麦洛克菲价值9000元的培训课程

麦洛克菲是一家有 10 年历史的 IT 培训机构，主打核心安全课程，采用 “算法内核安全” 独创教学方法和 4 步走课程体系，专注于二进制安全，包含内核安全、移动安全、WEB 安全、漏洞挖掘、逆向工程等热门方向，八个月课程。

类型：	课程,元的培训课程,防火墙技术,病毒分析,逆向工程,驱动安全,安全技术课程,技术培训,IT,

文件预览

资源不是实时更新，具体以网盘链接为准！

点我预览网盘文件内容

「」麦洛克菲价值9000元的培训课程

1驱动安全

1firstl-Hello

dbgdemo

bsod

main.c (1.64 KB)

makefile (374.0 B)

SOURCES (75.0 B)

UcOperDrv.dsp (4.21 KB)

UcOperDrv.dsw (541.0 B)

crash

crash.cpp (245.0 B)

crash.dsp (4.42 KB)

crash.dsw (533.0 B)

ReadMe.txt (1.17 KB)

StdAfx.cpp (292.0 B)

StdAfx.h (769.0 B)

dpp

crash.cpp (392.0 B)

crash.dsp (4.42 KB)

crash.dsw (533.0 B)

ReadMe.txt (1.17 KB)

StdAfx.cpp (292.0 B)

StdAfx.h (769.0 B)

kenerldbg

Driver

main.c (4.87 KB)

makefile (374.0 B)

SOURCES (74.0 B)

InstallDrv

main.cpp (6.33 KB)

main.dsp (3.30 KB)

main.dsw (531.0 B)

Demo

1HelloWorld

main.c (310.0 B)

makefile (374.0 B)

SOURCES (74.0 B)

2DriverModel

NTModel

main.c (5.41 KB)

makefile (374.0 B)

ntdrv.c (5.32 KB)

SOURCES (76.0 B)

WDMModel

main.c (5.17 KB)

makefile (374.0 B)

SOURCES (77.0 B)

WDMModelDrv.inf (2.78 KB)

3InstallDrv

main.cpp (6.73 KB)

main.dsp (3.30 KB)

main.dsw (531.0 B)

ArrayOverFlow

ArrayOverFlow.cpp (292.0 B)

ArrayOverFlow.dsp (4.51 KB)

ArrayOverFlow.dsw (549.0 B)

ReadMe.txt (1.22 KB)

StdAfx.cpp (300.0 B)

StdAfx.h (667.0 B)

calling

Debug

calling.cpp (413.0 B)

calling.dsp (4.44 KB)

calling.dsw (539.0 B)

ReadMe.txt (1.19 KB)

StdAfx.cpp (294.0 B)

StdAfx.h (769.0 B)

conststr

conststr.cpp (302.0 B)

conststr.dsp (4.45 KB)

conststr.dsw (541.0 B)

ReadMe.txt (1.19 KB)

StdAfx.cpp (295.0 B)

StdAfx.h (769.0 B)

FuncAddress

FuncAddress.cpp (465.0 B)

FuncAddress.dsp (4.49 KB)

FuncAddress.dsw (547.0 B)

ReadMe.txt (1.21 KB)

StdAfx.cpp (298.0 B)

StdAfx.h (769.0 B)

heapoverflow

heapoverflow.cpp (498.0 B)

heapoverflow.dsp (4.50 KB)

heapoverflow.dsw (549.0 B)

ReadMe.txt (1.21 KB)

StdAfx.cpp (299.0 B)

StdAfx.h (769.0 B)

overflow

overflow.cpp (1.00 KB)

overflow.dsp (4.45 KB)

overflow.dsw (541.0 B)

ReadMe.txt (1.19 KB)

StdAfx.cpp (295.0 B)

StdAfx.h (667.0 B)

parameter

parameter.cpp (420.0 B)

parameter.dsp (4.46 KB)

parameter.dsw (543.0 B)

ReadMe.txt (1.20 KB)

StdAfx.cpp (296.0 B)

StdAfx.h (769.0 B)

PointerCheck

PointerCheck.cpp (506.0 B)

PointerCheck.dsp (4.50 KB)

PointerCheck.dsw (547.0 B)

ReadMe.txt (1.21 KB)

StdAfx.cpp (299.0 B)

StdAfx.h (667.0 B)

ProcMon

makefile (374.0 B)

ProcWatch.c (6.23 KB)

SOURCES (80.0 B)

shellcode

ReadMe.txt (1.20 KB)

shellcode.cpp (2.45 KB)

shellcode.dsp (4.46 KB)

shellcode.dsw (543.0 B)

StdAfx.cpp (296.0 B)

StdAfx.h (769.0 B)

shellcodegen

shellcodegen.cpp (479.0 B)

shellcodegen.dsp (4.50 KB)

shellcodegen.dsw (549.0 B)

StdAfx.cpp (299.0 B)

StdAfx.h (769.0 B)

static

ReadMe.txt (1.18 KB)

static.cpp (423.0 B)

static.dsp (4.43 KB)

static.dsw (537.0 B)

StdAfx.cpp (293.0 B)

StdAfx.h (769.0 B)

某知名公司笔试题

未命名11.jpg (60.8 KB)

未命名3333.jpg (100.5 KB)

深入学习文档

c-c 里的堆区栈区静态区文字常量区程序代码区-xingzuzi-ChinaUnix博客.mht (476.6 KB)

打造Windows下自己的ShellCode --中关村在线.mht (697.5 KB)

关于调用约定(cdecl、fastcall、thiscall) - 惡魔的日志 - 网易博客.htm (76.9 KB)

很經典的講解--------缓冲区溢出的原理和实践(Phrack).mht (86.5 KB)

malloc 堆溢出的疑惑 =m=~ 望大牛指点~_Casper Maybe Kid__百度空间.mht (831.7 KB)

Q版缓冲区溢出教程.doc (9.76 MB)

浅入浅出Liunx Shellcode_安全技巧_IT专家网.mht (88.7 KB)

浅入浅出Liunx Shellcode（下）_浅入浅出Liunx Shellcode_安全技巧_IT专家网.mht (82.0 KB)

windows平台下的堆溢出利用技术.doc (633.5 KB)

运用IRP.pdf (296.6 KB)

总结windows下堆溢出的三种利用方式-td-学院-黑客基地.mht (255.9 KB)

hello world.txt

麦洛克菲第一课.doc (3.22 MB)

麦洛克菲第一课.ppt (920.5 KB)

麦洛克菲内核调试.ppt (281.5 KB)

麦洛克菲作业讲解.ppt (116.5 KB)

驱动开发配置环境指南.txt (1.68 KB)

1firstl-Hello_课堂笔记

dbgdemo

bsod

main.c (1.64 KB)

makefile (374.0 B)

SOURCES (75.0 B)

UcOperDrv.dsp (4.21 KB)

UcOperDrv.dsw (541.0 B)

crash

crash.cpp (245.0 B)

crash.dsp (4.42 KB)

crash.dsw (533.0 B)

ReadMe.txt (1.17 KB)

StdAfx.cpp (292.0 B)

StdAfx.h (769.0 B)

dpp

crash.cpp (392.0 B)

crash.dsp (4.42 KB)

crash.dsw (533.0 B)

ReadMe.txt (1.17 KB)

StdAfx.cpp (292.0 B)

StdAfx.h (769.0 B)

kenerldbg

Driver

main.c (4.87 KB)

makefile (374.0 B)

SOURCES (74.0 B)

InstallDrv

main.cpp (6.33 KB)

main.dsp (3.30 KB)

main.dsw (531.0 B)

Demo

1HelloWorld

main.c (310.0 B)

makefile (374.0 B)

SOURCES (74.0 B)

2DriverModel

NTModel

main.c (5.41 KB)

makefile (374.0 B)

ntdrv.c (5.32 KB)

SOURCES (76.0 B)

WDMModel

main.c (5.17 KB)

makefile (374.0 B)

SOURCES (77.0 B)

WDMModelDrv.inf (2.78 KB)

3InstallDrv

main.cpp (6.73 KB)

main.dsp (3.30 KB)

main.dsw (531.0 B)

ArrayOverFlow

ArrayOverFlow.cpp (292.0 B)

ArrayOverFlow.dsp (4.51 KB)

ArrayOverFlow.dsw (549.0 B)

ReadMe.txt (1.22 KB)

StdAfx.cpp (300.0 B)

StdAfx.h (667.0 B)

calling

Debug

calling.cpp (413.0 B)

calling.dsp (4.44 KB)

calling.dsw (539.0 B)

ReadMe.txt (1.19 KB)

StdAfx.cpp (294.0 B)

StdAfx.h (769.0 B)

conststr

conststr.cpp (302.0 B)

conststr.dsp (4.45 KB)

conststr.dsw (541.0 B)

ReadMe.txt (1.19 KB)

StdAfx.cpp (295.0 B)

StdAfx.h (769.0 B)

FuncAddress

FuncAddress.cpp (465.0 B)

FuncAddress.dsp (4.49 KB)

FuncAddress.dsw (547.0 B)

ReadMe.txt (1.21 KB)

StdAfx.cpp (298.0 B)

StdAfx.h (769.0 B)

heapoverflow

heapoverflow.cpp (498.0 B)

heapoverflow.dsp (4.50 KB)

heapoverflow.dsw (549.0 B)

ReadMe.txt (1.21 KB)

StdAfx.cpp (299.0 B)

StdAfx.h (769.0 B)

overflow

overflow.cpp (1.00 KB)

overflow.dsp (4.45 KB)

overflow.dsw (541.0 B)

ReadMe.txt (1.19 KB)

StdAfx.cpp (295.0 B)

StdAfx.h (667.0 B)

parameter

parameter.cpp (420.0 B)

parameter.dsp (4.46 KB)

parameter.dsw (543.0 B)

ReadMe.txt (1.20 KB)

StdAfx.cpp (296.0 B)

StdAfx.h (769.0 B)

PointerCheck

PointerCheck.cpp (506.0 B)

PointerCheck.dsp (4.50 KB)

PointerCheck.dsw (547.0 B)

ReadMe.txt (1.21 KB)

StdAfx.cpp (299.0 B)

StdAfx.h (667.0 B)

ProcMon

makefile (374.0 B)

ProcWatch.c (6.23 KB)

SOURCES (80.0 B)

shellcode

ReadMe.txt (1.20 KB)

shellcode.cpp (2.45 KB)

shellcode.dsp (4.46 KB)

shellcode.dsw (543.0 B)

StdAfx.cpp (296.0 B)

StdAfx.h (769.0 B)

shellcodegen

shellcodegen.cpp (479.0 B)

shellcodegen.dsp (4.50 KB)

shellcodegen.dsw (549.0 B)

StdAfx.cpp (299.0 B)

StdAfx.h (769.0 B)

static

ReadMe.txt (1.18 KB)

static.cpp (423.0 B)

static.dsp (4.43 KB)

static.dsw (537.0 B)

StdAfx.cpp (293.0 B)

StdAfx.h (769.0 B)

课堂笔记

课堂笔记.docx (69.8 KB)

课堂作业

Homework0317

Algorithm_ReserveStr

Debug

BuildLog.htm (8.09 KB)

Algorithm_ReserveStr.cpp (995.0 B)

Algorithm_ReserveStr.vcproj (4.44 KB)

Algorithm_ReserveStr.vcproj.TENCENT.zalzhou.user (1.39 KB)

Algorithm_ReserveStr.vcproj.zal-PC.zal.user (1.38 KB)

Algorithm_ReserveStr.vcproj.zq-pc.Administrator.user (1.37 KB)

ReadMe.txt (1.35 KB)

stdafx.cpp (307.0 B)

stdafx.h (556.0 B)

Algorithm_RotateStr

Debug

Algorithm_RotateStr.exe.embed.manifest (406.0 B)

Algorithm_RotateStr.exe.embed.manifest.res (472.0 B)

Algorithm_RotateStr.exe.intermediate.manifest (388.0 B)

Algorithm_RotateStr.obj (8.32 KB)

Algorithm_RotateStr.pch (1.06 MB)

BuildLog.htm (13.9 KB)

mt.dep (67.0 B)

stdafx.obj (11.5 KB)

vc80.idb (67.0 KB)

vc80.pdb (108.0 KB)

Algorithm_RotateStr.cpp (1.03 KB)

Algorithm_RotateStr.vcproj (4.43 KB)

Algorithm_RotateStr.vcproj.TENCENT.zalzhou.user (1.39 KB)

Algorithm_RotateStr.vcproj.zq-pc.Administrator.user (1.37 KB)

ReadMe.txt (1.35 KB)

stdafx.cpp (306.0 B)

stdafx.h (556.0 B)

Alogorithm_ReserveStrByWord

Debug

Alogorithm_ReserveStrByWord.exe.embed.manifest (406.0 B)

Alogorithm_ReserveStrByWord.exe.embed.manifest.res (472.0 B)

Alogorithm_ReserveStrByWord.exe.intermediate.manifest (388.0 B)

Alogorithm_ReserveStrByWord.obj (9.72 KB)

Alogorithm_ReserveStrByWord.pch (1.06 MB)

BuildLog.htm (14.6 KB)

mt.dep (67.0 B)

stdafx.obj (11.6 KB)

vc80.idb (67.0 KB)

vc80.pdb (108.0 KB)

Alogorithm_ReserveStrByWord.cpp (1.51 KB)

Alogorithm_ReserveStrByWord.vcproj (4.46 KB)

Alogorithm_ReserveStrByWord.vcproj.TENCENT.zalzhou.user (1.39 KB)

Alogorithm_ReserveStrByWord.vcproj.zq-pc.Administrator.user (1.37 KB)

ReadMe.txt (1.39 KB)

stdafx.cpp (314.0 B)

stdafx.h (556.0 B)

debug

Algorithm_ReserveStr.ilk (308.6 KB)

Algorithm_RotateStr.exe (40.0 KB)

Algorithm_RotateStr.ilk (299.9 KB)

Algorithm_RotateStr.pdb (347.0 KB)

Alogorithm_ReserveStrByWord.exe (40.0 KB)

Alogorithm_ReserveStrByWord.ilk (300.5 KB)

Alogorithm_ReserveStrByWord.pdb (347.0 KB)

ExchangeData.ilk (295.5 KB)

GetOneNumbersOfIntegerBinary.ilk (297.5 KB)

GetSystemPriority.ilk (297.6 KB)

MallocMemory.ilk (307.1 KB)

ExchangeData

Debug

BuildLog.htm (7.53 KB)

ExchangeData.cpp (1.40 KB)

ExchangeData.vcproj (3.64 KB)

ExchangeData.vcproj.TENCENT.zalzhou.user (1.39 KB)

ExchangeData.vcproj.zal-PC.zal.user (1.38 KB)

ExchangeData.vcproj.zq-pc.Administrator.user (1.37 KB)

GetOneNumbersOfIntegerBinary

Debug

BuildLog.htm (14.4 KB)

GetOneNumbersOfIntegerBinary.cpp (734.0 B)

GetOneNumbersOfIntegerBinary.vcproj (4.46 KB)

GetOneNumbersOfIntegerBinary.vcproj.TENCENT.zalzhou.user (1.39 KB)

GetOneNumbersOfIntegerBinary.vcproj.zal-PC.zal.user (1.38 KB)

GetOneNumbersOfIntegerBinary.vcproj.zq-pc.Administrator.user (1.37 KB)

ReadMe.txt (1.40 KB)

stdafx.cpp (315.0 B)

stdafx.h (536.0 B)

GetSystemPriority

Debug

BuildLog.htm (12.2 KB)

GetSystemPriority.cpp (725.0 B)

GetSystemPriority.vcproj (4.10 KB)

GetSystemPriority.vcproj.TENCENT.zalzhou.user (1.39 KB)

GetSystemPriority.vcproj.zal-PC.zal.user (1.38 KB)

GetSystemPriority.vcproj.zq-pc.Administrator.user (1.37 KB)

ReadMe.txt (1.33 KB)

stdafx.cpp (304.0 B)

stdafx.h (536.0 B)

MallocMemory

Debug

BuildLog.htm (13.9 KB)

MallocMemory.cpp (739.0 B)

MallocMemory.vcproj (4.41 KB)

MallocMemory.vcproj.TENCENT.zalzhou.user (1.39 KB)

MallocMemory.vcproj.zq-pc.Administrator.user (1.37 KB)

ReadMe.txt (1.30 KB)

stdafx.cpp (299.0 B)

stdafx.h (579.0 B)

Homework0327.ncb (6.51 MB)

Homework0327.sln (4.83 KB)

Homework0324

debug

SearchSubString.exe (40.0 KB)

SearchSubString.ilk (296.6 KB)

SearchSubString.pdb (347.0 KB)

Stack.exe (40.0 KB)

Stack.ilk (298.8 KB)

Stack.pdb (299.0 KB)

release

SearchSubString

Debug

BuildLog.htm (13.3 KB)

mt.dep (67.0 B)

SearchSubString.exe.embed.manifest (406.0 B)

SearchSubString.exe.embed.manifest.res (472.0 B)

SearchSubString.exe.intermediate.manifest (388.0 B)

SearchSubString.obj (6.00 KB)

SearchSubString.pch (1.06 MB)

stdafx.obj (11.4 KB)

vc80.idb (67.0 KB)

vc80.pdb (108.0 KB)

ReadMe.txt (1.32 KB)

SearchSubString.cpp (854.0 B)

SearchSubString.vcproj (4.42 KB)

SearchSubString.vcproj.TENCENT.zalzhou.user (1.39 KB)

SearchSubString.vcproj.zq-pc.Administrator.user (1.37 KB)

stdafx.cpp (302.0 B)

stdafx.h (537.0 B)

Stack

Debug

BuildLog.htm (11.1 KB)

mt.dep (67.0 B)

Stack.exe.embed.manifest (406.0 B)

Stack.exe.embed.manifest.res (472.0 B)

Stack.exe.intermediate.manifest (388.0 B)

stack.obj (6.01 KB)

vc80.idb (35.0 KB)

vc80.pdb (52.0 KB)

Release

BuildLog.htm (7.38 KB)

stack.cpp (642.0 B)

Stack.vcproj (3.89 KB)

Stack.vcproj.TENCENT.zalzhou.user (1.39 KB)

Homework0324.ncb (571.0 KB)

Homework0324.sln (1.62 KB)

某知名公司笔试题

未命名11.jpg (60.8 KB)

未命名3333.jpg (100.5 KB)

深入学习文档

0720A5_360.MJ0011_Reversing Windows8-Interesting Features of Kernel Security.pdf (845.0 KB)

c-c 里的堆区栈区静态区文字常量区程序代码区-xingzuzi-ChinaUnix博客.mht (476.6 KB)

打造Windows下自己的ShellCode --中关村在线.mht (697.5 KB)

关于调用约定(cdecl、fastcall、thiscall) - 惡魔的日志 - 网易博客.htm (76.9 KB)

很經典的講解--------缓冲区溢出的原理和实践(Phrack).mht (86.5 KB)

malloc 堆溢出的疑惑 =m=~ 望大牛指点~_Casper Maybe Kid__百度空间.mht (831.7 KB)

内核驱动漏洞与攻击预防--by MJ0011.pdf (302.1 KB)

Q版缓冲区溢出教程.doc (9.76 MB)

浅入浅出Liunx Shellcode_安全技巧_IT专家网.mht (88.7 KB)

浅入浅出Liunx Shellcode（下）_浅入浅出Liunx Shellcode_安全技巧_IT专家网.mht (82.0 KB)

windows平台下的堆溢出利用技术.doc (633.5 KB)

运用IRP.pdf (296.6 KB)

总结windows下堆溢出的三种利用方式-td-学院-黑客基地.mht (255.9 KB)

hello world.txt

麦洛克菲第一课.doc (3.22 MB)

麦洛克菲第一课.ppt (973.5 KB)

麦洛克菲内核调试.ppt (291.5 KB)

麦洛克菲作业讲解.ppt (158.0 KB)

驱动开发配置环境指南.txt (1.68 KB)

2secondl-FileRegUnicode

Demo

Crash

main.c (1.64 KB)

makefile (374.0 B)

SOURCES (75.0 B)

UcOperDrv.dsp (4.21 KB)

UcOperDrv.dsw (541.0 B)

DelFileDriver

debug

i386

DelfileDrv.sys (7.00 KB)

INSTDRV.EXE (32.0 KB)

DelFile.c (11.5 KB)

DelFile.h (1.75 KB)

MAKEFILE (267.0 B)

SOURCES (114.0 B)

FileOperDrv

FileOperDrv.dsp (4.23 KB)

FileOperDrv.dsw (545.0 B)

main.c (15.8 KB)

makefile (374.0 B)

SOURCES (77.0 B)

RegOperDrv

main.c (14.4 KB)

makefile (374.0 B)

RegOperDrv.dsp (4.22 KB)

RegOperDrv.dsw (543.0 B)

SOURCES (76.0 B)

UcOperDrv

main.c (3.01 KB)

makefile (374.0 B)

SOURCES (75.0 B)

UcOperDrv.dsp (4.21 KB)

UcOperDrv.dsw (541.0 B)

file reg unicode.txt

麦洛克菲第二课.doc (739.0 KB)

麦洛克菲第二课.ppt (255.5 KB)

2secondl-FileRegUnicode_课堂笔记

Demo

Crash

main.c (1.64 KB)

makefile (374.0 B)

SOURCES (75.0 B)

UcOperDrv.dsp (4.21 KB)

UcOperDrv.dsw (541.0 B)

DelFileDriver

debug

i386

DelfileDrv.sys (7.00 KB)

INSTDRV.EXE (32.0 KB)

DelFile.c (12.2 KB)

DelFile.h (1.75 KB)

MAKEFILE (267.0 B)

SOURCES (114.0 B)

DelFileR3

CloseHandleByMe.rar (4.76 KB)

FileOperDrv

FileOperDrv.dsp (4.23 KB)

FileOperDrv.dsw (545.0 B)

main.c (15.8 KB)

makefile (374.0 B)

SOURCES (77.0 B)

RegOperDrv

main.c (14.4 KB)

makefile (374.0 B)

RegOperDrv.dsp (4.22 KB)

RegOperDrv.dsw (543.0 B)

SOURCES (76.0 B)

UcOperDrv

main.c (3.01 KB)

makefile (374.0 B)

SOURCES (75.0 B)

UcOperDrv.dsp (4.21 KB)

UcOperDrv.dsw (541.0 B)

课堂笔记

课堂笔记.docx (35.3 KB)

课堂作业

Homework0410

debug

Ipv4ToInt32.exe (40.0 KB)

Ipv4ToInt32.ilk (302.1 KB)

Ipv4ToInt32.pdb (347.0 KB)

Ipv4ToInt32

Debug

BuildLog.htm (13.6 KB)

Ipv4ToInt32.exe.embed.manifest (406.0 B)

Ipv4ToInt32.exe.embed.manifest.res (472.0 B)

Ipv4ToInt32.exe.intermediate.manifest (388.0 B)

Ipv4ToInt32.obj (10.2 KB)

Ipv4ToInt32.pch (1.06 MB)

mt.dep (67.0 B)

stdafx.obj (10.6 KB)

vc80.idb (59.0 KB)

vc80.pdb (108.0 KB)

Ipv4ToInt32.cpp (2.47 KB)

Ipv4ToInt32.vcproj (4.41 KB)

Ipv4ToInt32.vcproj.TENCENT.zalzhou.user (1.39 KB)

Ipv4ToInt32.vcproj.zal-PC.zal.user (1.38 KB)

