文件名称:IDThjack
- 所属分类：
- 钩子与API截获
- 资源属性：
- [Windows] [Visual C] [源码]
- 上传时间：
- 2012-11-26
- 文件大小：
- 44kb
- 下载次数：
- 0次
- 提 供 者：
- 田*
- 相关连接：
- 无
- 下载说明：
- 别用迅雷下载，失败请重下，重下不扣分！
介绍说明－－下载内容均来自于网络，请自行研究使用
隐藏IDT HOOK，可以过xuetr，PowerTool。发现windbg !idt命令也看不出，看来MS的哥们也偷懒
原理是利用了选择子。直接发码，关于IDT 的知识我就不科普了-Hidden IDT HOOK, can lead xuetr, PowerTool. Found windbg! Idt command can not see, it seems the man is lazy MS
Is the use of a selector. Send code directly on the IDT is not science knowledge I had
原理是利用了选择子。直接发码，关于IDT 的知识我就不科普了-Hidden IDT HOOK, can lead xuetr, PowerTool. Found windbg! Idt command can not see, it seems the man is lazy MS
Is the use of a selector. Send code directly on the IDT is not science knowledge I had
(系统自动生成,下载前可以参看下载内容)
下载文件列表
IDThjack\buildchk_wxp_x86.log
........\buildchk_wxp_x86.wrn
........\clean.bat
........\common.h
........\ddkbuild.cmd
........\IDThjack.c
........\IDThjack.dsp
........\IDThjack.dsw
........\IDThjack.h
........\IDThjack.ncb
........\IDThjack.opt
........\IDThjack.plg
........\IDThjack.positions
........\makefile
........\mybuild.bat
........\objchk_wxp_x86\i386\IDThjack.sys
........\readme.txt
........\sources
........\struct.h
........\objchk_wxp_x86\i386
........\objchk_wxp_x86
IDThjack
........\buildchk_wxp_x86.wrn
........\clean.bat
........\common.h
........\ddkbuild.cmd
........\IDThjack.c
........\IDThjack.dsp
........\IDThjack.dsw
........\IDThjack.h
........\IDThjack.ncb
........\IDThjack.opt
........\IDThjack.plg
........\IDThjack.positions
........\makefile
........\mybuild.bat
........\objchk_wxp_x86\i386\IDThjack.sys
........\readme.txt
........\sources
........\struct.h
........\objchk_wxp_x86\i386
........\objchk_wxp_x86
IDThjack