing also provides Ring0 function, mainly for the infection in operation of the executable file
Update : 2024-05-04 Size : 11264 Publisher : 才昆
【Hook api】 hookzwquery DL : 0: 用汇编实在Ring3 和 Ring0 下的Inline HooK-It Ring3 and assembly under the Inline HooK Ring0
Update : 2024-05-04 Size : 14336 Publisher : 星痕
【Crack Hack】 725346DESPSample DL : 0: 好吧，这是个DES加密程序的源代码，但是解密似乎有点问题-Get 360 of the super powerful source code, the use of the Ring0? Or Ring3? Forget ... ... to write a long time ago ... ...
Update : 2024-05-04 Size : 2048 Publisher : Kaspersky
【Hook api】 RestoreShadowInUser DL : 0: Ring0下恢复SSDT Shadow，在用户端的情况下恢复系统描述表-Under the recovery Ring0 SSDT Shadow, in the case of the client to restore the system description
Update : 2024-05-04 Size : 19456 Publisher : 小梦
【e-language】 ERing0 DL : 0: Ring0结束进程----易语言编写驱动-Ring0 end of the process of language-driven and easy----
Update : 2024-05-04 Size : 872448 Publisher : zmz

« 1 2 ... 4 5 6 7 8 910 11 12 13 14 »