Ipv4ToInt32.vcproj.zq-pc.Administrator.user (1.37 KB)

ReadMe.txt (1.30 KB)

stdafx.cpp (298.0 B)

stdafx.h (535.0 B)

Homework0410.ncb (371.0 KB)

Homework0410.sln (898.0 B)

file reg unicode.txt

麦洛克菲第二课.doc (739.0 KB)

麦洛克菲第二课.ppt (308.5 KB)

3thirdl-irqlthreaddatastruct

Demo

deadlock

deadlock.dsp (4.20 KB)

deadlock.dsw (539.0 B)

main.c (2.44 KB)

makefile (374.0 B)

SOURCES (80.0 B)

DeleteDir

DeleteDir.dsp (4.21 KB)

DeleteDir.dsw (541.0 B)

main.c (12.4 KB)

makefile (374.0 B)

SOURCES (75.0 B)

FILEMON4.34

exe

ALPHAREL

FILEMON.EXE (103.0 KB)

FILEMON.HLP (11.8 KB)

FILEMON.SYS (72.8 KB)

Rel64

filem.sys (169.6 KB)

Filemon.exe (192.5 KB)

FILEMON.HLP (13.6 KB)

README.TXT (1.84 KB)

Release

filem.sys (56.7 KB)

Filemon.exe (96.0 KB)

filemon.GID (8.43 KB)

FILEMON.HLP (13.6 KB)

FILEMON.res (10.4 KB)

FILEVXD.VXD (22.6 KB)

README.TXT (1.84 KB)

Appicon.ico (766.0 B)

cursor1.cur (326.0 B)

Fileaxp.dsp (3.97 KB)

FILEM.SYS (188.0 KB)

FILEMON.APS (15.5 KB)

Filemon.c (91.8 KB)

Filemon.dep (218.0 B)

filemon.doc (23.4 KB)

Filemon.dsp (4.72 KB)

Filemon.dsw (726.0 B)

filemon.exe.manifest (653.0 B)

filemon.h (3.07 KB)

Filemon.hpj (375.0 B)

Filemon.mdp (38.0 KB)

Filemon.plg (1.40 KB)

FILEMON.RC (14.8 KB)

FILEMON.RTF (14.9 KB)

filemon.sln (312.0 B)

filemon.suo (6.00 KB)

Filemon.vcp (11.0 KB)

filemon64.mak (4.58 KB)

Instdrv.c (8.29 KB)

Ioctlcmd.h (2.95 KB)

resource.h (2.56 KB)

toolbar.bmp (1.64 KB)

sys

FileMon.IAB (40.0 KB)

FileMon.IAD (728.0 B)

FileMon.IMB (12.0 KB)

FileMon.IMD (448.0 B)

FileMon.PFI (20.0 B)

FileMon.PO (776.0 B)

FileMon.PR (2.02 KB)

FileMon.PRI (10.4 KB)

FileMon.PS (67.4 KB)

FileMon.WK3 (11.0 KB)

filem.sys (56.7 KB)

Filemon.c (175.0 KB)

Filemon.h (5.49 KB)

Filemon.rc (1.12 KB)

Install.bat (483.0 B)

Makefile (267.0 B)

Sources (154.0 B)

wintypes.h (18.4 KB)

vxd

Filemon.c (48.5 KB)

Filemon.h (2.38 KB)

Filevxd.def (1.15 KB)

FILEVXD.EXP (1.55 KB)

Filevxd.lib (1.71 KB)

Filevxd.map (6.86 KB)

FILEVXD.RES (484.0 B)

Filevxd.sym (1.93 KB)

Filevxd.vrc (370.0 B)

FILEVXD.VXD (22.6 KB)

Makefile (397.0 B)

README.TXT (1.84 KB)

Hash

hash.c (7.61 KB)

hash.h (970.0 B)

ListProcAndDriver

ListProc

res

BluePinna.urf (59.8 KB)

GtBase.urf (40.2 KB)

GtClassic.urf (59.0 KB)

ListProc.ico (1.05 KB)

ListProc.rc2 (400.0 B)

Thumbs.db (3.00 KB)

Instdrv.cpp (8.45 KB)

Instdrv.h (175.0 B)

ioctlcmd.h (234.0 B)

ListProc.cpp (3.60 KB)

ListProc.dsp (4.44 KB)

ListProc.dsw (539.0 B)

ListProc.h (1.34 KB)

ListProc.rc (5.46 KB)

LstProcDlg.cpp (8.41 KB)

LstProcDlg.h (1.64 KB)

psapi.h (5.93 KB)

ReadMe.txt (3.53 KB)

resource.h (1,011.0 B)

StdAfx.cpp (210.0 B)

StdAfx.h (1.34 KB)

ListProcDriver

LstProcDriver.IAB (8.00 KB)

LstProcDriver.IAD (408.0 B)

LstProcDriver.IMB (4.00 KB)

LstProcDriver.IMD (368.0 B)

LstProcDriver.PFI (16.0 B)

LstProcDriver.PO (776.0 B)

LstProcDriver.PR (2.02 KB)

LstProcDriver.PRI (10.4 KB)

LstProcDriver.PS (11.8 KB)

LstProcDriver.WK3 (12.3 KB)

build_debug.cmd (43.0 B)

build_release.cmd (43.0 B)

ioctlcmd.h (234.0 B)

main.c (8.15 KB)

MAKEFILE (267.0 B)

SOURCES (109.0 B)

mttest

main.c (2.02 KB)

makefile (374.0 B)

mttest.dsp (4.18 KB)

mttest.dsw (535.0 B)

SOURCES (80.0 B)

multithreadtest

multithreadtest.cpp (1.33 KB)

multithreadtest.dsp (4.56 KB)

multithreadtest.dsw (553.0 B)

StdAfx.cpp (302.0 B)

StdAfx.h (667.0 B)

ProcWatch

ProcWatchClientConsole

ProcWatchClientConsole.cpp (7.15 KB)

ProcWatchClientConsole.dsp (4.62 KB)

ProcWatchClientConsole.dsw (567.0 B)

StdAfx.cpp (309.0 B)

StdAfx.h (667.0 B)

ProcwatchDrv

makefile (374.0 B)

ProcWatch.c (5.20 KB)

ProcwatchDrv.dsp (4.24 KB)

ProcwatchDrv.dsw (547.0 B)

SOURCES (80.0 B)

workerconsumer

main.c (2.54 KB)

makefile (374.0 B)

SOURCES (80.0 B)

workerconsumer.dsp (4.27 KB)

workerconsumer.dsw (551.0 B)

麦洛克菲第三课(1).ppt (273.0 KB)

麦洛克菲第三课(2).ppt (105.0 KB)

麦洛克菲第三课.doc (180.0 KB)

麦洛克菲第三课.ppt (495.5 KB)

同步多线程中断运行级 irp.txt

3thirdl-irqlthreaddatastruct_课堂笔记

Demo

deadlock

deadlock.dsp (4.20 KB)

deadlock.dsw (539.0 B)

main.c (2.44 KB)

makefile (374.0 B)

SOURCES (80.0 B)

DeleteDir

DeleteDir.dsp (4.21 KB)

DeleteDir.dsw (541.0 B)

main.c (12.4 KB)

makefile (374.0 B)

SOURCES (75.0 B)

Filemon Regmon

Filemon Regmon.7z (540.9 KB)

FILEMON4.34

exe

ALPHAREL

FILEMON.EXE (103.0 KB)

FILEMON.HLP (11.8 KB)

FILEMON.SYS (72.8 KB)

Rel64

filem.sys (169.6 KB)

Filemon.exe (192.5 KB)

FILEMON.HLP (13.6 KB)

README.TXT (1.84 KB)

Release

filem.sys (56.7 KB)

Filemon.exe (96.0 KB)

filemon.GID (8.43 KB)

FILEMON.HLP (13.6 KB)

FILEMON.res (10.4 KB)

FILEVXD.VXD (22.6 KB)

README.TXT (1.84 KB)

Appicon.ico (766.0 B)

cursor1.cur (326.0 B)

Fileaxp.dsp (3.97 KB)

FILEM.SYS (188.0 KB)

FILEMON.APS (15.5 KB)

Filemon.c (91.8 KB)

Filemon.dep (218.0 B)

filemon.doc (23.4 KB)

Filemon.dsp (4.72 KB)

Filemon.dsw (726.0 B)

filemon.exe.manifest (653.0 B)

filemon.h (3.07 KB)

Filemon.hpj (375.0 B)

Filemon.mdp (38.0 KB)

Filemon.plg (1.40 KB)

FILEMON.RC (14.8 KB)

FILEMON.RTF (14.9 KB)

filemon.sln (312.0 B)

filemon.suo (6.00 KB)

Filemon.vcp (11.0 KB)

filemon64.mak (4.58 KB)

Instdrv.c (8.29 KB)

Ioctlcmd.h (2.95 KB)

resource.h (2.56 KB)

toolbar.bmp (1.64 KB)

sys

FileMon.IAB (40.0 KB)

FileMon.IAD (728.0 B)

FileMon.IMB (12.0 KB)

FileMon.IMD (448.0 B)

FileMon.PFI (20.0 B)

FileMon.PO (776.0 B)

FileMon.PR (2.02 KB)

FileMon.PRI (10.4 KB)

FileMon.PS (67.4 KB)

FileMon.WK3 (11.0 KB)

filem.sys (56.7 KB)

Filemon.c (175.0 KB)

Filemon.h (5.49 KB)

Filemon.rc (1.12 KB)

Install.bat (483.0 B)

Makefile (267.0 B)

Sources (154.0 B)

wintypes.h (18.4 KB)

vxd

Filemon.c (48.5 KB)

Filemon.h (2.38 KB)

Filevxd.def (1.15 KB)

FILEVXD.EXP (1.55 KB)

Filevxd.lib (1.71 KB)

Filevxd.map (6.86 KB)

FILEVXD.RES (484.0 B)

Filevxd.sym (1.93 KB)

Filevxd.vrc (370.0 B)

FILEVXD.VXD (22.6 KB)

Makefile (397.0 B)

README.TXT (1.84 KB)

Hash

hash.c (7.61 KB)

hash.h (970.0 B)

ListProcAndDriver

ListProc

res

BluePinna.urf (59.8 KB)

GtBase.urf (40.2 KB)

GtClassic.urf (59.0 KB)

ListProc.ico (1.05 KB)

ListProc.rc2 (400.0 B)

Thumbs.db (3.00 KB)

Instdrv.cpp (8.45 KB)

Instdrv.h (175.0 B)

ioctlcmd.h (234.0 B)

ListProc.cpp (3.60 KB)

ListProc.dsp (4.44 KB)

ListProc.dsw (539.0 B)

ListProc.h (1.34 KB)

ListProc.rc (5.46 KB)

LstProcDlg.cpp (8.41 KB)

LstProcDlg.h (1.64 KB)

psapi.h (5.93 KB)

ReadMe.txt (3.53 KB)

resource.h (1,011.0 B)

StdAfx.cpp (210.0 B)

StdAfx.h (1.34 KB)

ListProcDriver

LstProcDriver.IAB (8.00 KB)

LstProcDriver.IAD (408.0 B)

LstProcDriver.IMB (4.00 KB)

LstProcDriver.IMD (368.0 B)

LstProcDriver.PFI (16.0 B)

LstProcDriver.PO (776.0 B)

LstProcDriver.PR (2.02 KB)

LstProcDriver.PRI (10.4 KB)

LstProcDriver.PS (11.8 KB)

LstProcDriver.WK3 (12.3 KB)

build_debug.cmd (43.0 B)

build_release.cmd (43.0 B)

ioctlcmd.h (234.0 B)

main.c (8.35 KB)

MAKEFILE (267.0 B)

SOURCES (109.0 B)

vc6.0编译支持xp.txt

mttest

main.c (2.02 KB)

makefile (374.0 B)

mttest.dsp (4.18 KB)

mttest.dsw (535.0 B)

SOURCES (80.0 B)

multithreadtest

multithreadtest.cpp (1.33 KB)

multithreadtest.dsp (4.56 KB)

multithreadtest.dsw (553.0 B)

StdAfx.cpp (302.0 B)

StdAfx.h (667.0 B)

ProcWatch

ProcWatchClientConsole

ProcWatchClientConsole.cpp (7.15 KB)

ProcWatchClientConsole.dsp (4.62 KB)

ProcWatchClientConsole.dsw (567.0 B)

StdAfx.cpp (309.0 B)

StdAfx.h (667.0 B)

ProcwatchDrv

makefile (374.0 B)

ProcWatch.c (5.20 KB)

ProcwatchDrv.dsp (4.24 KB)

ProcwatchDrv.dsw (547.0 B)

SOURCES (80.0 B)

workerconsumer

main.c (2.54 KB)

makefile (374.0 B)

SOURCES (80.0 B)

workerconsumer.dsp (4.27 KB)

workerconsumer.dsw (551.0 B)

课堂笔记

课堂笔记.docx (79.1 KB)

课堂作业

Homework0410

debug

Memmove.exe (40.0 KB)

Memmove.ilk (299.8 KB)

Memmove.pdb (347.0 KB)

Memmove

Debug

BuildLog.htm (13.4 KB)

Memmove.exe.embed.manifest (406.0 B)

Memmove.exe.embed.manifest.res (472.0 B)

Memmove.exe.intermediate.manifest (388.0 B)

Memmove.obj (6.26 KB)

Memmove.pch (1.06 MB)

mt.dep (67.0 B)

stdafx.obj (11.7 KB)

vc80.idb (67.0 KB)

vc80.pdb (108.0 KB)

Memmove.cpp (979.0 B)

Memmove.vcproj (4.40 KB)

Memmove.vcproj.TENCENT.zalzhou.user (1.39 KB)

ReadMe.txt (1.28 KB)

stdafx.cpp (294.0 B)

stdafx.h (535.0 B)

Homework0410.ncb (371.0 KB)

Homework0410.sln (886.0 B)

麦洛克菲第三课(1).ppt (276.5 KB)

麦洛克菲第三课(2).ppt (107.0 KB)

麦洛克菲第三课.doc (180.0 KB)

麦洛克菲第三课.ppt (415.5 KB)

同步多线程中断运行级 irp.txt

4fivel-popwindow

Demo

DosDevices

dosdevicepr

dosdevicepr.dsp (4.23 KB)

dosdevicepr.dsw (545.0 B)

main.c (6.83 KB)

MAKEFILE (267.0 B)

SOURCES (76.0 B)

PatternMatch

main.c (2.30 KB)

MAKEFILE (267.0 B)

SOURCES (79.0 B)

PopWindow

attacker

attacker.cpp (6.29 KB)

attacker.dsp (4.45 KB)

attacker.dsw (539.0 B)

StdAfx.cpp (295.0 B)

StdAfx.h (667.0 B)

Client

res

default1.bin (650.0 B)

InstallDrv.ico (1.05 KB)

InstallDrv.rc2 (402.0 B)

InstallDrv.cpp (2.07 KB)

InstallDrv.dsp (4.50 KB)

InstallDrv.dsw (543.0 B)

InstallDrv.h (1.34 KB)

InstallDrv.rc (6.65 KB)

InstallDrvDlg.cpp (11.9 KB)

InstallDrvDlg.h (1.50 KB)

Instdrv.cpp (8.45 KB)

Instdrv.h (178.0 B)

ioctlcmd.h (446.0 B)

PopupDlg.cpp (2.62 KB)

PopupDlg.h (1.55 KB)

ReadMe.txt (3.57 KB)

resource.h (1.21 KB)

StdAfx.cpp (212.0 B)

StdAfx.h (1.10 KB)

Driver

PopupDriver

PopupDriver.dsp (4.36 KB)

PopupDriver.dsw (545.0 B)

ioctlcmd.h (235.0 B)

main.c (12.5 KB)

main.h (776.0 B)

MAKEFILE (267.0 B)

process.c (4.41 KB)

SOURCES (109.0 B)

PopupClient

res

PopupClient.ico (1.05 KB)

PopupClient.rc2 (403.0 B)

ioctlcmd.h (115.0 B)

PopupClient.cpp (2.85 KB)

PopupClient.dsp (4.31 KB)

PopupClient.dsw (545.0 B)

PopupClient.h (1.40 KB)

PopupClient.rc (6.41 KB)

PopupClientDlg.cpp (15.9 KB)

PopupClientDlg.h (1.66 KB)

PopupDlg.cpp (2.29 KB)

PopupDlg.h (1.41 KB)

resource.h (1.08 KB)

StdAfx.cpp (213.0 B)

StdAfx.h (1.10 KB)

use this project.txt

ShortLong

S2LPr

S2LPr.dsp (4.17 KB)

S2LPr.dsw (533.0 B)

main.c (7.93 KB)

MAKEFILE (267.0 B)

SOURCES (70.0 B)

UNC2Local

makefile (34.0 B)

sources (76.0 B)

Unc2Local.c (5.23 KB)

麦洛克菲内核驱动开发第四课.doc (30.0 KB)

麦洛克菲内核驱动开发第四课.ppt (260.5 KB)

麦洛克菲作业讲解.ppt (76.0 KB)

通信与弹窗.txt

4fivel-popwindow_课堂笔记

Demo

DosDevices

dosdevicepr

dosdevicepr.dsp (4.23 KB)

dosdevicepr.dsw (545.0 B)

main.c (6.83 KB)

MAKEFILE (267.0 B)

SOURCES (76.0 B)

PatternMatch

main.c (2.30 KB)

MAKEFILE (267.0 B)

SOURCES (79.0 B)

PopWindow

attacker

Debug

attacker.exe (440.0 KB)

attacker.exe.embed.manifest (146.0 B)

attacker.exe.embed.manifest.res (212.0 B)

attacker.exe.intermediate.manifest (145.0 B)

attacker.ilk (1,003.3 KB)

attacker.obj (33.6 KB)

attacker.pch (768.0 KB)

attacker.pdb (1.82 MB)

BuildLog.htm (10.2 KB)

mt.dep (67.0 B)

StdAfx.obj (8.67 KB)

vc80.idb (291.0 KB)

vc80.pdb (140.0 KB)

attacker.cpp (6.29 KB)

attacker.dsp (4.45 KB)

attacker.dsw (539.0 B)

attacker.vcproj (5.71 KB)

attacker.vcproj.zq-pc.Administrator.user (1.37 KB)

StdAfx.cpp (295.0 B)

StdAfx.h (667.0 B)

Driver

ioctlcmd.h (235.0 B)

main.c (12.7 KB)

main.h (876.0 B)

MAKEFILE (267.0 B)

process.c (4.41 KB)

SOURCES (109.0 B)

PopupClient

Debug

BuildLog.htm (7.37 KB)

mt.dep (67.0 B)

PopupClient.exe (2.74 MB)

PopupClient.exe.embed.manifest (146.0 B)

PopupClient.exe.embed.manifest.res (212.0 B)

PopupClient.exe.intermediate.manifest (145.0 B)

PopupClient.ilk (5.40 MB)

PopupClient.obj (21.5 KB)

PopupClient.pch (12.9 MB)

PopupClient.pdb (10.4 MB)

PopupClient.res (12.6 KB)

PopupClientDlg.obj (106.7 KB)

PopupDlg.obj (60.9 KB)

StdAfx.obj (278.1 KB)

vc80.idb (691.0 KB)

vc80.pdb (708.0 KB)

Release

BuildLog.htm (6.83 KB)

res

PopupClient.ico (1.05 KB)

PopupClient.rc2 (403.0 B)

ioctlcmd.h (115.0 B)

PopupClient.cpp (2.85 KB)

PopupClient.dsp (4.31 KB)

PopupClient.dsw (545.0 B)

PopupClient.h (1.40 KB)

PopupClient.ncb (10.0 MB)

PopupClient.rc (6.41 KB)

PopupClient.sln (1.31 KB)

PopupClient.vcproj (7.71 KB)

PopupClient.vcproj.zq-pc.Administrator.user (1.37 KB)

PopupClientDlg.cpp (16.0 KB)

PopupClientDlg.h (1.66 KB)

PopupDlg.cpp (2.29 KB)

PopupDlg.h (1.41 KB)

resource.h (1.08 KB)

StdAfx.cpp (213.0 B)

StdAfx.h (1.10 KB)

use this project.txt

VC6.0编译.txt

ShortLong

S2LPr

S2LPr.dsp (4.17 KB)

S2LPr.dsw (533.0 B)

main.c (7.93 KB)

MAKEFILE (267.0 B)

SOURCES (70.0 B)

课堂笔记

课堂笔记.docx (239.6 KB)

课堂作业

UNC2Local

makefile (34.0 B)

sources (76.0 B)

Unc2Local.c (5.23 KB)

麦洛克菲内核驱动开发第四课.doc (30.0 KB)

麦洛克菲内核驱动开发第四课.ppt (269.0 KB)

麦洛克菲作业讲解.ppt (79.0 KB)

通信与弹窗.txt

5sixl-hook

Demo

1SSDTHOOK

1basichook

hook.c (42.2 KB)

MAKEFILE (267.0 B)

SOURCES (105.0 B)

2procprotect

ListProc

res

BluePinna.urf (59.8 KB)

GtBase.urf (40.2 KB)

GtClassic.urf (59.0 KB)

ListProc.ico (1.05 KB)

ListProc.rc2 (400.0 B)

Thumbs.db (3.00 KB)

Instdrv.cpp (8.45 KB)

Instdrv.h (175.0 B)

ioctlcmd.h (342.0 B)

ListProc.cpp (2.19 KB)

ListProc.dsp (4.32 KB)

ListProc.dsw (539.0 B)

ListProc.h (1.34 KB)

ListProc.rc (5.54 KB)

LstProcDlg.cpp (14.8 KB)

LstProcDlg.h (1.74 KB)

psapi.h (5.93 KB)

ReadMe.txt (3.53 KB)

resource.h (1.03 KB)

StdAfx.cpp (210.0 B)

StdAfx.h (1.34 KB)

ListProcDriver

DriverPr

DriverPr.dsp (4.44 KB)

DriverPr.dsw (539.0 B)

build_debug.cmd (43.0 B)

build_release.cmd (43.0 B)

hook.c (2.92 KB)

hook.h (133.0 B)

ioctlcmd.h (353.0 B)

main.c (8.10 KB)

MAKEFILE (267.0 B)

misc.c (855.0 B)

misc.h (127.0 B)

precomp.h (166.0 B)

SOURCES (123.0 B)

3procmon

Driver

ProcMonDrv

ProcMonDrv.dsp (4.64 KB)

ProcMonDrv.dsw (543.0 B)

hook.c (6.28 KB)

hook.h (439.0 B)

ioctlcmd.h (235.0 B)

main.c (12.5 KB)

main.h (820.0 B)

MAKEFILE (267.0 B)

misc.c (8.13 KB)

misc.h (776.0 B)

precomp.h (526.0 B)

SOURCES (123.0 B)

PopupClient

res

PopupClient.ico (1.05 KB)

PopupClient.rc2 (403.0 B)

ioctlcmd.h (115.0 B)

PopupClient.cpp (2.08 KB)

PopupClient.dsp (4.31 KB)

PopupClient.dsw (545.0 B)

PopupClient.h (1.35 KB)

PopupClient.rc (6.41 KB)

PopupClientDlg.cpp (15.8 KB)

PopupClientDlg.h (1.66 KB)

PopupDlg.cpp (2.29 KB)

PopupDlg.h (1.41 KB)

resource.h (1.08 KB)

StdAfx.cpp (213.0 B)

StdAfx.h (1.10 KB)

4drivermon

Driver

PopupDriver

PopupDriver.dsp (4.65 KB)

