Skip to content

[教程] [收集] Window Kernel Hack

Directory actions

More options

Directory actions

More options

Latest commit

 

History

History
 
 

[教程] [收集] Window Kernel Hack

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
Minifilter文件监控/Minifilter_FileMonitor_Test
Minifilter文件监控/Minifilter_FileMonitor_Test
 
 
SSDT HOOK
SSDT HOOK
 
 
TDI网络通信
TDI网络通信
 
 
WFP网络监控/WFP_Network_Test
WFP网络监控/WFP_Network_Test
 
 
反Minifilter文件监控/Minifilter_Enum_Remove_Test
反Minifilter文件监控/Minifilter_Enum_Remove_Test
 
 
反对象监控/ObRegisterCallbacks_Enum_Remove_Test
反对象监控/ObRegisterCallbacks_Enum_Remove_Test
 
 
反模块加载监控/PsSetLoadImageNotifyRoutine_Enum_Remove_Test
反模块加载监控/PsSetLoadImageNotifyRoutine_Enum_Remove_Test
 
 
反注册表监控/CmRegisterCallback_Enum_Remove_Test
反注册表监控/CmRegisterCallback_Enum_Remove_Test
 
 
反线程创建监控/PsSetCreateThreadNotifyRoutine_Enum_Remove_Test
反线程创建监控/PsSetCreateThreadNotifyRoutine_Enum_Remove_Test
 
 
反进程创建监控/PsSetCreateProcessNotifyRoutine_Enum_Remove_Test
反进程创建监控/PsSetCreateProcessNotifyRoutine_Enum_Remove_Test
 
 
对象监控/ObRegisterCallbacks_Test
对象监控/ObRegisterCallbacks_Test
 
 
强制结束进程/ForceKillProcess_Test
强制结束进程/ForceKillProcess_Test
 
 
文件保护/IrpFileProtect_Test
文件保护/IrpFileProtect_Test
 
 
文件强删/IrpFileForceDelete_Test
文件强删/IrpFileForceDelete_Test
 
 
模块加载监控/PsSetLoadImageNotifyRoutine_Test
模块加载监控/PsSetLoadImageNotifyRoutine_Test
 
 
注册表监控/CmRegisterCallback_Test
注册表监控/CmRegisterCallback_Test
 
 
过Patch Guard的进程隐藏/EnumProcess_ActiveProcessLinks_Test
过Patch Guard的进程隐藏/EnumProcess_ActiveProcessLinks_Test
 
 
过Patch Guard的驱动隐藏/EnumDriver_Test
过Patch Guard的驱动隐藏/EnumDriver_Test
 
 
进程创建监控/PsSetCreateProcessNotifyRoutineEx_Test
进程创建监控/PsSetCreateProcessNotifyRoutineEx_Test
 
 
键盘监听/KeyboardLog_Test
键盘监听/KeyboardLog_Test
 
 
README.md
README.md
 
 

README.md

说明

这里的教程是《WINDOWS黑客编程技术详解》一书中的配套源码

我觉得在一定情况下你们会需要这些教程的