PopupDriver.dsw (545.0 B)

hook.c (4.18 KB)

hook.h (439.0 B)

ioctlcmd.h (235.0 B)

main.c (12.5 KB)

main.h (820.0 B)

MAKEFILE (267.0 B)

misc.c (19.7 KB)

misc.h (949.0 B)

precomp.h (491.0 B)

SOURCES (123.0 B)

PopupClient

res

PopupClient.ico (1.05 KB)

PopupClient.rc2 (403.0 B)

ioctlcmd.h (115.0 B)

PopupClient.cpp (2.08 KB)

PopupClient.dsp (4.31 KB)

PopupClient.dsw (545.0 B)

PopupClient.h (1.35 KB)

PopupClient.rc (6.41 KB)

PopupClientDlg.cpp (15.8 KB)

PopupClientDlg.h (1.66 KB)

PopupDlg.cpp (2.29 KB)

PopupDlg.h (1.41 KB)

resource.h (1.08 KB)

StdAfx.cpp (213.0 B)

StdAfx.h (1.10 KB)

5regmon

Driver

PopupDriver

PopupDriver.dsp (4.65 KB)

PopupDriver.dsw (545.0 B)

hook.c (6.59 KB)

hook.h (439.0 B)

ioctlcmd.h (235.0 B)

main.c (12.5 KB)

main.h (820.0 B)

MAKEFILE (267.0 B)

misc.c (8.44 KB)

misc.h (1.06 KB)

precomp.h (491.0 B)

SOURCES (123.0 B)

PopupClient

res

PopupClient.ico (1.05 KB)

PopupClient.rc2 (403.0 B)

ioctlcmd.h (115.0 B)

PopupClient.cpp (2.08 KB)

PopupClient.dsp (4.31 KB)

PopupClient.dsw (545.0 B)

PopupClient.h (1.35 KB)

PopupClient.rc (6.41 KB)

PopupClientDlg.cpp (15.8 KB)

PopupClientDlg.h (1.66 KB)

PopupDlg.cpp (2.29 KB)

PopupDlg.h (1.41 KB)

resource.h (1.08 KB)

StdAfx.cpp (213.0 B)

StdAfx.h (1.10 KB)

2INLINEHOOK

CommonInlineHook

CommonInlineHook.dsp (4.29 KB)

CommonInlineHook.dsw (555.0 B)

objchk_wxp_x86

i386

main.obj.oacr.root.x86chk.pft.xml (4.57 KB)

main.c (6.20 KB)

MAKEFILE (267.0 B)

SOURCES (71.0 B)

ObReferenceObjectByHandleHook

ObPr

ObPr.dsp (4.15 KB)

ObPr.dsw (531.0 B)

main.c (4.20 KB)

MAKEFILE (267.0 B)

SOURCES (74.0 B)

PspTerminateProcessHook

PspProject

PspProject.dsp (4.22 KB)

PspProject.dsw (543.0 B)

main.c (5.90 KB)

MAKEFILE (267.0 B)

SOURCES (71.0 B)

SwapContextHook

SCProject

SCProject.dsp (4.63 KB)

SCProject.dsw (541.0 B)

hash.c (7.61 KB)

hash.h (970.0 B)

main.c (17.0 KB)

main.h (18.1 KB)

MAKEFILE (267.0 B)

SOURCES (128.0 B)

xde.c (15.6 KB)

xde.h (7.96 KB)

xdetbl.c (25.0 KB)

3IRPHOOK

irphook

irphook.c (5.59 KB)

irphook.h (2.04 KB)

MAKEFILE (267.0 B)

SOURCES (81.0 B)

4SYSENTERHook

inlinehook

sysenterpr

sysenterpr.dsp (4.40 KB)

sysenterpr.dsw (543.0 B)

main.c (3.09 KB)

MAKEFILE (267.0 B)

SOURCES (85.0 B)

xde.c (15.6 KB)

xde.h (7.96 KB)

xdetbl.c (25.0 KB)

sysenterhook

sysenterhook.dsp (4.25 KB)

sysenterhook.dsw (547.0 B)

main.c (988.0 B)

MAKEFILE (267.0 B)

SOURCES (79.0 B)

5ObjectHook

File

fileobjecthook

fileobjecthook.dsp (4.27 KB)

fileobjecthook.dsw (551.0 B)

main.c (6.70 KB)

MAKEFILE (267.0 B)

SOURCES (81.0 B)

Reg

Regobjecthook

Regobjecthook.dsp (4.26 KB)

Regobjecthook.dsw (549.0 B)

main.c (5.09 KB)

MAKEFILE (267.0 B)

SOURCES (80.0 B)

6R3HOOK

DllInject

firtDll

firtDll.cpp (1.03 KB)

firtDll.dsp (4.36 KB)

firtDll.dsw (537.0 B)

firtDll.h (870.0 B)

frtDll.def (39.0 B)

ReadMe.txt (1.22 KB)

StdAfx.cpp (294.0 B)

StdAfx.h (802.0 B)

HookSpy_src

HookSpy

blank.bmp (2.68 KB)

cross.bmp (2.68 KB)

cursor.cur (326.0 B)

cursor_hot.cur (2.93 KB)

HookSpy.cpp (8.71 KB)

HookSpy.dsp (4.00 KB)

HookSpy.ico (766.0 B)

HookSpy.rc (4.84 KB)

resource.h (1.25 KB)

HookSpyDll

HookSpyDll.cpp (2.81 KB)

HookSpyDll.dsp (3.82 KB)

HookSpyDll.h (693.0 B)

HookSpy.dsw (842.0 B)

LibSpy_src

LibSpy

blank.bmp (2.68 KB)

cross.bmp (2.68 KB)

cursor.cur (326.0 B)

cursor_hot.cur (2.93 KB)

LibSpy.cpp (11.2 KB)

LibSpy.dsp (3.99 KB)

LibSpy.ico (766.0 B)

LibSpy.rc (4.84 KB)

resource.h (1.24 KB)

LibSpyDll

LibSpyDll.cpp (1.33 KB)

LibSpyDll.dsp (3.80 KB)

LibSpyDll.h (695.0 B)

LibSpy.dsw (835.0 B)

ShareSection

ReadMe.txt (1.21 KB)

ShareSection.cpp (518.0 B)

ShareSection.dsp (4.50 KB)

ShareSection.dsw (547.0 B)

StdAfx.cpp (299.0 B)

StdAfx.h (667.0 B)

UseFirstDll

res

UseFirstDll.ico (1.05 KB)

UseFirstDll.rc2 (403.0 B)

firtDll.dll (220.1 KB)

firtDll.lib (2.55 KB)

ReadMe.txt (3.58 KB)

Resource.h (544.0 B)

StdAfx.cpp (213.0 B)

StdAfx.h (1.03 KB)

UseFirstDll.clw (1.13 KB)

UseFirstDll.cpp (2.08 KB)

UseFirstDll.dsp (4.15 KB)

UseFirstDll.dsw (743.0 B)

UseFirstDll.h (1.35 KB)

UseFirstDll.rc (5.20 KB)

UseFirstDllDlg.cpp (4.51 KB)

UseFirstDllDlg.h (1.39 KB)

WinSpy_src

blank.bmp (2.68 KB)

cross.bmp (2.68 KB)

cursor.cur (326.0 B)

cursor_hot.cur (2.93 KB)

InjCode.cpp (5.15 KB)

InjCode.h (773.0 B)

resource.h (1.24 KB)

WinSpy.cpp (8.90 KB)

WinSpy.dsp (4.23 KB)

WinSpy.dsw (535.0 B)

WinSpy.ico (766.0 B)

WinSpy.rc (4.85 KB)

DLL注入.txt (1.12 KB)

HookExamp

HookDll

mengine

ntengine

hookdll

dllmain.cpp (5.42 KB)

hookdll.cpp (451.0 B)

hookdll.h (951.0 B)

hookdll.sln (879.0 B)

hookdll.suo (18.0 KB)

hookdll.vcproj (4.96 KB)

ReadMe.txt (1.26 KB)

stdafx.cpp (294.0 B)

stdafx.h (419.0 B)

targetver.h (1.39 KB)

Hookee

res

Hookee.ico (21.1 KB)

Hookee.rc2 (362.0 B)

Hookee.cpp (1.61 KB)

Hookee.h (441.0 B)

Hookee.rc (5.02 KB)

Hookee.sln (1.33 KB)

Hookee.suo (18.0 KB)

Hookee.vcproj (5.36 KB)

HookeeDlg.cpp (3.35 KB)

HookeeDlg.h (599.0 B)

NtHookEngine.dll (120.0 KB)

NtHookEngine.lib (2.66 KB)

ReadMe.txt (2.68 KB)

Resource.h (518.0 B)

stdafx.cpp (137.0 B)

stdafx.h (1.75 KB)

targetver.h (1.01 KB)

Hooker

hooker

res

hooker.ico (21.1 KB)

hooker.rc2 (362.0 B)

hooker.cpp (1.61 KB)

hooker.h (441.0 B)

hooker.rc (5.13 KB)

hooker.sln (877.0 B)

hooker.suo (12.0 KB)

hooker.vcproj (5.36 KB)

hookerDlg.cpp (5.14 KB)

hookerDlg.h (616.0 B)

ReadMe.txt (2.68 KB)

resource.h (724.0 B)

stdafx.cpp (137.0 B)

stdafx.h (1.75 KB)

targetver.h (1.01 KB)

Show

hookdll.dll (27.5 KB)

Hookee.exe (94.5 KB)

hooker.exe (95.5 KB)

NtHookEngine.dll (120.0 KB)

mhook-2.1

disasm-lib

cpu.c (2.49 KB)

cpu.h (6.64 KB)

disasm.c (4.00 KB)

disasm.h (15.8 KB)

disasm_x86.c (147.1 KB)

disasm_x86.h (20.7 KB)

disasm_x86_tables.h (258.8 KB)

misc.c (4.56 KB)

misc.h (1.33 KB)

mhook-lib

mhook.cpp (25.0 KB)

mhook.h (1.34 KB)

Win32

Debug

x64

Debug

mhook-test.cpp (3.33 KB)

mhook-test.sln (1.35 KB)

mhook-test.vcproj (8.80 KB)

stdafx.cpp (297.0 B)

stdafx.h (452.0 B)

nthookengine

disasmtest

disasmtest.cpp (4.16 KB)

disasmtest.vcproj (7.99 KB)

distorm.h (4.44 KB)

distorm_x64.lib (402.4 KB)

distorm_x86.lib (403.0 KB)

ReadMe.txt (1.29 KB)

stdafx.cpp (297.0 B)

stdafx.h (516.0 B)

release

x64

release

disasmtest.sln (1.22 KB)

NtHookEngine

distorm.h (4.44 KB)

distorm_x64.lib (402.4 KB)

distorm_x86.lib (403.0 KB)

NtHookEngine.cpp (6.74 KB)

NtHookEngine.rc (2.30 KB)

NtHookEngine.vcproj (8.51 KB)

ReadMe.txt (1.75 KB)

resource.h (406.0 B)

stdafx.cpp (299.0 B)

stdafx.h (1.33 KB)

release

NtHookEngine.dll (120.0 KB)

NtHookEngine.lib (2.66 KB)

x64

release

NtHookEngine.dll (123.0 KB)

NtHookEngine.exp (1.07 KB)

NtHookEngine.lib (2.64 KB)

NtHookEngine.sln (1.23 KB)

NtHookEngine.suo (12.5 KB)

NtHookEngine_Test

Debug

NtHookEngine_Test

NtHookEngine_Test.cpp (2.13 KB)

NtHookEngine_Test.h (39.0 B)

NtHookEngine_Test.ico (23.0 KB)

NtHookEngine_Test.rc (1.51 KB)

NtHookEngine_Test.vcproj (8.22 KB)

NtHookEngine_Test.vcproj.ADMIN-734DC0F1C.ZYR.user (2.59 KB)

NtHookEngine_Test.vcproj.XYZ-83C7D1D4EE2.zhouyangrong.user (2.59 KB)

ReadMe.txt (2.22 KB)

resource.h (592.0 B)

small.ico (23.0 KB)

stdafx.cpp (304.0 B)

stdafx.h (1.43 KB)

release

x64

release

NtHookEngine_Test.sln (1.24 KB)

NtHookEngine_Test.suo (15.0 KB)

7IDTHOOK

idtpr

idtpr.dsp (4.17 KB)

idtpr.dsw (533.0 B)

main.c (4.07 KB)

MAKEFILE (267.0 B)

SOURCES (74.0 B)

HOOK.txt

麦洛克菲内核驱动开发第五课.doc (30.5 KB)

麦洛克菲内核驱动开发第五课.ppt (546.0 KB)

麦洛克菲作业讲解.ppt (100.5 KB)

【原创】总结一把，较为精确判断SCM加载 - 看雪安全论坛.mht (565.4 KB)

5sixl-hook_课堂笔记

Demo

1SSDTHOOK

1basichook

debug

i386

hook.pdb (147.0 KB)

hook.sys (6.00 KB)

objchk_wxp_x86

i386

_objects.mac (274.0 B)

hook.obj (103.9 KB)

buildchk_wxp_x86.log (2.88 KB)

hook.c (42.2 KB)

MAKEFILE (267.0 B)

SOURCES (105.0 B)

2procprotect

ListProc

res

BluePinna.urf (59.8 KB)

GtBase.urf (40.2 KB)

GtClassic.urf (59.0 KB)

ListProc.ico (1.05 KB)

ListProc.rc2 (400.0 B)

Thumbs.db (3.00 KB)

Instdrv.cpp (8.45 KB)

Instdrv.h (175.0 B)

ioctlcmd.h (342.0 B)

ListProc.cpp (2.19 KB)

ListProc.dsp (4.32 KB)

ListProc.dsw (539.0 B)

ListProc.h (1.34 KB)

ListProc.rc (5.54 KB)

LstProcDlg.cpp (14.8 KB)

LstProcDlg.h (1.74 KB)

psapi.h (5.93 KB)

ReadMe.txt (3.53 KB)

resource.h (1.03 KB)

StdAfx.cpp (210.0 B)

StdAfx.h (1.34 KB)

ListProcDriver

DriverPr

DriverPr.dsp (4.44 KB)

DriverPr.dsw (539.0 B)

build_debug.cmd (43.0 B)

build_release.cmd (43.0 B)

hook.c (2.93 KB)

hook.h (133.0 B)

ioctlcmd.h (353.0 B)

main.c (8.15 KB)

MAKEFILE (267.0 B)

misc.c (855.0 B)

misc.h (127.0 B)

precomp.h (166.0 B)

SOURCES (123.0 B)

3procmon

Driver

debug

i386

PopupDrv.pdb (219.0 KB)

PopupDrv.sys (11.8 KB)

objchk_wxp_x86

i386

_objects.mac (340.0 B)

hook.obj (88.0 KB)

main.obj (105.3 KB)

main.obj.oacr.root.x86chk.pft.xml (12.6 KB)

misc.obj (100.1 KB)

misc.obj.oacr.root.x86chk.pft.xml (955.0 B)

ProcMonDrv

ProcMonDrv.dsp (4.64 KB)

ProcMonDrv.dsw (543.0 B)

buildchk_wxp_x86.log (3.12 KB)

hook.c (6.32 KB)

hook.h (439.0 B)

ioctlcmd.h (235.0 B)

main.c (12.5 KB)

main.h (820.0 B)

MAKEFILE (267.0 B)

misc.c (8.13 KB)

misc.h (776.0 B)

precomp.h (526.0 B)

SOURCES (123.0 B)

PopupClient

res

PopupClient.ico (1.05 KB)

PopupClient.rc2 (403.0 B)

ioctlcmd.h (115.0 B)

PopupClient.cpp (2.08 KB)

PopupClient.dsp (4.31 KB)

PopupClient.dsw (545.0 B)

PopupClient.h (1.35 KB)

PopupClient.rc (6.41 KB)

PopupClientDlg.cpp (15.8 KB)

PopupClientDlg.h (1.66 KB)

PopupDlg.cpp (2.29 KB)

PopupDlg.h (1.41 KB)

resource.h (1.08 KB)

StdAfx.cpp (213.0 B)

StdAfx.h (1.10 KB)

4drivermon

Driver

PopupDriver

PopupDriver.dsp (4.65 KB)

PopupDriver.dsw (545.0 B)

hook.c (4.18 KB)

hook.h (439.0 B)

ioctlcmd.h (235.0 B)

main.c (12.5 KB)

main.h (820.0 B)

MAKEFILE (267.0 B)

misc.c (19.7 KB)

misc.h (949.0 B)

precomp.h (491.0 B)

SOURCES (123.0 B)

PopupClient

res

PopupClient.ico (1.05 KB)

PopupClient.rc2 (403.0 B)

ioctlcmd.h (115.0 B)

PopupClient.cpp (2.08 KB)

PopupClient.dsp (4.31 KB)

PopupClient.dsw (545.0 B)

PopupClient.h (1.35 KB)

PopupClient.rc (6.41 KB)

PopupClientDlg.cpp (15.8 KB)

PopupClientDlg.h (1.66 KB)

PopupDlg.cpp (2.29 KB)

PopupDlg.h (1.41 KB)

resource.h (1.08 KB)

StdAfx.cpp (213.0 B)

StdAfx.h (1.10 KB)

5regmon

Driver

PopupDriver

PopupDriver.dsp (4.65 KB)

PopupDriver.dsw (545.0 B)

hook.c (6.59 KB)

hook.h (439.0 B)

ioctlcmd.h (235.0 B)

main.c (12.5 KB)

main.h (820.0 B)

MAKEFILE (267.0 B)

misc.c (8.44 KB)

misc.h (1.06 KB)

precomp.h (491.0 B)

SOURCES (123.0 B)

PopupClient

res

PopupClient.ico (1.05 KB)

PopupClient.rc2 (403.0 B)

ioctlcmd.h (115.0 B)

PopupClient.cpp (2.08 KB)

PopupClient.dsp (4.31 KB)

PopupClient.dsw (545.0 B)

PopupClient.h (1.35 KB)

PopupClient.rc (6.41 KB)

PopupClientDlg.cpp (15.8 KB)

PopupClientDlg.h (1.66 KB)

PopupDlg.cpp (2.29 KB)

PopupDlg.h (1.41 KB)

resource.h (1.08 KB)

StdAfx.cpp (213.0 B)

StdAfx.h (1.10 KB)

2INLINEHOOK

CommonInlineHook

CommonInlineHook.dsp (4.29 KB)

CommonInlineHook.dsw (555.0 B)

objchk_wxp_x86

i386

main.obj.oacr.root.x86chk.pft.xml (4.57 KB)

main.c (6.20 KB)

MAKEFILE (267.0 B)

SOURCES (71.0 B)

ObReferenceObjectByHandleHook

ObPr

ObPr.dsp (4.15 KB)

ObPr.dsw (531.0 B)

main.c (4.20 KB)

MAKEFILE (267.0 B)

SOURCES (74.0 B)

PspTerminateProcessHook

PspProject

PspProject.dsp (4.22 KB)

PspProject.dsw (543.0 B)

main.c (5.90 KB)

MAKEFILE (267.0 B)

SOURCES (71.0 B)

SwapContextHook

SCProject

SCProject.dsp (4.63 KB)

SCProject.dsw (541.0 B)

hash.c (7.61 KB)

hash.h (970.0 B)

main.c (17.1 KB)

main.h (18.1 KB)

MAKEFILE (267.0 B)

SOURCES (128.0 B)

xde.c (15.6 KB)

xde.h (7.96 KB)

xdetbl.c (25.0 KB)

3IRPHOOK

irphook

irphook.c (5.59 KB)

irphook.h (2.04 KB)

MAKEFILE (267.0 B)

SOURCES (81.0 B)

4SYSENTERHook

inlinehook

sysenterpr

sysenterpr.dsp (4.40 KB)

sysenterpr.dsw (543.0 B)

main.c (3.09 KB)

MAKEFILE (267.0 B)

SOURCES (85.0 B)

xde.c (15.6 KB)

xde.h (7.96 KB)

xdetbl.c (25.0 KB)

sysenterhook

sysenterhook.dsp (4.25 KB)

sysenterhook.dsw (547.0 B)

main.c (988.0 B)

MAKEFILE (267.0 B)

SOURCES (79.0 B)

5ObjectHook

File

fileobjecthook

fileobjecthook.dsp (4.27 KB)

fileobjecthook.dsw (551.0 B)

main.c (6.70 KB)

MAKEFILE (267.0 B)

SOURCES (81.0 B)

Reg

Regobjecthook

Regobjecthook.dsp (4.26 KB)

Regobjecthook.dsw (549.0 B)

main.c (5.09 KB)

MAKEFILE (267.0 B)

SOURCES (80.0 B)

6R3HOOK

DllInject

firtDll

firtDll.cpp (1.03 KB)

firtDll.dsp (4.36 KB)

firtDll.dsw (537.0 B)

firtDll.h (870.0 B)

frtDll.def (39.0 B)

ReadMe.txt (1.22 KB)

StdAfx.cpp (294.0 B)

StdAfx.h (802.0 B)

HookSpy_src

HookSpy

blank.bmp (2.68 KB)

cross.bmp (2.68 KB)

cursor.cur (326.0 B)

cursor_hot.cur (2.93 KB)

HookSpy.cpp (8.71 KB)

HookSpy.dsp (4.00 KB)

HookSpy.ico (766.0 B)

HookSpy.rc (4.84 KB)

resource.h (1.25 KB)

HookSpyDll

HookSpyDll.cpp (2.81 KB)

HookSpyDll.dsp (3.82 KB)

HookSpyDll.h (693.0 B)

HookSpy.dsw (842.0 B)

LibSpy_src

LibSpy

blank.bmp (2.68 KB)

cross.bmp (2.68 KB)

cursor.cur (326.0 B)

cursor_hot.cur (2.93 KB)

LibSpy.cpp (11.2 KB)

LibSpy.dsp (3.99 KB)

LibSpy.ico (766.0 B)

LibSpy.rc (4.84 KB)

resource.h (1.24 KB)

LibSpyDll

LibSpyDll.cpp (1.33 KB)

LibSpyDll.dsp (3.80 KB)

LibSpyDll.h (695.0 B)

LibSpy.dsw (835.0 B)

ShareSection

ReadMe.txt (1.21 KB)

ShareSection.cpp (518.0 B)

ShareSection.dsp (4.50 KB)

ShareSection.dsw (547.0 B)

StdAfx.cpp (299.0 B)

StdAfx.h (667.0 B)

UseFirstDll

res

UseFirstDll.ico (1.05 KB)

UseFirstDll.rc2 (403.0 B)

firtDll.dll (220.1 KB)

firtDll.lib (2.55 KB)

ReadMe.txt (3.58 KB)

Resource.h (544.0 B)

StdAfx.cpp (213.0 B)

StdAfx.h (1.03 KB)

UseFirstDll.clw (1.13 KB)

UseFirstDll.cpp (2.08 KB)

UseFirstDll.dsp (4.15 KB)

UseFirstDll.dsw (743.0 B)

UseFirstDll.h (1.35 KB)

UseFirstDll.rc (5.20 KB)

UseFirstDllDlg.cpp (4.51 KB)

UseFirstDllDlg.h (1.39 KB)

WinSpy_src

blank.bmp (2.68 KB)

cross.bmp (2.68 KB)

cursor.cur (326.0 B)

cursor_hot.cur (2.93 KB)

InjCode.cpp (5.15 KB)

InjCode.h (773.0 B)

resource.h (1.24 KB)

WinSpy.cpp (8.90 KB)

WinSpy.dsp (4.23 KB)

WinSpy.dsw (535.0 B)

WinSpy.ico (766.0 B)

WinSpy.rc (4.85 KB)

DLL注入.txt (1.12 KB)

HookExamp

HookDll

mengine

ntengine

hookdll

dllmain.cpp (5.42 KB)

hookdll.cpp (451.0 B)

hookdll.h (951.0 B)

hookdll.sln (879.0 B)

hookdll.suo (18.0 KB)

hookdll.vcproj (4.96 KB)

ReadMe.txt (1.26 KB)

stdafx.cpp (294.0 B)

stdafx.h (419.0 B)

targetver.h (1.39 KB)

Hookee

res

Hookee.ico (21.1 KB)

Hookee.rc2 (362.0 B)

Hookee.cpp (1.61 KB)

Hookee.h (441.0 B)

Hookee.rc (5.02 KB)

Hookee.sln (1.33 KB)

Hookee.suo (18.0 KB)

Hookee.vcproj (5.36 KB)

HookeeDlg.cpp (3.35 KB)

HookeeDlg.h (599.0 B)

NtHookEngine.dll (120.0 KB)

NtHookEngine.lib (2.66 KB)

ReadMe.txt (2.68 KB)

Resource.h (518.0 B)

stdafx.cpp (137.0 B)

stdafx.h (1.75 KB)

targetver.h (1.01 KB)

Hooker

hooker

res

hooker.ico (21.1 KB)

hooker.rc2 (362.0 B)

hooker.cpp (1.61 KB)

hooker.h (441.0 B)

hooker.rc (5.13 KB)

hooker.sln (877.0 B)

hooker.suo (12.0 KB)

hooker.vcproj (5.36 KB)

hookerDlg.cpp (5.14 KB)

hookerDlg.h (616.0 B)

ReadMe.txt (2.68 KB)

resource.h (724.0 B)

stdafx.cpp (137.0 B)

stdafx.h (1.75 KB)

targetver.h (1.01 KB)

Show

hookdll.dll (27.5 KB)

Hookee.exe (94.5 KB)

hooker.exe (95.5 KB)

NtHookEngine.dll (120.0 KB)

mhook-2.1

disasm-lib

cpu.c (2.49 KB)

cpu.h (6.64 KB)

disasm.c (4.00 KB)

disasm.h (15.8 KB)

disasm_x86.c (147.1 KB)

disasm_x86.h (20.7 KB)

disasm_x86_tables.h (258.8 KB)

misc.c (4.56 KB)

misc.h (1.33 KB)

mhook-lib

mhook.cpp (25.0 KB)

mhook.h (1.34 KB)

Win32

Debug

x64

Debug

mhook-test.cpp (3.33 KB)

mhook-test.sln (1.35 KB)

mhook-test.vcproj (8.80 KB)

stdafx.cpp (297.0 B)

stdafx.h (452.0 B)

nthookengine

disasmtest

disasmtest.cpp (4.16 KB)

disasmtest.vcproj (7.99 KB)

distorm.h (4.44 KB)

distorm_x64.lib (402.4 KB)

distorm_x86.lib (403.0 KB)

ReadMe.txt (1.29 KB)

stdafx.cpp (297.0 B)

stdafx.h (516.0 B)

release

x64

release

disasmtest.sln (1.22 KB)

NtHookEngine

distorm.h (4.44 KB)

distorm_x64.lib (402.4 KB)

distorm_x86.lib (403.0 KB)

NtHookEngine.cpp (6.74 KB)

NtHookEngine.rc (2.30 KB)

NtHookEngine.vcproj (8.51 KB)

ReadMe.txt (1.75 KB)

resource.h (406.0 B)

stdafx.cpp (299.0 B)

stdafx.h (1.33 KB)

release

NtHookEngine.dll (120.0 KB)

NtHookEngine.lib (2.66 KB)

x64

release

NtHookEngine.dll (123.0 KB)

NtHookEngine.exp (1.07 KB)

NtHookEngine.lib (2.64 KB)

NtHookEngine.sln (1.23 KB)

NtHookEngine.suo (12.5 KB)

NtHookEngine_Test

Debug

NtHookEngine_Test

NtHookEngine_Test.cpp (2.13 KB)

NtHookEngine_Test.h (39.0 B)

NtHookEngine_Test.ico (23.0 KB)

NtHookEngine_Test.rc (1.51 KB)

NtHookEngine_Test.vcproj (8.22 KB)

NtHookEngine_Test.vcproj.ADMIN-734DC0F1C.ZYR.user (2.59 KB)

NtHookEngine_Test.vcproj.XYZ-83C7D1D4EE2.zhouyangrong.user (2.59 KB)

ReadMe.txt (2.22 KB)

resource.h (592.0 B)

small.ico (23.0 KB)

stdafx.cpp (304.0 B)

stdafx.h (1.43 KB)

release

x64

release

NtHookEngine_Test.sln (1.24 KB)

NtHookEngine_Test.suo (15.0 KB)

驱动DLL注入

驱动DLL注入.7z (50.8 KB)

7IDTHOOK

idtpr

idtpr.dsp (4.17 KB)

idtpr.dsw (533.0 B)

main.c (4.07 KB)

MAKEFILE (267.0 B)

SOURCES (74.0 B)

课堂笔记

课堂笔记.docx (152.2 KB)

课堂作业

Dll

debug

hellodll.dll (44.0 KB)

hellodll.exp (1.08 KB)

hellodll.ilk (267.9 KB)

hellodll.lib (2.52 KB)

hellodll.pdb (603.0 KB)

hellodll

Debug

BuildLog.htm (7.53 KB)

hellodll.dll.embed.manifest (406.0 B)

hellodll.dll.embed.manifest.res (472.0 B)

hellodll.dll.intermediate.manifest (388.0 B)

hellodll.obj (7.62 KB)

hellodll.pch (3.13 MB)

mt.dep (67.0 B)

stdafx.obj (87.3 KB)

vc80.idb (195.0 KB)

vc80.pdb (268.0 KB)

Release

BuildLog.htm (7.97 KB)

hellodll.dll.intermediate.manifest (383.0 B)

hellodll.obj (17.4 KB)

hellodll.pch (3.13 MB)

mt.dep (67.0 B)

stdafx.obj (106.0 KB)

vc80.idb (107.0 KB)

vc80.pdb (268.0 KB)

hellodll.cpp (1,011.0 B)

hellodll.def (41.0 B)

hellodll.h (1.03 KB)

hellodll.vcproj (4.57 KB)

hellodll.vcproj.TENCENT.zalzhou.user (1.36 KB)

hellodll.vcproj.zq-pc.Administrator.user (1.35 KB)

ReadMe.txt (1.27 KB)

stdafx.cpp (295.0 B)

stdafx.h (1.33 KB)

release

hellodll.dll (7.00 KB)

hellodll.exp (1.08 KB)

hellodll.lib (2.52 KB)

hellodll.pdb (419.0 KB)

Dll.ncb (3.15 MB)

Dll.sln (889.0 B)

UseDll

debug

hellodll.dll (44.0 KB)

UseDll.exe (108.0 KB)

UseDll.pdb (3.14 MB)

release

hellodll.dll (44.0 KB)

UseDll.exe (48.0 KB)

UseDll.pdb (2.72 MB)

UseDll

Debug

BuildLog.htm (12.4 KB)

mt.dep (67.0 B)

stdafx.obj (265.5 KB)

UseDll.exe.embed.manifest (942.0 B)

UseDll.exe.embed.manifest.res (1,008.0 B)

UseDll.exe.intermediate.manifest (890.0 B)

UseDll.obj (20.8 KB)

UseDll.pch (12.9 MB)

UseDll.res (22.7 KB)

UseDllDlg.obj (38.7 KB)

vc80.idb (699.0 KB)

vc80.pdb (676.0 KB)

Release

BuildLog.htm (9.11 KB)

mt.dep (67.0 B)

stdafx.obj (1.84 MB)

UseDll.exe.intermediate.manifest (880.0 B)

UseDll.obj (18.4 KB)

UseDll.pch (13.8 MB)

UseDll.res (22.7 KB)

UseDllDlg.obj (33.9 KB)

vc80.idb (395.0 KB)

vc80.pdb (700.0 KB)

res

UseDll.ico (21.1 KB)

UseDll.rc2 (362.0 B)

hellodll.def (41.0 B)

hellodll.h (1.03 KB)

ReadMe.txt (2.68 KB)

Resource.h (519.0 B)

stdafx.cpp (137.0 B)

stdafx.h (2.43 KB)

UseDll.aps (57.2 KB)

UseDll.cpp (1.61 KB)

UseDll.h (441.0 B)

UseDll.rc (4.83 KB)

UseDll.vcproj (5.35 KB)

UseDll.vcproj.TENCENT.zalzhou.user (1.39 KB)

UseDll.vcproj.zq-pc.Administrator.user (1.37 KB)

UseDllDlg.cpp (3.63 KB)

UseDllDlg.h (602.0 B)

UseDll.ncb (9.80 MB)

UseDll.sln (883.0 B)

HOOK.txt

麦洛克菲内核驱动开发第五课.doc (30.5 KB)

麦洛克菲内核驱动开发第五课.ppt (599.0 KB)

麦洛克菲作业讲解.ppt (120.0 KB)

【原创】总结一把，较为精确判断SCM加载 - 看雪安全论坛.mht (565.4 KB)

6sevenl-sfilter

Demo

Hips

Driver

hipsdrvpr

hipsdrvpr.dsp (5.03 KB)

hipsdrvpr.dsw (543.0 B)

hash.c (5.72 KB)

hash.h (1.01 KB)

ioctlcmd.h (136.0 B)

MAKEFILE (374.0 B)

misc.c (21.0 KB)

misc.h (835.0 B)

namelookup.c (53.3 KB)

namelookup.h (5.57 KB)

namelookupdef.h (2.00 KB)

precomp.h (672.0 B)

sfilter.c (201.4 KB)

sfilter.h (19.0 KB)

sfilter.inf (2.35 KB)

sfilter.rc (268.0 B)

sfilterw2k.inf (2.33 KB)

SFLock.c (876.0 B)

SFLock.h (384.0 B)

SOURCES (151.0 B)

UserInteraction.c (5.35 KB)

UserInteraction.h (1.79 KB)

PopupClient

res

PopupClient.ico (1.05 KB)

PopupClient.rc2 (403.0 B)

ioctlcmd.h (122.0 B)

PopupClient.cpp (2.08 KB)

PopupClient.dsp (4.31 KB)

PopupClient.dsw (545.0 B)

PopupClient.h (1.35 KB)

PopupClient.rc (6.54 KB)

PopupClientDlg.cpp (16.2 KB)

PopupClientDlg.h (1.66 KB)

PopupDlg.cpp (2.44 KB)

PopupDlg.h (1.47 KB)

resource.h (1.12 KB)

StdAfx.cpp (213.0 B)

StdAfx.h (1.10 KB)

sfilter

sfilterpr

sfilterpr.dsp (4.47 KB)

sfilterpr.dsw (541.0 B)

makefile (374.0 B)

namelookup.c (53.3 KB)

namelookup.h (5.56 KB)

namelookupdef.h (2.00 KB)

precomp.h (228.0 B)

sfilter.c (189.3 KB)

sfilter.inf (2.35 KB)

sfilter.rc (268.0 B)

sfilterinstall.cmd (157.0 B)

sfilteruninstall.cmd (161.0 B)

sfilterw2k.inf (2.33 KB)

sources (158.0 B)

sfilterinstall

main.cpp (6.47 KB)

main.dsp (3.30 KB)

main.dsw (531.0 B)

tooflat_sfilterencrypt

makefile (267.0 B)

rc4.c (863.0 B)

rc4.h (268.0 B)

sfilter.c (223.7 KB)

sources (117.0 B)

xefs.dat (1.01 KB)

麦洛克菲内核开发第六课.doc (30.5 KB)

麦洛克菲内核开发第六课.ppt (289.0 KB)

sfilter.txt

6sevenl-sfilter_课堂笔记

Demo

Hips

Driver

hipsdrvpr

hipsdrvpr.dsp (5.03 KB)

hipsdrvpr.dsw (543.0 B)

hash.c (5.72 KB)

hash.h (1.01 KB)

ioctlcmd.h (136.0 B)

MAKEFILE (374.0 B)

misc.c (21.0 KB)

misc.h (835.0 B)

namelookup.c (53.3 KB)

namelookup.h (5.57 KB)

namelookupdef.h (2.00 KB)

precomp.h (672.0 B)

sfilter.c (201.4 KB)

sfilter.h (19.0 KB)

sfilter.inf (2.35 KB)

sfilter.rc (268.0 B)

sfilterw2k.inf (2.33 KB)

SFLock.c (876.0 B)

SFLock.h (384.0 B)

SOURCES (151.0 B)

UserInteraction.c (5.35 KB)

UserInteraction.h (1.79 KB)

PopupClient

res

PopupClient.ico (1.05 KB)

PopupClient.rc2 (403.0 B)

ioctlcmd.h (122.0 B)

PopupClient.cpp (2.08 KB)

PopupClient.dsp (4.31 KB)

PopupClient.dsw (545.0 B)

PopupClient.h (1.35 KB)

PopupClient.rc (6.54 KB)

PopupClientDlg.cpp (16.2 KB)

PopupClientDlg.h (1.66 KB)

PopupDlg.cpp (2.44 KB)

PopupDlg.h (1.47 KB)

resource.h (1.12 KB)

StdAfx.cpp (213.0 B)

StdAfx.h (1.10 KB)

sfilter

sfilterpr

sfilterpr.dsp (4.47 KB)

sfilterpr.dsw (541.0 B)

makefile (374.0 B)

namelookup.c (53.3 KB)

namelookup.h (5.56 KB)

namelookupdef.h (2.00 KB)

precomp.h (228.0 B)

sfilter.c (189.3 KB)

sfilter.inf (2.35 KB)

sfilter.rc (268.0 B)

sfilterinstall.cmd (157.0 B)

sfilteruninstall.cmd (161.0 B)

sfilterw2k.inf (2.33 KB)

sources (158.0 B)

sfilterinstall

main.cpp (6.47 KB)

main.dsp (3.30 KB)

main.dsw (531.0 B)

tooflat_sfilterencrypt

makefile (267.0 B)

rc4.c (863.0 B)

rc4.h (268.0 B)

sfilter.c (223.7 KB)

sources (117.0 B)

xefs.dat (1.01 KB)

隐藏文件

HideFile.rar (98.0 KB)

HideFile_1.rar (46.3 KB)

课堂笔记

课堂笔记.docx (33.6 KB)

课堂作业

SPrime.c (519.0 B)

麦洛克菲内核开发第六课.doc (30.5 KB)

麦洛克菲内核开发第六课.ppt (295.0 KB)

sfilter.txt

7eightl-minifilter

Demo

MinifilterInstall

MinifilterInstall.cpp (8.03 KB)

MinifilterInstall.dsp (4.56 KB)

MinifilterInstall.dsw (557.0 B)

ReadMe.txt (1.24 KB)

StdAfx.cpp (304.0 B)

StdAfx.h (667.0 B)

nullFilter

nullpr

nullpr.dsp (4.19 KB)

nullpr.dsw (537.0 B)

makefile (374.0 B)

nullFilter.c (5.74 KB)

nullFilter.inf (2.39 KB)

nullFilter.rc (253.0 B)

sources (184.0 B)

passThrough

pspr

pspr.dsp (4.17 KB)

pspr.dsw (533.0 B)

makefile (374.0 B)

passThrough.c (21.9 KB)

passThrough.inf (2.49 KB)

passThrough.rc (268.0 B)

sources (187.0 B)

REG-hips

RegHipsPr

RegHipsPr.dsp (4.40 KB)

RegHipsPr.dsw (543.0 B)

main.c (2.10 KB)

makefile (374.0 B)

precomp.h (130.0 B)

regMon.c (9.64 KB)

regMon.h (453.0 B)

SOURCES (85.0 B)

Sandbox

Driver

sandboxpr

sandboxpr.dsp (5.00 KB)

sandboxpr.dsw (543.0 B)

ioctlcmd.h (237.0 B)

IPC.c (2.70 KB)

IPC.h (253.0 B)

main.c (7.84 KB)

main.h (173.0 B)

MAKEFILE (267.0 B)

MiniMon.c (5.83 KB)

MiniMon.h (1.54 KB)

precom.h (474.0 B)

sandbox.c (28.7 KB)

sandbox.h (2.18 KB)

sbtoolApi.c (48.2 KB)

sbtoolApi.h (5.03 KB)

SOURCES (309.0 B)

utilApi.c (29.5 KB)

utilApi.h (2.16 KB)

vchelloworld.dsp (5.81 KB)

notepad

notepad.cpp (256.0 B)

notepad.dsp (4.44 KB)

notepad.dsw (539.0 B)

ReadMe.txt (1.19 KB)

StdAfx.cpp (294.0 B)

StdAfx.h (667.0 B)

SandboxClient

res

default1.bin (650.0 B)

InstallDrv.ico (1.05 KB)

InstallDrv.rc2 (402.0 B)

读我.txt (21.0 B)

InstallDrv.cpp (2.07 KB)

InstallDrv.h (1.34 KB)

InstallDrv.rc (6.08 KB)

InstallDrv.sln (885.0 B)

InstallDrv.suo (28.0 KB)

InstallDrv.vcproj (8.16 KB)

InstallDrvDlg.cpp (17.6 KB)

InstallDrvDlg.h (2.85 KB)

ioctlcmd.h (446.0 B)

PopupDlg.cpp (2.54 KB)

PopupDlg.h (1.55 KB)

ReadMe.txt (3.57 KB)

resource.h (1.21 KB)

StdAfx.cpp (212.0 B)

StdAfx.h (1.37 KB)

设计需求.txt (252.0 B)

scanner

filter

scannerpr

scannerpr.dsp (4.34 KB)

scannerpr.dsw (543.0 B)

makefile (374.0 B)

scanner.c (32.7 KB)

scanner.h (3.18 KB)

scanner.rc (253.0 B)

sources (208.0 B)

inc

scanuk.h (908.0 B)

user

makefile (374.0 B)

scanUser.c (9.71 KB)

scanuser.h (1.18 KB)

scanUser.rc (334.0 B)

sources (490.0 B)

dirs (33.0 B)

scanner.inf (2.59 KB)

nullFilter.inf (2.39 KB)

minifilter.txt

麦洛克菲内核开发第七课.doc (30.5 KB)

麦洛克菲内核开发第七课.ppt (442.5 KB)

麦洛克菲作业讲解.ppt (83.5 KB)

7eightl-minifilter_课堂笔记

Demo

磁盘加解密

diskflt.rar (785.8 KB)

diskflt_1.rar (387.7 KB)

MinifilterInstall

Include.jpg (141.8 KB)

Lib.jpg (286.4 KB)

MinifilterInstall.cpp (8.03 KB)

MinifilterInstall.dsp (4.56 KB)

MinifilterInstall.dsw (557.0 B)

ReadMe.txt (1.24 KB)

StdAfx.cpp (304.0 B)

StdAfx.h (667.0 B)

nullFilter

nullpr

nullpr.dsp (4.19 KB)

nullpr.dsw (537.0 B)

makefile (374.0 B)

nullFilter.c (5.74 KB)

nullFilter.inf (2.39 KB)

nullFilter.rc (253.0 B)

sources (184.0 B)

passThrough

pspr

pspr.dsp (4.17 KB)

pspr.dsw (533.0 B)

makefile (374.0 B)

passThrough.c (23.0 KB)

passThrough.inf (2.49 KB)

passThrough.rc (268.0 B)

sources (187.0 B)

REG-hips

RegHipsPr

RegHipsPr.dsp (4.40 KB)

RegHipsPr.dsw (543.0 B)

main.c (2.10 KB)

makefile (374.0 B)

precomp.h (130.0 B)

regMon.c (9.64 KB)

regMon.h (453.0 B)

SOURCES (85.0 B)

Sandbox

Driver

sandboxpr

sandboxpr.dsp (5.00 KB)

sandboxpr.dsw (543.0 B)

ioctlcmd.h (237.0 B)

IPC.c (2.70 KB)

IPC.h (253.0 B)

main.c (7.84 KB)

main.h (173.0 B)

MAKEFILE (267.0 B)

MiniMon.c (5.83 KB)

MiniMon.h (1.54 KB)

precom.h (474.0 B)

sandbox.c (28.7 KB)

sandbox.h (2.18 KB)

sbtoolApi.c (48.2 KB)

sbtoolApi.h (5.03 KB)

SOURCES (309.0 B)

utilApi.c (29.5 KB)

utilApi.h (2.16 KB)

vchelloworld.dsp (5.81 KB)

notepad

notepad.cpp (256.0 B)

notepad.dsp (4.44 KB)

notepad.dsw (539.0 B)

ReadMe.txt (1.19 KB)

StdAfx.cpp (294.0 B)

StdAfx.h (667.0 B)

SandboxClient

res

default1.bin (650.0 B)

InstallDrv.ico (1.05 KB)

InstallDrv.rc2 (402.0 B)

读我.txt (21.0 B)

InstallDrv.cpp (2.07 KB)

InstallDrv.h (1.34 KB)

InstallDrv.rc (6.08 KB)

InstallDrv.sln (885.0 B)

InstallDrv.suo (28.0 KB)

InstallDrv.vcproj (8.16 KB)

InstallDrvDlg.cpp (17.6 KB)

InstallDrvDlg.h (2.85 KB)

ioctlcmd.h (446.0 B)

PopupDlg.cpp (2.54 KB)

PopupDlg.h (1.55 KB)

ReadMe.txt (3.57 KB)

resource.h (1.21 KB)

StdAfx.cpp (212.0 B)

StdAfx.h (1.37 KB)

设计需求.txt (252.0 B)

scanner

filter

scannerpr

scannerpr.dsp (4.34 KB)

scannerpr.dsw (543.0 B)

makefile (374.0 B)

scanner.c (32.7 KB)

scanner.h (3.18 KB)

scanner.rc (253.0 B)

sources (208.0 B)

inc

scanuk.h (908.0 B)

user

makefile (374.0 B)

scanUser.c (9.71 KB)

scanuser.h (1.18 KB)

scanUser.rc (334.0 B)

sources (490.0 B)

dirs (33.0 B)

scanner.inf (2.59 KB)

文件加解密

crypt.rar (586.8 KB)

crypt_1.rar (283.4 KB)

nullFilter.inf (2.39 KB)

课堂笔记

课堂笔记.docx (59.8 KB)

课堂作业

minifilter.txt

麦洛克菲内核开发第七课.doc (30.5 KB)

麦洛克菲内核开发第七课.ppt (366.0 KB)

麦洛克菲作业讲解.ppt (86.5 KB)

8nine-registry

Demo

hips

RegHipsPr

RegHipsPr.dsp (4.40 KB)

RegHipsPr.dsw (543.0 B)

main.c (2.10 KB)

makefile (374.0 B)

precomp.h (130.0 B)

regMon.c (9.64 KB)

regMon.h (453.0 B)

SOURCES (85.0 B)

regsbpr

regsbpr.dsp (4.61 KB)

regsbpr.dsw (539.0 B)

main.c (2.67 KB)

makefile (374.0 B)

precomp.h (310.0 B)

regMon.c (4.31 KB)

regMon.h (1.09 KB)

sbReg.c (26.2 KB)

sbReg.h (1.49 KB)

sbToolApi.c (37.8 KB)

sbToolApi.h (2.31 KB)

SOURCES (103.0 B)

sbtest

ReadMe.txt (1.18 KB)

sbtest.cpp (1.83 KB)

sbtest.dsp (4.43 KB)

sbtest.dsw (537.0 B)

StdAfx.cpp (293.0 B)

StdAfx.h (667.0 B)

麦洛克菲内核驱动开发第八课.ppt (1.54 MB)

15five-MFC

demo

classdemo

classdemo.cpp (1.96 KB)

classdemo.dsp (4.46 KB)

classdemo.dsw (543.0 B)

StdAfx.cpp (296.0 B)

StdAfx.h (667.0 B)

controls

Pic

ButtonL_Light.bmp (34.9 KB)

ButtonMinStyle.bmp (19.1 KB)

close.bmp (6.18 KB)

default1.bin (650.0 B)

lclose.bmp (6.18 KB)

lmin.bmp (6.18 KB)

min.bmp (6.18 KB)

tabctrlex.bmp (2.82 KB)

topic.bmp (621.7 KB)

360TabCtrl.cpp (4.67 KB)

360TabCtrl.h (425.0 B)

CBaseButton.cpp (3.75 KB)

CBaseButton.h (1.78 KB)

CExLabel.cpp (1.63 KB)

CExLabel.h (1.22 KB)

CheckedButton.cpp (1.35 KB)

CheckedButton.h (1.12 KB)

CImgButton.cpp (4.98 KB)

CImgButton.h (1.92 KB)

FlatEdit.cpp (6.67 KB)

FlatEdit.h (2.07 KB)

HyperLink.cpp (12.5 KB)

HyperLink.h (3.07 KB)

installer

Bin

res

arrow.bmp (3.05 KB)

bg_new.bmp (416.8 KB)

btn_back.png (5.14 KB)

btn_close.png (6.49 KB)

check.bmp (2.04 KB)

close.bmp (6.18 KB)

dlg_border_bl.bmp (1.21 KB)

dlg_border_bm.bmp (648.0 B)

dlg_border_br.bmp (1.21 KB)

dlg_border_ml.bmp (80.0 B)

dlg_border_mr.bmp (80.0 B)

dlg_border_tl.bmp (1.02 KB)

dlg_border_tm.bmp (552.0 B)

dlg_border_tr.bmp (1.02 KB)

dlg_close2.bmp (9.59 KB)

dlg_min.bmp (8.05 KB)

head_separator.bmp (200.0 B)

headctrl.bmp (3.41 KB)

INeed.ico (24.6 KB)

INeed.rc2 (361.0 B)

MainIconMan.ICO (24.6 KB)

PlusMinus.bmp (804.0 B)

radio.bmp (2.04 KB)

scroll.bmp (36.1 KB)

tabctrlex.bmp (2.82 KB)

TitleImage.bmp (1.05 KB)

topic.bmp (1.05 KB)

getresult (1.15 KB)

INeed.exe (1.29 MB)

iotemp.ini (435.0 B)

Licence.txt (861.0 B)

mfc90ud.dll (2.29 MB)

Microsoft.VC90.DebugCRT.manifest (532.0 B)

Microsoft.VC90.DebugMFC.manifest (557.0 B)

msvcp90d.dll (848.5 KB)

msvcr90d.dll (1.13 MB)

SkinControls.dll (1.01 MB)

baiduinstall.nsi (8.08 KB)

ineedinstall.nsi (5.90 KB)

logindemo

Debug

res

ButtonL_Light.bmp (34.9 KB)

lclose.bmp (6.18 KB)

lmin.bmp (6.18 KB)

logindemo.ico (1.05 KB)

logindemo.rc2 (401.0 B)

CBaseButton.cpp (3.75 KB)

CBaseButton.h (1.78 KB)

CExLabel.cpp (1.63 KB)

CExLabel.h (1.22 KB)

CheckedButton.cpp (1.35 KB)

CheckedButton.h (1.12 KB)

CImgButton.cpp (4.98 KB)

CImgButton.h (1.92 KB)

FlatEdit.cpp (6.67 KB)

FlatEdit.h (2.07 KB)

HyperLink.cpp (12.6 KB)

HyperLink.h (3.07 KB)

logindemo.cpp (2.06 KB)

logindemo.dsp (5.29 KB)

logindemo.dsw (543.0 B)

logindemo.h (1.33 KB)

logindemo.ncb (12.0 MB)

logindemo.rc (6.22 KB)

logindemo.sln (883.0 B)

logindemo.vcproj (10.2 KB)

logindemo.vcproj.zhouyangrong-PC.zhouyangrong.user (1.39 KB)

logindemoDlg.cpp (7.33 KB)

logindemoDlg.h (1.88 KB)

ReadMe.txt (3.55 KB)

resource.h (1.21 KB)

StdAfx.cpp (211.0 B)

StdAfx.h (1.05 KB)

skin

Debug

SkinControls.dll (1.50 MB)

INeed

SkinControls.lib (428.5 KB)

SkinControls

CxImage

xfile.h (2.77 KB)

ximabmp.cpp (13.9 KB)

ximabmp.h (2.51 KB)

ximacfg.h (1.81 KB)

ximadef.h (4.10 KB)

ximadsp.cpp (104.4 KB)

ximaenc.cpp (27.8 KB)

ximaexif.cpp (30.6 KB)

ximage.cpp (16.3 KB)

ximage.h (28.0 KB)

ximagif.cpp (47.9 KB)

ximagif.h (7.85 KB)

ximahist.cpp (16.4 KB)

ximaico.cpp (14.0 KB)

ximaico.h (1.73 KB)

ximainfo.cpp (25.5 KB)

ximaint.cpp (38.7 KB)

ximaiter.h (6.97 KB)

ximajpg.cpp (17.7 KB)

ximajpg.h (9.29 KB)

ximalpha.cpp (10.2 KB)

ximalyr.cpp (3.01 KB)

ximapal.cpp (26.6 KB)

ximapng.cpp (16.6 KB)

ximapng.h (2.32 KB)

ximasel.cpp (21.6 KB)

ximath.cpp (1.84 KB)

ximath.h (802.0 B)

ximatran.cpp (83.5 KB)

ximawnd.cpp (51.4 KB)

xiofile.h (2.96 KB)

xmemfile.cpp (4.86 KB)

xmemfile.h (1,000.0 B)

Debug

jpeg

jcapimin.c (9.19 KB)

jcapistd.c (5.90 KB)

jccoefct.c (16.5 KB)

jccolor.c (14.9 KB)

jcdctmgr.c (12.6 KB)

jchuff.c (28.4 KB)

jchuff.h (1.58 KB)

jcinit.c (2.36 KB)

jcmainct.c (9.24 KB)

jcmarker.c (17.5 KB)

jcmaster.c (20.0 KB)

jcomapi.c (3.14 KB)

jconfig.h (1.67 KB)

jcparam.c (21.4 KB)

jcphuff.c (25.3 KB)

jcprepct.c (12.1 KB)

jcsample.c (18.9 KB)

jctrans.c (14.0 KB)

jdapimin.c (12.7 KB)

jdapistd.c (9.40 KB)

jdatadst.c (5.15 KB)

jdatasrc.c (7.63 KB)

jdcoefct.c (25.3 KB)

jdcolor.c (13.1 KB)

jdct.h (7.05 KB)

jddctmgr.c (8.36 KB)

jdhuff.c (22.8 KB)

jdhuff.h (8.14 KB)

jdinput.c (13.6 KB)

jdmainct.c (20.4 KB)

jdmarker.c (41.6 KB)

jdmaster.c (19.8 KB)

jdmerge.c (14.0 KB)

jdphuff.c (20.7 KB)

jdpostct.c (9.78 KB)

jdsample.c (16.5 KB)

jdtrans.c (5.11 KB)

jerror.c (7.90 KB)

jerror.h (13.9 KB)

jfdctflt.c (5.52 KB)

jfdctfst.c (7.62 KB)

jfdctint.c (11.1 KB)

jidctflt.c (8.49 KB)

jidctfst.c (13.2 KB)

jidctint.c (14.8 KB)

jidctred.c (13.6 KB)

jinclude.h (3.26 KB)

jmemmgr.c (41.2 KB)

jmemnobs.c (2.81 KB)

jmemsys.h (8.23 KB)

jmorecfg.h (12.8 KB)

jpegint.h (15.7 KB)

jpeglib.h (46.2 KB)

jquant1.c (31.4 KB)

jquant2.c (48.6 KB)

jutils.c (5.29 KB)

jversion.h (374.0 B)

png

png.c (22.4 KB)

png.h (144.5 KB)

pngconf.h (43.7 KB)

pngerror.c (9.73 KB)

pnggccrd.c (4.67 KB)

pngget.c (24.2 KB)

pngmem.c (16.5 KB)

pngpread.c (45.8 KB)

pngread.c (46.3 KB)

pngrio.c (5.39 KB)

pngrtran.c (143.3 KB)

pngrutil.c (90.1 KB)

pngset.c (38.3 KB)

pngtrans.c (20.4 KB)

pngvcrd.c (48.0 B)

pngwio.c (7.43 KB)

pngwrite.c (47.6 KB)

pngwtran.c (16.9 KB)

pngwutil.c (82.8 KB)

Release

res

SkinControls.rc2 (379.0 B)

zlib

adler32.c (4.60 KB)

compress.c (2.51 KB)

crc32.c (13.3 KB)

crc32.h (30.3 KB)

deflate.c (64.4 KB)

deflate.h (12.2 KB)

gzio.c (31.4 KB)

infback.c (22.3 KB)

inffast.c (12.6 KB)

inffast.h (418.0 B)

inffixed.h (6.29 KB)

inflate.c (49.2 KB)

inflate.h (5.89 KB)

inftrees.c (13.8 KB)

inftrees.h (2.37 KB)

trees.c (44.2 KB)

trees.h (8.37 KB)

uncompr.c (2.10 KB)

zconf.h (9.64 KB)

zconf.in.h (9.64 KB)

zlib.h (66.0 KB)

zutil.c (7.28 KB)

zutil.h (6.96 KB)

detours.lib (174.7 KB)

ImageOle.dll (69.4 KB)

ImageOle.tlh (2.27 KB)

ImageOle.tli (1.40 KB)

internal.h (6.85 KB)

MemDC.cpp (41.0 B)

MemDC.h (1.42 KB)

OfficeXPMenu.cpp (73.3 KB)

OfficeXPMenu.h (10.4 KB)

PictureEx.cpp (32.6 KB)

PictureEx.h (10.1 KB)

ReadMe.txt (1.66 KB)

resource.h (412.0 B)

scroll.bmp (36.1 KB)

SCROLL.psd (69.4 KB)

SkinButton.cpp (7.51 KB)

SkinButton.h (2.35 KB)

SkinCheckBox.cpp (3.67 KB)

SkinCheckBox.h (1.22 KB)

SkinComboBox.cpp (3.22 KB)

SkinComboBox.h (1.04 KB)

SkinControls.cpp (6.24 KB)

SkinControls.def (112.0 B)

SkinControls.h (2.52 KB)

SkinControls.ncb (17.7 MB)

SkinControls.rc (2.19 KB)

SkinControls.sln (1.29 KB)

SkinControls.suo (21.0 KB)

SkinControls.vcproj (18.0 KB)

SkinControls.vcproj.ADMIN-734DC0F1C.ZYR.user (1.37 KB)

SkinControls_d.def (114.0 B)

SkinDialog.cpp (18.4 KB)

SkinDialog.h (5.37 KB)

SkinEdit.cpp (4.97 KB)

SkinEdit.h (1.67 KB)

SkinGroupBox.cpp (3.99 KB)

SkinGroupBox.h (1.16 KB)

SkinHyperLink.cpp (5.41 KB)

SkinHyperLink.h (2.20 KB)

SkinListBox.cpp (1.09 KB)

SkinListBox.h (382.0 B)

SkinListCtrl.cpp (12.8 KB)

SkinListCtrl.h (5.02 KB)

SkinMenu.cpp (154.9 KB)

SkinMenu.h (19.4 KB)

SkinProgressCtrl.cpp (2.41 KB)

SkinProgressCtrl.h (1.08 KB)

SkinRadio.cpp (4.62 KB)

SkinRadio.h (964.0 B)

SkinRichEdit.cpp (18.4 KB)

SkinRichEdit.h (4.64 KB)

SkinScrollBar.cpp (50.4 KB)

SkinScrollBar.h (8.20 KB)

SkinSilderCtrl.h (2.39 KB)

SkinSliderCtrl.cpp (8.15 KB)

SkinSplitter.cpp (11.7 KB)

SkinSplitter.h (3.41 KB)

SkinTreeCtrl.cpp (8.81 KB)

SkinTreeCtrl.h (3.01 KB)

SkinUIButton.cpp (4.01 KB)

SkinUIButton.h (1.23 KB)

SkinUICheckBox.cpp (3.04 KB)

SkinUICheckBox.h (1,000.0 B)

SkinUIControl.cpp (3.97 KB)

SkinUIControl.h (2.42 KB)

SkinUIGroupBox.cpp (1.13 KB)

SkinUIGroupBox.h (412.0 B)

SkinUIHyperLink.cpp (2.21 KB)

SkinUIHyperLink.h (839.0 B)

SkinUIProgress.cpp (1.82 KB)

SkinUIProgress.h (864.0 B)

SkinUIRadioBox.cpp (885.0 B)

SkinUIRadioBox.h (632.0 B)

SkinUISlider.cpp (5.01 KB)

SkinUISlider.h (932.0 B)

SkinUIText.cpp (431.0 B)

SkinUIText.h (353.0 B)

SkinUIWnd.cpp (5.18 KB)

SkinUIWnd.h (1.60 KB)

stdafx.cpp (143.0 B)

stdafx.h (1.56 KB)

StringPtrMap.cpp (3.00 KB)

StringPtrMap.h (577.0 B)

SkinDemo

Debug

res

arrow.bmp (3.05 KB)

bg_new.bmp (416.8 KB)

btn_back.png (5.14 KB)

btn_close.png (6.49 KB)

check.bmp (2.04 KB)

close.bmp (6.18 KB)

dlg_border_bl.bmp (1.21 KB)

dlg_border_bm.bmp (648.0 B)

dlg_border_br.bmp (1.21 KB)

dlg_border_ml.bmp (80.0 B)

dlg_border_mr.bmp (80.0 B)

dlg_border_tl.bmp (1.02 KB)

dlg_border_tm.bmp (552.0 B)

dlg_border_tr.bmp (1.02 KB)

dlg_close2.bmp (9.59 KB)

dlg_min.bmp (8.05 KB)

head_separator.bmp (200.0 B)

headctrl.bmp (3.41 KB)

PlusMinus.bmp (804.0 B)

radio.bmp (2.04 KB)

scroll.bmp (36.1 KB)

SkinDemo.ico (21.1 KB)

SkinDemo.rc2 (364.0 B)

tabctrlex.bmp (2.82 KB)

TitleImage.bmp (1.05 KB)

SkinControls.dll (1.50 MB)

SkinControls.lib (428.5 KB)

SkinDemo.exe (106.0 KB)

SkinDemo

Debug

res

arrow.bmp (3.05 KB)

bg_new.bmp (416.8 KB)

btn_back.png (5.14 KB)

btn_close.png (6.49 KB)

check.bmp (2.04 KB)

close.bmp (6.18 KB)

dlg_border_bl.bmp (1.21 KB)

dlg_border_bm.bmp (648.0 B)

dlg_border_br.bmp (1.21 KB)

dlg_border_ml.bmp (80.0 B)

dlg_border_mr.bmp (80.0 B)

dlg_border_tl.bmp (1.02 KB)

dlg_border_tm.bmp (552.0 B)

dlg_border_tr.bmp (1.02 KB)

dlg_close2.bmp (9.59 KB)

dlg_min.bmp (8.05 KB)

head_separator.bmp (200.0 B)

headctrl.bmp (3.41 KB)

PlusMinus.bmp (804.0 B)

radio.bmp (2.04 KB)

scroll.bmp (36.1 KB)

SkinDemo.ico (21.1 KB)

SkinDemo.rc2 (364.0 B)

tabctrlex.bmp (2.82 KB)

TitleImage.bmp (1.05 KB)

ReadMe.txt (2.72 KB)

Resource.h (772.0 B)

SkinControls.dll (1.50 MB)

SkinControls.lib (428.5 KB)

SkinDemo.aps (57.4 KB)

SkinDemo.cpp (2.82 KB)

SkinDemo.h (453.0 B)

SkinDemo.rc (5.31 KB)

SkinDemo.vcproj (5.43 KB)

SkinDemo.vcproj.ADMIN-734DC0F1C.ZYR.user (1.39 KB)

SkinDemoDlg.cpp (3.97 KB)

SkinDemoDlg.h (850.0 B)

stdafx.cpp (1.03 KB)

stdafx.h (2.70 KB)

targetver.h (1.01 KB)

SkinDemo.sln (1.33 KB)

SkinControls

_UpgradeReport_Files

UpgradeReport.css (3.27 KB)

UpgradeReport.xslt (12.3 KB)

UpgradeReport_Minus.gif (69.0 B)

UpgradeReport_Plus.gif (71.0 B)

bin

release

Res

Common

btn_back.png (5.14 KB)

btn_close.png (6.49 KB)

btn_min.png (3.37 KB)

check.png (2.98 KB)

radio.png (3.23 KB)

scroll.bmp (36.1 KB)

Thumbs.db (15.5 KB)

SkinWnd

Thumbs.db (12.0 KB)

wnd_bl.png (2.98 KB)

wnd_bm.png (2.81 KB)

wnd_br.png (3.00 KB)

wnd_ml.png (2.75 KB)

wnd_mr.png (2.75 KB)

wnd_tl.png (2.97 KB)

wnd_tm.png (2.83 KB)

wnd_tr.png (2.98 KB)

Test

0.gif (3.73 KB)

arrow.bmp (3.05 KB)

bg.jpg (39.8 KB)

check.bmp (2.04 KB)

dlg_border_bl.bmp (1.21 KB)

dlg_border_bm.bmp (648.0 B)

dlg_border_br.bmp (1.21 KB)

dlg_border_ml.bmp (80.0 B)

dlg_border_mr.bmp (80.0 B)

dlg_border_tl.bmp (1.02 KB)

dlg_border_tm.bmp (552.0 B)

dlg_border_tr.bmp (1.02 KB)

dlg_close1.bmp (9.59 KB)

dlg_close2.bmp (9.59 KB)

dlg_max.bmp (8.30 KB)

dlg_min.bmp (8.05 KB)

dlg_resore.bmp (8.30 KB)

head_separator.bmp (200.0 B)

headctrl.bmp (3.41 KB)

hue.png (1.24 KB)

jeton.png (21.3 KB)

luminance.png (2.95 KB)

PlusMinus.bmp (804.0 B)

radio.bmp (2.04 KB)

saturation.png (2.96 KB)

system_msg.bmp (2.68 KB)

thumb.png (441.0 B)

lib

SkinControls.exp (246.9 KB)

SkinControls.lib (409.7 KB)

SkinControls_d.lib (431.2 KB)

SkinControls

CxImage

xfile.h (2.77 KB)

ximabmp.cpp (13.9 KB)

ximabmp.h (2.51 KB)

ximacfg.h (1.81 KB)

ximadef.h (4.10 KB)

ximadsp.cpp (104.4 KB)

ximaenc.cpp (27.8 KB)

ximaexif.cpp (30.6 KB)

ximage.cpp (16.3 KB)

ximage.h (27.9 KB)

ximagif.cpp (47.9 KB)

ximagif.h (7.85 KB)

ximahist.cpp (16.4 KB)

ximaico.cpp (14.0 KB)

ximaico.h (1.73 KB)

ximainfo.cpp (25.5 KB)

ximaint.cpp (38.7 KB)

ximaiter.h (6.97 KB)

ximajpg.cpp (17.7 KB)

ximajpg.h (9.29 KB)

ximalpha.cpp (10.2 KB)

ximalyr.cpp (3.01 KB)

ximapal.cpp (26.6 KB)

ximapng.cpp (16.6 KB)

ximapng.h (2.32 KB)

ximasel.cpp (21.6 KB)

ximath.cpp (1.84 KB)

ximath.h (802.0 B)

ximatran.cpp (83.5 KB)

ximawnd.cpp (51.4 KB)

xiofile.h (2.93 KB)

xmemfile.cpp (4.86 KB)

xmemfile.h (1,000.0 B)

jpeg

jcapimin.c (9.19 KB)

jcapistd.c (5.90 KB)

jccoefct.c (16.5 KB)

jccolor.c (14.9 KB)

jcdctmgr.c (12.6 KB)

jchuff.c (28.4 KB)

jchuff.h (1.58 KB)

jcinit.c (2.36 KB)

jcmainct.c (9.24 KB)

jcmarker.c (17.5 KB)

jcmaster.c (20.0 KB)

jcomapi.c (3.14 KB)

jconfig.h (1.67 KB)

jcparam.c (21.4 KB)

jcphuff.c (25.3 KB)

jcprepct.c (12.1 KB)

jcsample.c (18.9 KB)

jctrans.c (14.0 KB)

jdapimin.c (12.7 KB)

jdapistd.c (9.40 KB)

jdatadst.c (5.15 KB)

jdatasrc.c (7.63 KB)

jdcoefct.c (25.3 KB)

jdcolor.c (13.1 KB)

jdct.h (7.05 KB)

jddctmgr.c (8.36 KB)

jdhuff.c (22.8 KB)

jdhuff.h (8.14 KB)

jdinput.c (13.6 KB)

jdmainct.c (20.4 KB)

jdmarker.c (41.6 KB)

jdmaster.c (19.8 KB)

jdmerge.c (14.0 KB)

jdphuff.c (20.7 KB)

jdpostct.c (9.78 KB)

jdsample.c (16.5 KB)

jdtrans.c (5.11 KB)

jerror.c (7.86 KB)

jerror.h (13.9 KB)

jfdctflt.c (5.52 KB)

jfdctfst.c (7.62 KB)

jfdctint.c (11.1 KB)

jidctflt.c (8.49 KB)

jidctfst.c (13.2 KB)

jidctint.c (14.8 KB)

jidctred.c (13.6 KB)

jinclude.h (3.26 KB)

jmemmgr.c (41.1 KB)

jmemnobs.c (2.81 KB)

jmemsys.h (8.23 KB)

jmorecfg.h (12.8 KB)

jpegint.h (15.7 KB)

jpeglib.h (46.2 KB)

jquant1.c (31.4 KB)

jquant2.c (48.6 KB)

jutils.c (5.29 KB)

jversion.h (374.0 B)

png

png.c (22.4 KB)

png.h (144.5 KB)

pngconf.h (43.7 KB)

pngerror.c (9.73 KB)

pnggccrd.c (4.67 KB)

pngget.c (24.2 KB)

pngmem.c (16.5 KB)

pngpread.c (45.8 KB)

pngread.c (46.3 KB)

pngrio.c (5.39 KB)

pngrtran.c (143.3 KB)

pngrutil.c (90.1 KB)

pngset.c (38.3 KB)

pngtrans.c (20.4 KB)

pngvcrd.c (48.0 B)

pngwio.c (7.43 KB)

pngwrite.c (47.6 KB)

pngwtran.c (16.9 KB)

pngwutil.c (82.8 KB)

Release

res

SkinControls.rc2 (379.0 B)

zlib

adler32.c (4.60 KB)

compress.c (2.51 KB)

crc32.c (13.3 KB)

crc32.h (30.3 KB)

deflate.c (64.4 KB)

deflate.h (12.2 KB)

gzio.c (31.4 KB)

infback.c (22.3 KB)

inffast.c (12.6 KB)

inffast.h (418.0 B)

inffixed.h (6.29 KB)

inflate.c (49.2 KB)

inflate.h (5.89 KB)

inftrees.c (13.8 KB)

inftrees.h (2.37 KB)

trees.c (44.2 KB)

trees.h (8.37 KB)

uncompr.c (2.10 KB)

zconf.h (9.64 KB)

zconf.in.h (9.64 KB)

zlib.h (66.0 KB)

zutil.c (7.28 KB)

zutil.h (6.96 KB)

detours.lib (174.7 KB)

ImageOle.dll (69.4 KB)

ImageOle.tlh (2.27 KB)

ImageOle.tli (1.40 KB)

internal.h (6.85 KB)

MemDC.cpp (41.0 B)

MemDC.h (1.42 KB)

OfficeXPMenu.cpp (73.3 KB)

OfficeXPMenu.h (10.4 KB)

PictureEx.cpp (32.6 KB)

PictureEx.h (10.1 KB)

ReadMe.txt (1.66 KB)

resource.h (412.0 B)

scroll.bmp (36.1 KB)

SCROLL.psd (69.4 KB)

SkinButton.cpp (7.51 KB)

SkinButton.h (2.35 KB)

SkinCheckBox.cpp (3.67 KB)

SkinCheckBox.h (1.22 KB)

SkinComboBox.cpp (3.22 KB)

SkinComboBox.h (1.04 KB)

SkinControls.aps (32.4 KB)

SkinControls.cpp (6.24 KB)

SkinControls.def (112.0 B)

SkinControls.h (2.52 KB)

SkinControls.ncb (1.10 MB)

SkinControls.rc (2.19 KB)

SkinControls.sln (2.08 KB)

SkinControls.suo (21.0 KB)

SkinControls.vcproj (18.0 KB)

SkinControls.vcproj.ADMIN-734DC0F1C.ZYR.user (1.37 KB)

SkinControls_d.def (116.0 B)

SkinDialog.cpp (17.8 KB)

SkinDialog.h (5.32 KB)

SkinEdit.cpp (4.95 KB)

SkinEdit.h (1.67 KB)

SkinGroupBox.cpp (3.99 KB)

SkinGroupBox.h (1.16 KB)

SkinHyperLink.cpp (5.41 KB)

SkinHyperLink.h (2.20 KB)

SkinListBox.cpp (1.09 KB)

SkinListBox.h (382.0 B)

SkinListCtrl.cpp (10.9 KB)

SkinListCtrl.h (4.81 KB)

SkinMenu.cpp (154.9 KB)

SkinMenu.h (19.4 KB)

SkinProgressCtrl.cpp (2.41 KB)

SkinProgressCtrl.h (1.08 KB)

SkinRadio.cpp (4.62 KB)

SkinRadio.h (964.0 B)

SkinRichEdit.cpp (18.4 KB)

SkinRichEdit.h (4.64 KB)

SkinScrollBar.cpp (50.4 KB)

SkinScrollBar.h (8.20 KB)

SkinSilderCtrl.h (2.39 KB)

SkinSliderCtrl.cpp (8.15 KB)

SkinSplitter.cpp (11.7 KB)

SkinSplitter.h (3.41 KB)

SkinTreeCtrl.cpp (8.81 KB)

SkinTreeCtrl.h (3.01 KB)

SkinUIButton.cpp (4.01 KB)

SkinUIButton.h (1.23 KB)

SkinUICheckBox.cpp (3.04 KB)

SkinUICheckBox.h (1,000.0 B)

SkinUIControl.cpp (3.97 KB)

SkinUIControl.h (2.42 KB)

SkinUIGroupBox.cpp (1.13 KB)

SkinUIGroupBox.h (412.0 B)

SkinUIHyperLink.cpp (2.21 KB)

SkinUIHyperLink.h (839.0 B)

SkinUIProgress.cpp (1.82 KB)

SkinUIProgress.h (864.0 B)

SkinUIRadioBox.cpp (885.0 B)

SkinUIRadioBox.h (632.0 B)

SkinUISlider.cpp (5.01 KB)

SkinUISlider.h (932.0 B)

SkinUIText.cpp (431.0 B)

SkinUIText.h (353.0 B)

SkinUIWnd.cpp (5.18 KB)

SkinUIWnd.h (1.60 KB)

stdafx.cpp (143.0 B)

stdafx.h (1.53 KB)

StringPtrMap.cpp (3.00 KB)

StringPtrMap.h (577.0 B)

Test

res

Test.ico (21.1 KB)

Test.manifest (693.0 B)

Test.rc2 (360.0 B)

detours.h (20.8 KB)

detours.lib (174.7 KB)

ReadMe.txt (2.70 KB)

resource.h (1.20 KB)

SkinControls.lib (431.2 KB)

SkinDlg.cpp (4.18 KB)

SkinDlg.h (936.0 B)

SkinWnd.cpp (12.3 KB)

SkinWnd.h (1.44 KB)

stdafx.cpp (133.0 B)

stdafx.h (1.47 KB)

Test.aps (57.0 KB)

Test.cpp (1.65 KB)

Test.h (455.0 B)

Test.rc (6.21 KB)

Test.vcproj (5.92 KB)

Test.vcproj.ADMIN-734DC0F1C.ZYR.user (1.39 KB)

TestDlg.cpp (1.89 KB)

TestDlg.h (636.0 B)

SkinControls.sln (1.32 KB)

SkinControls.suo (14.5 KB)

UpgradeLog.XML (7.86 KB)

tabctrldemo

Debug

res

default1.bin (650.0 B)

tabctrldemo.ico (1.05 KB)

tabctrldemo.rc2 (403.0 B)

tabctrlex.bmp (2.82 KB)

360TabCtrl.cpp (4.71 KB)

360TabCtrl.h (425.0 B)

PageFile.cpp (1,014.0 B)

PageFile.h (1.21 KB)

PageNet.cpp (1,002.0 B)

PageNet.h (1.20 KB)

PageProcess.cpp (1.03 KB)

PageProcess.h (1.25 KB)

ReadMe.txt (3.58 KB)

resource.h (1.12 KB)

StdAfx.cpp (213.0 B)

StdAfx.h (1.03 KB)

tabctrldemo.aps (25.9 KB)

tabctrldemo.clw (2.27 KB)

tabctrldemo.cpp (2.08 KB)

tabctrldemo.dsp (4.79 KB)

tabctrldemo.dsw (547.0 B)

tabctrldemo.h (1.35 KB)

tabctrldemo.ncb (49.0 KB)

tabctrldemo.opt (53.5 KB)

tabctrldemo.plg (3.07 KB)

tabctrldemo.rc (6.96 KB)

tabctrldemo.sln (887.0 B)

tabctrldemo.suo (11.5 KB)

tabctrldemo.vcproj (9.15 KB)

tabctrldemo.vcproj.ADMIN-734DC0F1C.ZYR.user (1.39 KB)

tabctrldemoDlg.cpp (5.37 KB)

tabctrldemoDlg.h (1.66 KB)

uidemo

Debug

res

default1.bin (650.0 B)

uidemo.ico (1.05 KB)

uidemo.rc2 (398.0 B)

ReadMe.txt (3.50 KB)

resource.h (1.20 KB)

StdAfx.cpp (208.0 B)

StdAfx.h (1.09 KB)

uidemo.clw (1.44 KB)

uidemo.cpp (2.01 KB)

uidemo.dsp (4.06 KB)

uidemo.dsw (537.0 B)

uidemo.h (1.29 KB)

uidemo.opt (53.5 KB)

uidemo.plg (1.75 KB)

uidemo.rc (5.96 KB)

uidemo.sln (877.0 B)

uidemo.suo (15.0 KB)

uidemo.vcproj (7.33 KB)

uidemo.vcproj.ADMIN-734DC0F1C.ZYR.user (1.39 KB)

uidemoDlg.cpp (12.8 KB)

uidemoDlg.h (2.13 KB)

cnisedit203.exe (974.9 KB)

对话框美化.txt (2.24 KB)

duilib v1.1.zip (8.25 MB)

Duilib入门文档.doc (203.5 KB)

控件使用.txt (11.4 KB)

MFC多线程.txt (1.00 KB)

nsis-2.46-setup_22742.zip (1.51 MB)

trayicon.txt (1.89 KB)

注册热键.txt (1.72 KB)

mfc.txt

麦洛克菲界面开发与美化.ppt (662.5 KB)

2移动安全

移动安全培训第二课

tools

apktool1.5.2.tar.bz2 (2.42 MB)

AXMLPrinter2.jar (24.0 KB)

baksmali-2.0.3.jar (999.4 KB)

dex2jar-0.0.9.15.zip (1.60 MB)

jd-gui-0.3.6.windows.zip (770.1 KB)

JEB-1.5.201404100.cr.rar (3.37 MB)

smali-2.0.3.jar (846.9 KB)

testkey.pk8 (1.19 KB)

testkey.x509.pem (1.64 KB)

vts_2.6.16.10020.rar (11.2 MB)

web

Dalvik opcodes_files

clip_result.html (2.15 KB)

pgstat.js (130.0 B)

Dalvik opcodes.html (114.6 KB)

样本

Calculator (124.4 KB)

com.agilebinary.phonebeagle-1.72.apk.zip (411.9 KB)

libhello-jni.so (13.1 KB)

Unflod.dylib (20.6 KB)

作业

cbc474e34f26b4afd02932d8cae9e401.zip (4.55 MB)

android 程序分析流程总结.txt (2.46 KB)

android native c 的so调试.txt (1,008.0 B)

多参数接口分析.txt (3.04 KB)

麦洛克菲移动安全培训第二课.ppt (743.0 KB)

移动安全培训第二课_课堂笔记

课堂笔记

课堂作业

1apk反编译

Calculator.txt (66.0 B)

Hello.apk.docx (18.0 KB)

Unflod.dylib.txt (70.0 B)

2smail反编译

Hello.smail.txt (98.0 B)

3arm反编译

libhello-jni.so.txt (33.0 B)

4.逆向apk

com.agilebinary.phonebeagle-1.72.apk.txt (640.0 B)

tools

Apkdb180.exe (22.6 MB)

apktool1.5.2.tar.bz2 (2.42 MB)

AXMLPrinter2.jar (24.0 KB)

baksmali-2.0.3.jar (999.4 KB)

dex2jar-0.0.9.15.zip (1.60 MB)

jd-gui-0.3.6.windows.zip (770.1 KB)

JEB-1.5.201404100.cr.rar (3.37 MB)

smali-2.0.3.jar (846.9 KB)

testkey.pk8 (1.19 KB)

testkey.x509.pem (1.64 KB)

web

Dalvik opcodes_files

clip_result.html (2.15 KB)

pgstat.js (130.0 B)

Dalvik opcodes.html (114.6 KB)

样本

Calculator (124.4 KB)

com.agilebinary.phonebeagle-1.72.apk (411.9 KB)

libhello-jni.so (13.1 KB)

Unflod.dylib (20.6 KB)

作业

cbc474e34f26b4afd02932d8cae9e401.zip (4.55 MB)

android 程序分析流程总结.txt (2.46 KB)

android native c 的so调试.txt (1,008.0 B)

多参数接口分析.txt (3.10 KB)

麦洛克菲移动安全培训第二课.ppt (713.5 KB)

移动安全培训第三课

程序库

include.rar (139.6 KB)

lib.zip (461.9 KB)

note.txt (69.0 B)

IPC_Achieve

assets

LibHook

jni

Android.mk (740.0 B)

Application.mk (14.0 B)

hook.c (3.95 KB)

obj

local

armeabi

objs

hook

hook.o.d.org (10.6 KB)

convert-dependencies.sh (527.0 B)

LibInject

jni

Android.mk (787.0 B)

Application.mk (25.0 B)

inject.c (10.5 KB)

inject.h (418.0 B)

shellcode.s (1.21 KB)

libs

armeabi

inject (14.4 KB)

armeabi-v7a

obj

local

armeabi

objs

inject

inject.o (30.7 KB)

inject.o.d (13.3 KB)

shellcode.o (2.81 KB)

inject (52.2 KB)

libinject.so (55.9 KB)

armeabi-v7a

mips

convert-dependencies.sh (527.0 B)

res

drawable

ic_launcher.png (4.05 KB)

layout

binder_layout.xml (832.0 B)

main.xml (631.0 B)

raw

media_volume.ogg (11.7 KB)

values

strings.xml (117.0 B)

sample

jni

Android.mk (764.0 B)

Application.mk (14.0 B)

test.c (532.0 B)

libs

armeabi

test (9.27 KB)

armeabi-v7a

test (9.28 KB)

mips

test (5.25 KB)

x86

test (5.21 KB)

obj

local

armeabi

objs

test

test.o (5.73 KB)

test.o.d (4.92 KB)

test (36.1 KB)

armeabi-v7a

objs

test

test.o (5.94 KB)

test.o.d (4.92 KB)

test (36.2 KB)

mips

objs

test

test.o (6.06 KB)

test.o.d (4.95 KB)

test (9.85 KB)

x86

objs

test

test.o (5.76 KB)

test.o.d (4.92 KB)

test (9.25 KB)

convert-dependencies.sh (527.0 B)

jni

Android.mk (740.0 B)

Application.mk (14.0 B)

test.c (78.0 B)

libs

armeabi

libtest.so (13.1 KB)

armeabi-v7a

libtest.so (13.1 KB)

mips

libtest.so (5.19 KB)

x86

libtest.so (5.09 KB)

obj

local

armeabi

objs

test

test.o (3.52 KB)

test.o.d (3.49 KB)

libtest.so (38.1 KB)

armeabi-v7a

objs

test

test.o (3.30 KB)

test.o.d (3.50 KB)

libtest.so (38.0 KB)

mips

objs

test

test.o (3.36 KB)

test.o.d (3.51 KB)

libtest.so (7.51 KB)

x86

objs

test

test.o (3.45 KB)

test.o.d (3.49 KB)

libtest.so (7.27 KB)

convert-dependencies.sh (527.0 B)

src

com

eric

ipc

aidl

AIDLActivity.java (2.33 KB)

IMediaPlayer.aidl (85.0 B)

MyBinder.java (462.0 B)

MyMediaPlayer.java (836.0 B)

MyService.java (1.10 KB)

binder

BinderActivity.java (2.52 KB)

MyBinder.java (670.0 B)

MyMediaPlayer.java (838.0 B)

MyService.java (705.0 B)

MainActivity.java (1.14 KB)

.classpath (364.0 B)

.project (847.0 B)

AndroidManifest.xml (1.21 KB)

JavaInjectApp.rar (707.2 KB)

麦洛克菲移动安全培训第三课.ppt (5.04 MB)

proguard.cfg (1.22 KB)

project.properties (360.0 B)

LibHook

jni

Android.mk (740.0 B)

Application.mk (14.0 B)

hook.c (3.95 KB)

obj

local

armeabi

objs

hook

hook.o.d.org (10.6 KB)

convert-dependencies.sh (527.0 B)

LibInject

jni

Android.mk (787.0 B)

Application.mk (25.0 B)

inject.c (10.5 KB)

inject.h (418.0 B)

shellcode.s (1.21 KB)

libs

armeabi

inject (14.4 KB)

armeabi-v7a

obj

local

armeabi

objs

inject

inject.o (30.7 KB)

inject.o.d (13.3 KB)

shellcode.o (2.81 KB)

inject (52.2 KB)

libinject.so (55.9 KB)

armeabi-v7a

mips

convert-dependencies.sh (527.0 B)

sample

jni

Android.mk (764.0 B)

Application.mk (14.0 B)

test.c (532.0 B)

libs

armeabi

test (9.27 KB)

armeabi-v7a

test (9.28 KB)

mips

test (5.25 KB)

x86

test (5.21 KB)

obj

local

armeabi

objs

test

test.o (5.73 KB)

test.o.d (4.92 KB)

test (36.1 KB)

armeabi-v7a

objs

test

test.o (5.94 KB)

test.o.d (4.92 KB)

test (36.2 KB)

mips

objs

test

test.o (6.06 KB)

test.o.d (4.95 KB)

test (9.85 KB)

x86

objs

test

test.o (5.76 KB)

test.o.d (4.92 KB)

test (9.25 KB)

convert-dependencies.sh (527.0 B)

jni

Android.mk (740.0 B)

Application.mk (14.0 B)

test.c (78.0 B)

libs

armeabi

libtest.so (13.1 KB)

armeabi-v7a

libtest.so (13.1 KB)

mips

libtest.so (5.19 KB)

x86

libtest.so (5.09 KB)

obj

local

armeabi

objs

test

test.o (3.52 KB)

test.o.d (3.49 KB)

libtest.so (38.1 KB)

armeabi-v7a

objs

test

test.o (3.30 KB)

test.o.d (3.50 KB)

libtest.so (38.0 KB)

mips

objs

test

test.o (3.36 KB)

test.o.d (3.51 KB)

libtest.so (7.51 KB)

x86

objs

test

test.o (3.45 KB)

test.o.d (3.49 KB)

libtest.so (7.27 KB)

convert-dependencies.sh (527.0 B)

JavaInjectApp.rar (707.2 KB)

麦洛克菲移动安全培训第三课.ppt (5.04 MB)

移动安全培训第四课

boot

安卓漏洞分析.docx (26.6 KB)

boot.img (16.0 MB)

Entropy512.sh (376.0 B)

make2.py (893.0 B)

split_bootimg.pl (5.98 KB)

syms.txt (1.12 MB)

bootloader

1.txt (51.0 B)

aboot.mbn (1.21 MB)

boot.img (10.5 MB)

NON-HLOS.bin (3.61 MB)

recovery.img (11.9 MB)

rpm.mbn (160.1 KB)

sbl1.mbn (268.7 KB)

tz.mbn (305.0 KB)

bootloader_miui_MI2_JLB34

boot.img (6.35 MB)

emmc_appsboot.mbn (1.01 MB)

rpm.mbn (136.7 KB)

sbl1.mbn (82.2 KB)

sbl2.mbn (128.0 KB)

sbl3.mbn (296.4 KB)

tz.mbn (196.4 KB)

麦洛克菲移动安全培训第四课.ppt (892.0 KB)

移动安全培训第四课_课堂笔记

boot

Entropy512

Entropy512.sh (376.0 B)

make2.py (893.0 B)

syms.txt (1.12 MB)

zImage (16.0 MB)

zImage_unpacked (6.47 MB)

zImage_unpacked.idc (16.5 MB)

split_bootimg

boot.img-kernel (3.03 MB)

split_bootimg.pl (5.98 KB)

安卓漏洞分析.docx (26.6 KB)

boot.img (16.0 MB)

boot分析.txt (397.0 B)

bootloader

1.txt (51.0 B)

aboot.mbn (1.21 MB)

boot.img (10.5 MB)

NON-HLOS.bin (3.61 MB)

recovery.img (11.9 MB)

rpm.mbn (160.1 KB)

sbl1.mbn (268.7 KB)

tz.mbn (305.0 KB)

bootloader_miui_MI2_JLB34

boot.img (6.35 MB)

emmc_appsboot.mbn (1.01 MB)

分析.txt (436.0 B)

rpm.mbn (136.7 KB)

sbl1.mbn (82.2 KB)

sbl2.mbn (128.0 KB)

sbl3.mbn (296.4 KB)

tz.mbn (196.4 KB)

课堂笔记

课堂作业

麦洛克菲移动安全培训第四课.ppt (912.5 KB)

移动安全培训第三课_课堂笔记

程序库

include.rar (139.6 KB)

lib.zip (461.9 KB)

note.txt (69.0 B)

IPC_Achieve

assets

LibHook

jni

Android.mk (740.0 B)

Application.mk (14.0 B)

hook.c (3.95 KB)

obj

local

armeabi

objs

hook

hook.o.d.org (10.6 KB)

convert-dependencies.sh (527.0 B)

LibInject

jni

Android.mk (787.0 B)

Application.mk (25.0 B)

inject.c (10.5 KB)

inject.h (418.0 B)

shellcode.s (1.21 KB)

libs

armeabi

inject (14.4 KB)

armeabi-v7a

obj

local

armeabi

objs

inject

inject.o (30.7 KB)

inject.o.d (13.3 KB)

shellcode.o (2.81 KB)

inject (52.2 KB)

libinject.so (55.9 KB)

armeabi-v7a

mips

convert-dependencies.sh (527.0 B)

res

drawable

ic_launcher.png (4.05 KB)

layout

binder_layout.xml (832.0 B)

main.xml (631.0 B)

raw

media_volume.ogg (11.7 KB)

values

strings.xml (117.0 B)

sample

jni

Android.mk (764.0 B)

Application.mk (14.0 B)

test.c (532.0 B)

libs

armeabi

test (9.27 KB)

armeabi-v7a

test (9.28 KB)

mips

test (5.25 KB)

x86

test (5.21 KB)

obj

local

armeabi

objs

test

test.o (5.73 KB)

test.o.d (4.92 KB)

test (36.1 KB)

armeabi-v7a

objs

test

test.o (5.94 KB)

test.o.d (4.92 KB)

test (36.2 KB)

mips

objs

test

test.o (6.06 KB)

test.o.d (4.95 KB)

test (9.85 KB)

x86

objs

test

test.o (5.76 KB)

test.o.d (4.92 KB)

test (9.25 KB)

convert-dependencies.sh (527.0 B)

jni

Android.mk (740.0 B)

Application.mk (14.0 B)

test.c (78.0 B)

libs

armeabi

libtest.so (13.1 KB)

armeabi-v7a

libtest.so (13.1 KB)

mips

libtest.so (5.19 KB)

x86

libtest.so (5.09 KB)

obj

local

armeabi

objs

test

test.o (3.52 KB)

test.o.d (3.49 KB)

libtest.so (38.1 KB)

armeabi-v7a

objs

test

test.o (3.30 KB)

test.o.d (3.50 KB)

libtest.so (38.0 KB)

mips

objs

test

test.o (3.36 KB)

test.o.d (3.51 KB)

libtest.so (7.51 KB)

x86

objs

test

test.o (3.45 KB)

test.o.d (3.49 KB)

libtest.so (7.27 KB)

convert-dependencies.sh (527.0 B)

src

com

eric

ipc

aidl

AIDLActivity.java (2.33 KB)

IMediaPlayer.aidl (85.0 B)

MyBinder.java (462.0 B)

MyMediaPlayer.java (836.0 B)

MyService.java (1.10 KB)

binder

BinderActivity.java (2.52 KB)

MyBinder.java (670.0 B)

MyMediaPlayer.java (838.0 B)

MyService.java (705.0 B)

MainActivity.java (1.14 KB)

.classpath (364.0 B)

.project (847.0 B)

AndroidManifest.xml (1.21 KB)

JavaInjectApp.rar (707.2 KB)

麦洛克菲移动安全培训第三课.ppt (5.05 MB)

proguard.cfg (1.22 KB)

project.properties (360.0 B)

课堂笔记

课堂作业

elf文件分析.txt (44.0 B)

hook.txt (200.0 B)

LibHook.txt (11.0 B)

LibInject.txt (319.0 B)

LibHook

jni

Android.mk (740.0 B)

Application.mk (14.0 B)

hook.c (3.95 KB)

obj

local

armeabi

objs

hook

hook.o.d.org (10.6 KB)

convert-dependencies.sh (527.0 B)

LibInject

jni

Android.mk (787.0 B)

Application.mk (25.0 B)

inject.c (10.5 KB)

inject.h (418.0 B)

shellcode.s (1.21 KB)

libs

armeabi

inject (14.4 KB)

armeabi-v7a

obj

local

armeabi

objs

inject

inject.o (30.7 KB)

inject.o.d (13.3 KB)

shellcode.o (2.81 KB)

inject (52.2 KB)

libinject.so (55.9 KB)

armeabi-v7a

mips

convert-dependencies.sh (527.0 B)

sample

jni

Android.mk (764.0 B)

Application.mk (14.0 B)

test.c (532.0 B)

libs

armeabi

test (9.27 KB)

armeabi-v7a

test (9.28 KB)

mips

test (5.25 KB)

x86

test (5.21 KB)

obj

local

armeabi

objs

test

test.o (5.73 KB)

test.o.d (4.92 KB)

test (36.1 KB)

armeabi-v7a

objs

test

test.o (5.94 KB)

test.o.d (4.92 KB)

test (36.2 KB)

mips

objs

test

test.o (6.06 KB)

test.o.d (4.95 KB)

test (9.85 KB)

x86

objs

test

test.o (5.76 KB)

test.o.d (4.92 KB)

test (9.25 KB)

convert-dependencies.sh (527.0 B)

jni

Android.mk (740.0 B)

Application.mk (14.0 B)

test.c (78.0 B)

libs

armeabi

libtest.so (13.1 KB)

armeabi-v7a

libtest.so (13.1 KB)

mips

libtest.so (5.19 KB)

x86

libtest.so (5.09 KB)

obj

local

armeabi

objs

test

test.o (3.52 KB)

test.o.d (3.49 KB)

libtest.so (38.1 KB)

armeabi-v7a

objs

test

test.o (3.30 KB)

test.o.d (3.50 KB)

libtest.so (38.0 KB)

mips

objs

test

test.o (3.36 KB)

test.o.d (3.51 KB)

libtest.so (7.51 KB)

x86

objs

test

test.o (3.45 KB)

test.o.d (3.49 KB)

libtest.so (7.27 KB)

convert-dependencies.sh (527.0 B)

JavaInjectApp.rar (707.2 KB)

麦洛克菲移动安全培训第三课.ppt (4.87 MB)

移动安全培训第一课

麦洛克菲移动安全培训第一课

pre

Windows环境下Android NDK环境搭建.doc (3.66 MB)

tools

apktool1.5.2.tar.bz2 (2.42 MB)

AXMLPrinter2.jar (24.0 KB)

dex2jar-0.0.9.15.zip (1.60 MB)

signer.rar (1.53 MB)

tcpdump (630.7 KB)

麦洛克菲移动安全培训第一课.ppt (783.0 KB)

移动安全培训第一课_课堂笔记

课堂笔记

课堂笔记.docx (20.8 KB)

课堂作业

麦洛克菲移动安全培训第一课

pre

Windows环境下Android NDK环境搭建.doc (3.66 MB)

tools

apktool1.5.2.tar.bz2 (2.42 MB)

AXMLPrinter2.jar (24.0 KB)

dex2jar-0.0.9.15.zip (1.60 MB)

signer.rar (1.53 MB)

tcpdump (630.7 KB)

testkey.x509.pem (1.64 KB)

麦洛克菲移动安全培训第一课.ppt (804.5 KB)

3安卓病毒分析

安卓病毒分析

IOS

IDA远程动态调试ios程序.doc (436.5 KB)

tools

dex2jar-0.0.9.15.zip (1.60 MB)

adb command.txt (2.31 KB)

Android可疑函数.txt (13.7 KB)

Android权限大全.txt (11.6 KB)

APK简单分析步骤.doc (46.5 KB)

ARM指令集.chm (256.0 KB)

ARM指令集.pdf (1.73 MB)

安卓手机静态分析.doc (26.0 KB)

Dalvik操作码.pdf (214.4 KB)

Dalvik虚拟机进程模型分析.pdf (274.2 KB)

keword.txt (1.77 KB)

手机病毒分析.ppt (285.5 KB)

中国互联网协会反网络病毒联盟《移动互联网恶意代码描述规范》.pdf (203.3 KB)

安卓病毒分析_课堂笔记

IOS

IDA远程动态调试ios程序.doc (436.5 KB)

tools

adb command.txt (2.31 KB)

Android可疑函数.txt (13.7 KB)

Android权限大全.txt (11.6 KB)

APK简单分析步骤.doc (46.5 KB)

ARM指令集.chm (256.0 KB)

ARM指令集.pdf (1.73 MB)

安卓手机静态分析.doc (26.0 KB)

Dalvik操作码.pdf (214.4 KB)

Dalvik虚拟机进程模型分析.pdf (274.2 KB)

keword.txt (1.77 KB)

手机病毒分析.ppt (282.5 KB)

中国互联网协会反网络病毒联盟《移动互联网恶意代码描述规范》.pdf (203.3 KB)

3逆向基础课程

逆向基础课程

demo

Example1

Debug

Example1.exe (30.0 KB)

Example1.ilk (296.4 KB)

Example1.pdb (443.0 KB)

Example1

Debug

BuildLog.htm (6.77 KB)

Example1.exe.embed.manifest (663.0 B)

Example1.exe.embed.manifest.res (728.0 B)

Example1.exe.intermediate.manifest (621.0 B)

Example1.obj (3.66 KB)

Example1.pch (3.06 MB)

mt.dep (67.0 B)

stdafx.obj (11.6 KB)

vc90.idb (67.0 KB)

vc90.pdb (124.0 KB)

Example1.cpp (382.0 B)

Example1.vcproj (4.41 KB)

Example1.vcproj.t410-PC.t410.user (1.38 KB)

ReadMe.txt (1.28 KB)

stdafx.cpp (295.0 B)

stdafx.h (320.0 B)

targetver.h (765.0 B)

Example1.ncb (475.0 KB)

Example1.sln (890.0 B)

ProcMon

debug

i386

ProcWatch.pdb (123.0 KB)

ProcWatch.sys (2.88 KB)

objchk_wxp_x86

i386

_objects.mac (275.0 B)

procwatch.obj (80.6 KB)

procwatch.obj.oacr.root.x86chk.pft.xml (1.91 KB)

buildchk_wxp_x86.log (3.19 KB)

buildchk_wxp_x86.wrn (187.0 B)

makefile (374.0 B)

ProcWatch.c (2.87 KB)

SOURCES (80.0 B)

SysEnterHook

MAKEFILE (267.0 B)

SOURCES (75.0 B)

sysenter.c (925.0 B)

IDA演示

Test.idb (456.3 KB)

Test.sys (2.63 KB)

资料

StudyPe 1.04Beta4

plugins

advanced_scan.dll (9.50 KB)

GenOEP.dll (5.50 KB)

ImpREC.dll (50.2 KB)

Krypto ANALyzer_2.9.dll (121.5 KB)

UserDB.TXT (1.45 MB)

ZDRx.dll (4.87 KB)

option.ini (177.0 B)

PE_Study.exe (327.0 KB)

使用说明.txt (3.05 KB)

PE.CHM (198.3 KB)

pecoff_v8.doc (1.31 MB)

PE结构图.jpg (567.5 KB)

StudyPe 1.04Beta4.rar (662.8 KB)

WinDBG标准命令列表.pdf (157.2 KB)

Bule Screen Code.doc (343.7 KB)

debugger.chm (3.65 MB)

DriverEntry下断点技巧.pdf (99.9 KB)

汇编指令.doc (37.0 KB)

IDA_Pro_Shortcuts.pdf (70.7 KB)

IOCTL.exe (470.5 KB)

KiFastCallEntry笔记.asm (10.9 KB)

notmyfault.zip (73.6 KB)

OD LoadMap插件.zip (23.1 KB)

驱动调试与逆向技巧.ppt (293.0 KB)

SecretsOfRE_appendix_a.pdf (1.84 MB)

栈帧分析.xls (14.0 KB)

逆向基础课程_课堂笔记

demo

Example1

Debug

Example1.exe (30.0 KB)

Example1.idb (765.9 KB)

Example1.ilk (296.4 KB)

Example1.pdb (443.0 KB)

Example1

Debug

BuildLog.htm (6.77 KB)

Example1.exe.embed.manifest (663.0 B)

Example1.exe.embed.manifest.res (728.0 B)

Example1.exe.intermediate.manifest (621.0 B)

Example1.obj (3.66 KB)

Example1.pch (3.06 MB)

mt.dep (67.0 B)

stdafx.obj (11.6 KB)

vc90.idb (67.0 KB)

vc90.pdb (124.0 KB)

Example1.cpp (382.0 B)

Example1.vcproj (4.41 KB)

Example1.vcproj.t410-PC.t410.user (1.38 KB)

ReadMe.txt (1.28 KB)

stdafx.cpp (295.0 B)

stdafx.h (320.0 B)

targetver.h (765.0 B)

Example1.ncb (475.0 KB)

Example1.sln (890.0 B)

ProcMon

debug

i386

ProcWatch.pdb (123.0 KB)

ProcWatch.sys (2.88 KB)

objchk_wxp_x86

i386

_objects.mac (275.0 B)

procwatch.obj (80.6 KB)

procwatch.obj.oacr.root.x86chk.pft.xml (1.91 KB)

buildchk_wxp_x86.log (3.19 KB)

buildchk_wxp_x86.wrn (187.0 B)

makefile (374.0 B)

ProcWatch.c (2.87 KB)

SOURCES (80.0 B)

SysEnterHook

MAKEFILE (267.0 B)

SOURCES (75.0 B)

sysenter.c (925.0 B)

IDA演示

Test.idb (456.3 KB)

Test.sys (2.63 KB)

课堂笔记

ida.wll (1.35 MB)

课堂笔记.txt (3.17 KB)

ntdll.dll (575.5 KB)

ntdll.pdb (1.06 MB)

ntoskrnl.exe (2.05 MB)

资料

PE.CHM (198.3 KB)

pecoff_v8.doc (1.31 MB)

PE结构图.jpg (567.5 KB)

StudyPe 1.04Beta4.rar (662.8 KB)

WinDBG标准命令列表.pdf (157.2 KB)

Bule Screen Code.doc (343.7 KB)

debugger.chm (3.65 MB)

DriverEntry下断点技巧.pdf (99.9 KB)

汇编语言中的英文缩写.pdf (118.0 KB)

汇编指令.doc (37.0 KB)

IDA_Pro_Shortcuts.pdf (70.7 KB)

IOCTL.exe (470.5 KB)

KiFastCallEntry笔记.asm (10.9 KB)

notmyfault.zip (73.6 KB)

OD LoadMap插件.zip (23.1 KB)

驱动调试与逆向技巧.ppt (487.5 KB)

SecretsOfRE_appendix_a.pdf (1.84 MB)

Windows蓝屏代码含意速查表.txt (16.2 KB)

栈帧分析.xls (14.0 KB)

4脱壳与逆向

脱壳与逆向

安卓

root

root (58.5 KB)

实现loader

爱加密加壳样本.apk (759.2 KB)

梆梆加壳样本.zip (6.53 MB)

MainActivity.java (1.03 KB)

安卓调试总结.ppt (137.0 KB)

安卓攻防.pptx (112.2 KB)

CODE

add

add.cpp (270.0 B)

add.dsp (4.44 KB)

add.dsw (529.0 B)

add.ncb (41.0 KB)

add.opt (52.5 KB)

add.plg (890.0 B)

ReadMe.txt (1.16 KB)

StdAfx.cpp (290.0 B)

StdAfx.h (667.0 B)

case2

case2.cpp (455.0 B)

case2.dsp (4.44 KB)

case2.dsw (533.0 B)

case2.ncb (41.0 KB)

case2.opt (52.5 KB)

case2.plg (900.0 B)

ReadMe.txt (1.17 KB)

StdAfx.cpp (292.0 B)

StdAfx.h (667.0 B)

checkod

checkod.cpp (1.07 KB)

checkod.vcproj (4.39 KB)

checkod.vcproj.xiaosheng-PC.xiaosheng.user (1.39 KB)

ReadMe.txt (1.16 KB)

stdafx.cpp (212.0 B)

stdafx.h (233.0 B)

targetver.h (498.0 B)

checkod.sln (887.0 B)

checkod.suo (9.00 KB)

dowhile

dowhile.cpp (417.0 B)

dowhile.dsp (4.13 KB)

dowhile.dsw (537.0 B)

dowhile.ncb (49.0 KB)

dowhile.opt (52.5 KB)

dowhile.plg (765.0 B)

ReadMe.txt (1.19 KB)

StdAfx.cpp (294.0 B)

StdAfx.h (773.0 B)

for

for.cpp (283.0 B)

for.dsp (4.42 KB)

for.dsw (529.0 B)

for.ncb (41.0 KB)

for.opt (52.5 KB)

for.plg (242.0 B)

ReadMe.txt (1.16 KB)

StdAfx.cpp (290.0 B)

StdAfx.h (667.0 B)

双进程

antia

antia.cpp (2.31 KB)

antia.h (39.0 B)

antia.ico (23.0 KB)

antia.rc (3.27 KB)

antia.vcproj (4.68 KB)

antia.vcproj.xiaosheng-PC.xiaosheng.user (1.39 KB)

ReadMe.txt (1.88 KB)

Resource.h (712.0 B)

small.ico (23.0 KB)

stdafx.cpp (210.0 B)

stdafx.h (415.0 B)

targetver.h (1.00 KB)

antia.sln (881.0 B)

struct

ReadMe.txt (1.18 KB)

StdAfx.cpp (293.0 B)

StdAfx.h (667.0 B)

struct.cpp (577.0 B)

struct.dsp (4.45 KB)

struct.dsw (535.0 B)

struct.ncb (49.0 KB)

struct.opt (52.5 KB)

struct.plg (248.0 B)

switchcase

ReadMe.txt (1.20 KB)

StdAfx.cpp (297.0 B)

StdAfx.h (667.0 B)

switchcase.cpp (745.0 B)

switchcase.dsp (4.50 KB)

switchcase.dsw (543.0 B)

switchcase.ncb (41.0 KB)

switchcase.opt (52.5 KB)

switchcase.plg (256.0 B)

try

ReadMe.txt (1.16 KB)

StdAfx.cpp (290.0 B)

StdAfx.h (667.0 B)

try.cpp (308.0 B)

try.dsp (4.42 KB)

try.dsw (529.0 B)

try.ncb (33.0 KB)

try.opt (47.5 KB)

try.plg (1.78 KB)

VirtualTable

ReadMe.txt (1.21 KB)

StdAfx.cpp (299.0 B)

StdAfx.h (667.0 B)

VirtualTable.cpp (380.0 B)

VirtualTable.dsp (4.55 KB)

VirtualTable.dsw (547.0 B)

VirtualTable.ncb (41.0 KB)

VirtualTable.opt (52.5 KB)

VirtualTable.plg (260.0 B)

while

ReadMe.txt (1.17 KB)

StdAfx.cpp (292.0 B)

StdAfx.h (667.0 B)

while.cpp (282.0 B)

while.dsp (4.46 KB)

while.dsw (533.0 B)

while.ncb (33.0 KB)

while.opt (47.5 KB)

while.plg (1.62 KB)

工具

Import REC

Plugin

ACProtect #1.dll (3.00 KB)

ACProtect #2.dll (14.5 KB)

ACProtect #3.dll (1.52 KB)

Alex Protector.dll (1.52 KB)

Armadillo 2.6.dll (4.00 KB)

ASProtect 1.2x Emul API #1.dll (6.00 KB)

ASProtect 1.2x Emul API #2.dll (10.0 KB)

ASProtect 1.2x.dll (18.0 KB)

ASProtect 1.3.dll (7.00 KB)

ASProtect 1.22.dll (6.00 KB)

ASProtect 1.23 rc4.dll (2.50 KB)

ASProtect 2.xx.dll (17.5 KB)

CoolCrypt.dll (2.50 KB)

Cryptocrack's PE Protector.dll (1.52 KB)

Excalibur.dll (3.03 KB)

ExeCryptor.dll (8.00 KB)

EXEStealth275.dll (2.50 KB)

Expressor 1.5.x.dll (2.50 KB)

ExtOverlay.dll (10.5 KB)

GoatsPEMutilator16.dll (2.50 KB)

HowTo.txt (443.0 B)

Krypton 0.4 - 0.5 #1.dll (28.0 KB)

Krypton 0.4 - 0.5 #2.dll (10.5 KB)

Krypton 0.5.dll (1.52 KB)

Morphine.dll (2.50 KB)

NTKrnl Protector 0.1.x.dll (3.00 KB)

Null.dll (28.0 KB)

Obsidium #1.dll (4.00 KB)

Obsidium #2.dll (4.00 KB)

Obsidium #3.dll (4.00 KB)

Obsidium 1.3.dll (3.50 KB)

Obsidium 1.3.dll.txt (551.0 B)

PE123.dll (2.04 KB)

PECompact 2.7.x.dll (1.52 KB)

PELock 1.0x.dll (4.00 KB)

PELock 1.06 (regged).dll (5.00 KB)

PELock 1.06 (regged).dll.txt (847.0 B)

Perplex101.dll (2.50 KB)

PESpin.dll (3.04 KB)

PESpinPlugin.dll (28.0 KB)

Plugin.txt (2.09 KB)

PrivateExeProtector 1.8.dll (4.50 KB)

PrivateExeProtector 1.8.txt (738.0 B)

Privilege.dll (2.50 KB)

Protection Plus 4.x.dll (2.50 KB)

RLPack 0.7.dll (2.50 KB)

RLPack 0.7.x.dll (1.52 KB)

RLPack 0.x.dll (6.50 KB)

RLPack 1.16.dll (1.52 KB)

RLPack 1.18.dll (1.52 KB)

SDProtector 1.12.dll (3.00 KB)

SVK Protector #1.dll (4.00 KB)

SVK Protector #2.dll (4.00 KB)

tELock 0.9x.dll (49.0 KB)

tELock 0.71.dll (1.52 KB)

tELock 0.92.dll (28.0 KB)

tELock 0.98 #1.dll (3.00 KB)

tELock 0.98 #2.dll (10.5 KB)

tELock 0.98 #3.dll (49.0 KB)

tELock 0.98 #4.dll (2.50 KB)

tELock 0.98 #5.dll (28.0 KB)

tELock 0.99.dll (2.50 KB)

TPP.dll (4.50 KB)

VisualProtect.dll (2.50 KB)

Yoda Crypter 1.02.dll (2.50 KB)

ZProtect.dll (30.0 KB)

ImportREC.exe (526.0 KB)

ImpREC.ini (422.0 B)

psapi.dll (12.0 KB)

LordPE

LDE

IntelliDump.LDE (3.50 KB)

LDELoad.log (132.0 B)

LDS_Clients

CoolDump1.4

Cooldump.exe (25.4 KB)

Genoep.dll (3.27 KB)

Ug2002.nfo (8.95 KB)

Misc

SoftSnoop

ApiDef

Kernel32.ss (655.0 B)

SS.TXT (1.31 KB)

User32.ss (534.0 B)

Plugins

HelloWorld.dll (2.50 KB)

MsgHook.dll (3.50 KB)

PluginExp3.dll (6.50 KB)

TestMe.exe (1.50 KB)

APISnoop.dll (4.50 KB)

ForceLibrary.dll (10.0 KB)

SoftSnoop.exe (32.5 KB)

SoftSnoop.tXt (2.88 KB)

16Edit.exe (2.00 KB)

16Edit.tXt (916.0 B)

LordElf.exe (17.5 KB)

LordElf.tXt (1.47 KB)

MetaPuck.exe (92.0 KB)

MetaPuck.tXt (2.07 KB)

PESnoop.exe (20.5 KB)

PESnoop.tXt (2.83 KB)

RunKMD.exe (3.50 KB)

RunKMD.tXt (750.0 B)

RunVxD.exe (2.50 KB)

RunVxD.tXt (547.0 B)

yPER.exe (3.56 KB)

yPER.tXt (354.0 B)

16Edit.DLL (18.5 KB)

LordPE.EXE (204.3 KB)

LordPE.iNi (791.0 B)

LordPE_dll.EXE (204.0 KB)

LordPeFix.dll (19.5 KB)

LordPlug.dll (44.0 KB)

PROCS.DLL (8.50 KB)

PSAPI.DLL (28.3 KB)

ReadMe.txt (827.0 B)

REALIGN.DLL (7.50 KB)

RunLDS.BAT (28.0 B)

TrapDll.exe (3.00 KB)

odbg110.rar (1.43 MB)

UIF_chs.exe (442.0 KB)

脚本

AutoHotKey.txt (1.26 KB)

AutoHotKey01.exe (202.7 KB)

AutoHotKey02.exe (213.3 KB)

AutoHotKey02.udd (292.8 KB)

AutoHotKey脚本解密.rar (217.9 KB)

Unpack.idb (5.84 MB)

壳相关

穿山甲

ArmInline v0.96f (Eng)

Nanomites Fixer v1.2

ArmNF.exe (424.0 KB)

ArmNF.exe.manifest (619.0 B)

NanoLib.dll Bug.txt (4.06 KB)

ArmInline.exe (104.0 KB)

Disasm.dll (32.3 KB)

Nanolib.dll (60.0 KB)

NanoView.exe (28.0 KB)

Readme.txt (17.5 KB)

Rwb32.bin (1.58 KB)

Armadillo DLL脱壳.docx (16.3 KB)

EdrLib.dll (496.0 KB)

EdrTest.exe (24.0 KB)

Show.vmp.exe (897.5 KB)

sonar.exe (2.10 MB)

UIF_chs.exe (442.0 KB)

工具

Import REC

Plugin

ACProtect #1.dll (3.00 KB)

ACProtect #2.dll (14.5 KB)

ACProtect #3.dll (1.52 KB)

Alex Protector.dll (1.52 KB)

Armadillo 2.6.dll (4.00 KB)

ASProtect 1.2x Emul API #1.dll (6.00 KB)

ASProtect 1.2x Emul API #2.dll (10.0 KB)

ASProtect 1.2x.dll (18.0 KB)

ASProtect 1.3.dll (7.00 KB)

ASProtect 1.22.dll (6.00 KB)

ASProtect 1.23 rc4.dll (2.50 KB)

ASProtect 2.xx.dll (17.5 KB)

CoolCrypt.dll (2.50 KB)

Cryptocrack's PE Protector.dll (1.52 KB)

Excalibur.dll (3.03 KB)

ExeCryptor.dll (8.00 KB)

EXEStealth275.dll (2.50 KB)

Expressor 1.5.x.dll (2.50 KB)

ExtOverlay.dll (10.5 KB)

GoatsPEMutilator16.dll (2.50 KB)

HowTo.txt (443.0 B)

Krypton 0.4 - 0.5 #1.dll (28.0 KB)

Krypton 0.4 - 0.5 #2.dll (10.5 KB)

Krypton 0.5.dll (1.52 KB)

Morphine.dll (2.50 KB)

NTKrnl Protector 0.1.x.dll (3.00 KB)

Null.dll (28.0 KB)

Obsidium #1.dll (4.00 KB)

Obsidium #2.dll (4.00 KB)

Obsidium #3.dll (4.00 KB)

Obsidium 1.3.dll (3.50 KB)

Obsidium 1.3.dll.txt (551.0 B)

PE123.dll (2.04 KB)

PECompact 2.7.x.dll (1.52 KB)

PELock 1.0x.dll (4.00 KB)

PELock 1.06 (regged).dll (5.00 KB)

PELock 1.06 (regged).dll.txt (847.0 B)

Perplex101.dll (2.50 KB)

PESpin.dll (3.04 KB)

PESpinPlugin.dll (28.0 KB)

Plugin.txt (2.09 KB)

PrivateExeProtector 1.8.dll (4.50 KB)

PrivateExeProtector 1.8.txt (738.0 B)

Privilege.dll (2.50 KB)

Protection Plus 4.x.dll (2.50 KB)

RLPack 0.7.dll (2.50 KB)

RLPack 0.7.x.dll (1.52 KB)

RLPack 0.x.dll (6.50 KB)

RLPack 1.16.dll (1.52 KB)

RLPack 1.18.dll (1.52 KB)

SDProtector 1.12.dll (3.00 KB)

SVK Protector #1.dll (4.00 KB)

SVK Protector #2.dll (4.00 KB)

tELock 0.9x.dll (49.0 KB)

tELock 0.71.dll (1.52 KB)

tELock 0.92.dll (28.0 KB)

tELock 0.98 #1.dll (3.00 KB)

tELock 0.98 #2.dll (10.5 KB)

tELock 0.98 #3.dll (49.0 KB)

tELock 0.98 #4.dll (2.50 KB)

tELock 0.98 #5.dll (28.0 KB)

tELock 0.99.dll (2.50 KB)

TPP.dll (4.50 KB)

VisualProtect.dll (2.50 KB)

Yoda Crypter 1.02.dll (2.50 KB)

ZProtect.dll (30.0 KB)

ImportREC.exe (526.0 KB)

ImpREC.ini (422.0 B)

psapi.dll (12.0 KB)

LordPE

LDE

IntelliDump.LDE (3.50 KB)

LDELoad.log (132.0 B)

LDS_Clients

CoolDump1.4

Cooldump.exe (25.4 KB)

Genoep.dll (3.27 KB)

Ug2002.nfo (8.95 KB)

Misc

SoftSnoop

ApiDef

Kernel32.ss (655.0 B)

SS.TXT (1.31 KB)

User32.ss (534.0 B)

Plugins

HelloWorld.dll (2.50 KB)

MsgHook.dll (3.50 KB)

PluginExp3.dll (6.50 KB)

TestMe.exe (1.50 KB)

APISnoop.dll (4.50 KB)

ForceLibrary.dll (10.0 KB)

SoftSnoop.exe (32.5 KB)

SoftSnoop.tXt (2.88 KB)

16Edit.exe (2.00 KB)

16Edit.tXt (916.0 B)

LordElf.exe (17.5 KB)

LordElf.tXt (1.47 KB)

MetaPuck.exe (92.0 KB)

MetaPuck.tXt (2.07 KB)

PESnoop.exe (20.5 KB)

PESnoop.tXt (2.83 KB)

RunKMD.exe (3.50 KB)

RunKMD.tXt (750.0 B)

RunVxD.exe (2.50 KB)

RunVxD.tXt (547.0 B)

yPER.exe (3.56 KB)

yPER.tXt (354.0 B)

16Edit.DLL (18.5 KB)

LordPE.EXE (204.3 KB)

LordPE.iNi (791.0 B)

LordPE_dll.EXE (204.0 KB)

LordPeFix.dll (19.5 KB)

LordPlug.dll (44.0 KB)

PROCS.DLL (8.50 KB)

PSAPI.DLL (28.3 KB)

ReadMe.txt (827.0 B)

REALIGN.DLL (7.50 KB)

RunLDS.BAT (28.0 B)

TrapDll.exe (3.00 KB)

odbg110.rar (1.43 MB)

UIF_chs.exe (442.0 KB)

IAT修复

KRYPTON

iatfix.txt (353.0 B)

KRYPTON说明.txt (2.11 KB)

tmd

CRC.exe (140.0 KB)

fix_tmd.txt (837.0 B)

过自校验.txt (941.0 B)

Hash.exe (28.5 KB)

Tmd例子.exe (140.0 KB)

TMD例子.udd (12.4 KB)

UIF.exe (176.0 KB)

iat.txt (587.0 B)

Project1.zp.exe (504.0 KB)

tmd.rar (320.1 KB)

RL简单的VM

ANTI_dump结构分析.docx (16.9 KB)

calc.exe (67.4 KB)

calc.udd (54.4 KB)

fuckrl1.2xoep CodeReplace.txt (8.81 KB)

VMP加壳处理

vmpdll

Release

StdAfx.obj (212.0 B)

StdAfx.sbr (423.8 KB)

vc60.idb (41.0 KB)

vmpdll.bsc (1.84 MB)

vmpdll.dll (40.0 KB)

vmpdll.exp (557.0 B)

vmpdll.lib (1.88 KB)

vmpdll.obj (3.08 KB)

vmpdll.pch (2.07 MB)

vmpdll.sbr

ReadMe.txt (1.58 KB)

vmpdll.cpp (2.93 KB)

vmpdll.dsp (4.00 KB)

vmpdll.dsw (535.0 B)

vmpdll.ncb (41.0 KB)

vmpdll.opt (47.5 KB)

vmpdll.plg (1.33 KB)

anti.vmp.exe (135.0 KB)

E.vmp.exe (560.0 KB)

FixVmpIat_2.06.txt (13.6 KB)

FixVmpIat_2.09.txt (17.4 KB)

VMP.pptx (578.1 KB)

VMP1.8.exe (2.72 MB)

vmp1.8_iat3.txt (1.04 KB)

Vmp2.05 Unpacker.txt (1.73 KB)

vmp2.05.exe (354.5 KB)

Vmp2.06 Unpacker.txt (1.66 KB)

VMP2.06.exe (453.0 KB)

vmp2.07_Unpacker.txt (672.0 B)

vmp2.09 Unpacker.txt (977.0 B)

VMP2.09.exe (896.5 KB)

vmp2.09.log (17.1 KB)

VMP_log.txt (594.0 B)

vmpdll.dll (40.0 KB)

脱壳与逆向_课堂笔记

安卓

root

root (58.5 KB)

实现loader

爱加密加壳样本.apk (759.2 KB)

梆梆加壳样本.zip (6.53 MB)

MainActivity.java (1.03 KB)

安卓调试总结.ppt (147.0 KB)

安卓攻防.pptx (112.3 KB)

调试

1.反调试

checkod

checkod.cpp (1.07 KB)

checkod.vcproj (4.39 KB)

stdafx.cpp (212.0 B)

stdafx.h (233.0 B)

targetver.h (498.0 B)

checkod.sln (887.0 B)

EnumOD

EnumOD.cpp (798.0 B)

EnumOD.dsp (4.43 KB)

EnumOD.dsw (535.0 B)

EnumOD.opt (47.5 KB)

EnumOD.plg (1.27 KB)

ReadMe.txt (1.18 KB)

StdAfx.cpp (293.0 B)

StdAfx.h (667.0 B)

双进程

antia

antia.cpp (2.31 KB)

antia.h (39.0 B)

antia.ico (23.0 KB)

antia.rc (3.27 KB)

antia.vcproj (4.68 KB)

antia.vcproj.xiaosheng-PC.xiaosheng.user (1.39 KB)

ReadMe.txt (1.88 KB)

Resource.h (712.0 B)

small.ico (23.0 KB)

stdafx.cpp (210.0 B)

stdafx.h (415.0 B)

targetver.h (1.00 KB)

antia.sln (881.0 B)

tls_anti

tls_anti.dsp (3.88 KB)

tls_anti.dsw (539.0 B)

tls_anti.ncb (33.0 KB)

tls_anti.opt (47.5 KB)

tls_anti.plg (250.0 B)

tls_AntiDebug.exe (8.00 KB)

断点相关.docx (82.8 KB)

Dr0-Dr7.jpg (59.2 KB)

反调试技巧总结.pptx (111.1 KB)

WINDOWS异常流程图.jpg (523.6 KB)

异常.docx (72.7 KB)

2.壳相关

穿山甲

ArmInline

ArmInline.exe (104.0 KB)

ArmNF.exe (424.0 KB)

ArmNF.exe.manifest (619.0 B)

Disasm.dll (32.3 KB)

Nanolib.dll (60.0 KB)

NanoView.exe (28.0 KB)

Rwb32.bin (1.58 KB)

ARM_dll.txt (5.04 KB)

Arm_exe.txt (1.14 KB)

Armadillo DLL脱壳.docx (18.8 KB)

EdrLib.dll (496.0 KB)

EdrTest.exe (24.0 KB)

sonar.rar (3.10 MB)

IAT修复

KRYPTON

iatfix.txt (353.0 B)

KRYPTON说明.txt (2.11 KB)

iat.txt (587.0 B)

Project1.zp.exe (504.0 KB)

tmd.rar (320.1 KB)

IrStarPt V1.0

跟踪记录.txt (9.63 KB)

IrStarPt_Unpack.txt (314.0 B)

IrStarPted.exe (169.5 KB)

UPX.EXE (283.0 KB)

脚本解密

AutoHotKey.txt (1.26 KB)

AutoHotKey01.exe (202.7 KB)

AutoHotKey02.exe (213.3 KB)

AutoHotKey02.udd (292.8 KB)

AutoHotKey脚本解密.rar (217.9 KB)

RL简单的VM

ANTI_dump和常见结构.docx (17.8 KB)

calc.exe (67.4 KB)

calc.udd (54.4 KB)

fuckrl1.2x_oep CodeReplace.txt (8.81 KB)

VMP加壳处理

vmpdll

ReadMe.txt (1.58 KB)

vmpdll.cpp (2.93 KB)

vmpdll.dsp (4.00 KB)

vmpdll.dsw (535.0 B)

vmpdll.ncb (41.0 KB)

vmpdll.opt (47.5 KB)

vmpdll.plg (1.33 KB)

E.vmp.exe (560.0 KB)

FixVmpIat_2.06.txt (13.6 KB)

FixVmpIat_2.09.txt (17.4 KB)

VMP.pptx (578.1 KB)

VMP1.8.exe (2.72 MB)

vmp1.8_iat3.txt (1.04 KB)

Vmp2.05.txt (1.73 KB)

Vmp2.06.txt (1.66 KB)

vmp2.07_Unpacker.txt (672.0 B)

vmp2.09 Unpacker.txt (977.0 B)

VMP2.09.exe (896.5 KB)

VMP_log.txt (594.0 B)

vmpdll.dll (40.0 KB)

3.虚拟机检测

虚拟机检测

壳检测样本

TMD_CheckVm.rar (6.31 MB)

VM检测.txt (1.47 KB)

VP_CheckVm.exe (3.22 MB)

Vplog.txt (392.0 B)

虚拟机检测.pptx (196.8 KB)

工具

ASPack.v2.28

ASPack.v2.28.exe (528.0 KB)

Chinese BIG5.ini (4.53 KB)

Chinese GB.ini (4.53 KB)

English.ini (5.53 KB)

Import REC

Plugin

ACProtect #1.dll (3.00 KB)

ACProtect #2.dll (14.5 KB)

ACProtect #3.dll (1.52 KB)

Alex Protector.dll (1.52 KB)

Armadillo 2.6.dll (4.00 KB)

ASProtect 1.2x Emul API #1.dll (6.00 KB)

ASProtect 1.2x Emul API #2.dll (10.0 KB)

ASProtect 1.2x.dll (18.0 KB)

ASProtect 1.3.dll (7.00 KB)

ASProtect 1.22.dll (6.00 KB)

ASProtect 1.23 rc4.dll (2.50 KB)

ASProtect 2.xx.dll (17.5 KB)

CoolCrypt.dll (2.50 KB)

Cryptocrack's PE Protector.dll (1.52 KB)

Excalibur.dll (3.03 KB)

ExeCryptor.dll (8.00 KB)

EXEStealth275.dll (2.50 KB)

Expressor 1.5.x.dll (2.50 KB)

ExtOverlay.dll (10.5 KB)

GoatsPEMutilator16.dll (2.50 KB)

HowTo.txt (443.0 B)

Krypton 0.4 - 0.5 #1.dll (28.0 KB)

Krypton 0.4 - 0.5 #2.dll (10.5 KB)

Krypton 0.5.dll (1.52 KB)

Morphine.dll (2.50 KB)

NTKrnl Protector 0.1.x.dll (3.00 KB)

Null.dll (28.0 KB)

Obsidium #1.dll (4.00 KB)

Obsidium #2.dll (4.00 KB)

Obsidium #3.dll (4.00 KB)

Obsidium 1.3.dll (3.50 KB)

Obsidium 1.3.dll.txt (551.0 B)

PE123.dll (2.04 KB)

PECompact 2.7.x.dll (1.52 KB)

PELock 1.0x.dll (4.00 KB)

PELock 1.06 (regged).dll (5.00 KB)

PELock 1.06 (regged).dll.txt (847.0 B)

Perplex101.dll (2.50 KB)

PESpin.dll (3.04 KB)

PESpinPlugin.dll (28.0 KB)

Plugin.txt (2.09 KB)

PrivateExeProtector 1.8.dll (4.50 KB)

PrivateExeProtector 1.8.txt (738.0 B)

Privilege.dll (2.50 KB)

Protection Plus 4.x.dll (2.50 KB)

RLPack 0.7.dll (2.50 KB)

RLPack 0.7.x.dll (1.52 KB)

RLPack 0.x.dll (6.50 KB)

RLPack 1.16.dll (1.52 KB)

RLPack 1.18.dll (1.52 KB)

SDProtector 1.12.dll (3.00 KB)

SVK Protector #1.dll (4.00 KB)

SVK Protector #2.dll (4.00 KB)

tELock 0.9x.dll (49.0 KB)

tELock 0.71.dll (1.52 KB)

tELock 0.92.dll (28.0 KB)

tELock 0.98 #1.dll (3.00 KB)

tELock 0.98 #2.dll (10.5 KB)

tELock 0.98 #3.dll (49.0 KB)

tELock 0.98 #4.dll (2.50 KB)

tELock 0.98 #5.dll (28.0 KB)

tELock 0.99.dll (2.50 KB)

TPP.dll (4.50 KB)

VisualProtect.dll (2.50 KB)

Yoda Crypter 1.02.dll (2.50 KB)

ZProtect.dll (30.0 KB)

ImportREC.exe (526.0 KB)

ImpREC.ini (422.0 B)

psapi.dll (12.0 KB)

LordPE

LDE

IntelliDump.LDE (3.50 KB)

LDELoad.log (150.0 B)

LDS_Clients

CoolDump1.4

Cooldump.exe (25.4 KB)

Genoep.dll (3.27 KB)

Ug2002.nfo (8.95 KB)

Misc

SoftSnoop

ApiDef

Kernel32.ss (655.0 B)

SS.TXT (1.31 KB)

User32.ss (534.0 B)

Plugins

HelloWorld.dll (2.50 KB)

MsgHook.dll (3.50 KB)

PluginExp3.dll (6.50 KB)

TestMe.exe (1.50 KB)

APISnoop.dll (4.50 KB)

ForceLibrary.dll (10.0 KB)

SoftSnoop.exe (32.5 KB)

SoftSnoop.tXt (2.88 KB)

16Edit.exe (2.00 KB)

16Edit.tXt (916.0 B)

LordElf.exe (17.5 KB)

LordElf.tXt (1.47 KB)

MetaPuck.exe (92.0 KB)

MetaPuck.tXt (2.07 KB)

PESnoop.exe (20.5 KB)

PESnoop.tXt (2.83 KB)

RunKMD.exe (3.50 KB)

RunKMD.tXt (750.0 B)

RunVxD.exe (2.50 KB)

RunVxD.tXt (547.0 B)

yPER.exe (3.56 KB)

yPER.tXt (354.0 B)

16Edit.DLL (18.5 KB)

LordPE.EXE (204.3 KB)

LordPE.iNi (791.0 B)

LordPE_dll.EXE (204.0 KB)

LordPeFix.dll (19.5 KB)

LordPlug.dll (44.0 KB)

PROCS.DLL (8.50 KB)

PSAPI.DLL (28.3 KB)

ReadMe.txt (827.0 B)

REALIGN.DLL (7.50 KB)

RunLDS.BAT (28.0 B)

TrapDll.exe (3.00 KB)

ICO

COSTUM1.bmp (940.0 B)

COSTUM2.BMP (940.0 B)

COSTUM3.bmp (940.0 B)

COSTUM4.bmp (940.0 B)

COSTUM5.bmp (940.0 B)

Plugin

Analyzethis.dll (45.5 KB)

idaficator.dll (240.0 KB)

ODbgScript.dll (292.0 KB)

OllyDump.dll (77.0 KB)

RAsmDbgPlugin.dll (76.0 KB)

StrongOD.dll (486.0 KB)

tools

UDD

del.bat (23.0 B)

loaddll.exe (7.50 KB)

OllyDBG.EXE (1.07 MB)

Shadow.exe (1.15 MB)

Shadow.ini (20.4 KB)

Upack

Upack.exe (21.3 KB)

UPXv3.25

UpxFile

upx3.03.exe (265.5 KB)

upx3.05.exe (282.5 KB)

Config.ini (337.0 B)

说明.txt (356.0 B)

UPXShell.exe (362.5 KB)

Resource Binder.exe (264.0 KB)

UIF_chs.exe (442.0 KB)

练手

Decoda

Crack.txt (146.0 B)

dbghelp.dll (1,015.9 KB)

Decoda.chm (47.4 KB)

Decoda.exe (2.49 MB)

LuaInject.dll (164.0 KB)

Microsoft.VC80.CRT.manifest (1.83 KB)

msvcm80.dll (468.0 KB)

msvcp80.dll (541.8 KB)

msvcr80.dll (617.8 KB)

Pefect.exe (2.49 MB)

uninstall.exe (45.9 KB)

Update.dll (424.0 KB)

SQLite

SQLite.txt (1,000.0 B)

SQLiteExpertSetup.exe (29.3 MB)

CODE

acm_code

case2.txt (438.0 B)

do-while.txt (800.0 B)

for.txt (714.0 B)

struct.txt (2.99 KB)

switchcase.txt (542.0 B)

VirtualTable.txt

while.txt (591.0 B)

add

add.cpp (270.0 B)

add.dsp (4.44 KB)

add.dsw (529.0 B)

add.ncb (41.0 KB)

add.opt (52.5 KB)

add.plg (890.0 B)

ReadMe.txt (1.16 KB)

StdAfx.cpp (290.0 B)

StdAfx.h (667.0 B)

case2

case2.cpp (455.0 B)

case2.dsp (4.44 KB)

case2.dsw (533.0 B)

case2.ncb (41.0 KB)

case2.opt (52.5 KB)

case2.plg (900.0 B)

ReadMe.txt (1.17 KB)

StdAfx.cpp (292.0 B)

StdAfx.h (667.0 B)

checkod

checkod.cpp (1.07 KB)

checkod.vcproj (4.39 KB)

checkod.vcproj.xiaosheng-PC.xiaosheng.user (1.39 KB)

ReadMe.txt (1.16 KB)

stdafx.cpp (212.0 B)

stdafx.h (233.0 B)

targetver.h (498.0 B)

checkod.sln (887.0 B)

checkod.suo (9.00 KB)

dowhile

dowhile.cpp (417.0 B)

dowhile.dsp (4.13 KB)

dowhile.dsw (537.0 B)

dowhile.ncb (49.0 KB)

dowhile.opt (52.5 KB)

dowhile.plg (765.0 B)

ReadMe.txt (1.19 KB)

StdAfx.cpp (294.0 B)

StdAfx.h (773.0 B)

for

for.cpp (283.0 B)

for.dsp (4.42 KB)

for.dsw (529.0 B)

for.ncb (41.0 KB)

for.opt (52.5 KB)

for.plg (242.0 B)

ReadMe.txt (1.16 KB)

StdAfx.cpp (290.0 B)

StdAfx.h (667.0 B)

双进程

antia

antia.cpp (2.31 KB)

antia.h (39.0 B)

antia.ico (23.0 KB)

antia.rc (3.27 KB)

antia.vcproj (4.68 KB)

antia.vcproj.xiaosheng-PC.xiaosheng.user (1.39 KB)

ReadMe.txt (1.88 KB)

Resource.h (712.0 B)

small.ico (23.0 KB)

stdafx.cpp (210.0 B)

stdafx.h (415.0 B)

targetver.h (1.00 KB)

antia.sln (881.0 B)

struct

ReadMe.txt (1.18 KB)

StdAfx.cpp (293.0 B)

StdAfx.h (667.0 B)

struct.cpp (577.0 B)

struct.dsp (4.45 KB)

struct.dsw (535.0 B)

struct.ncb (49.0 KB)

struct.opt (52.5 KB)

struct.plg (248.0 B)

switchcase

ReadMe.txt (1.20 KB)

StdAfx.cpp (297.0 B)

StdAfx.h (667.0 B)

switchcase.cpp (745.0 B)

switchcase.dsp (4.50 KB)

switchcase.dsw (543.0 B)

switchcase.ncb (41.0 KB)

switchcase.opt (52.5 KB)

switchcase.plg (256.0 B)

try

ReadMe.txt (1.16 KB)

StdAfx.cpp (290.0 B)

StdAfx.h (667.0 B)

try.cpp (308.0 B)

try.dsp (4.42 KB)

try.dsw (529.0 B)

try.ncb (33.0 KB)

try.opt (47.5 KB)

try.plg (1.78 KB)

VirtualTable

ReadMe.txt (1.21 KB)

StdAfx.cpp (299.0 B)

StdAfx.h (667.0 B)

VirtualTable.cpp (380.0 B)

VirtualTable.dsp (4.55 KB)

VirtualTable.dsw (547.0 B)

VirtualTable.ncb (41.0 KB)

VirtualTable.opt (52.5 KB)

VirtualTable.plg (260.0 B)

while

ReadMe.txt (1.17 KB)

StdAfx.cpp (292.0 B)

StdAfx.h (667.0 B)

while.cpp (282.0 B)

while.dsp (4.46 KB)

while.dsw (533.0 B)

while.ncb (33.0 KB)

while.opt (47.5 KB)

while.plg (1.62 KB)

工具

Import REC

Plugin

ACProtect #1.dll (3.00 KB)

ACProtect #2.dll (14.5 KB)

ACProtect #3.dll (1.52 KB)

Alex Protector.dll (1.52 KB)

Armadillo 2.6.dll (4.00 KB)

ASProtect 1.2x Emul API #1.dll (6.00 KB)

ASProtect 1.2x Emul API #2.dll (10.0 KB)

ASProtect 1.2x.dll (18.0 KB)

ASProtect 1.3.dll (7.00 KB)

ASProtect 1.22.dll (6.00 KB)

ASProtect 1.23 rc4.dll (2.50 KB)

ASProtect 2.xx.dll (17.5 KB)

CoolCrypt.dll (2.50 KB)

Cryptocrack's PE Protector.dll (1.52 KB)

Excalibur.dll (3.03 KB)

ExeCryptor.dll (8.00 KB)

EXEStealth275.dll (2.50 KB)

Expressor 1.5.x.dll (2.50 KB)

ExtOverlay.dll (10.5 KB)

GoatsPEMutilator16.dll (2.50 KB)

HowTo.txt (443.0 B)

Krypton 0.4 - 0.5 #1.dll (28.0 KB)

Krypton 0.4 - 0.5 #2.dll (10.5 KB)

Krypton 0.5.dll (1.52 KB)

Morphine.dll (2.50 KB)

NTKrnl Protector 0.1.x.dll (3.00 KB)

Null.dll (28.0 KB)

Obsidium #1.dll (4.00 KB)

Obsidium #2.dll (4.00 KB)

Obsidium #3.dll (4.00 KB)

Obsidium 1.3.dll (3.50 KB)

Obsidium 1.3.dll.txt (551.0 B)

PE123.dll (2.04 KB)

PECompact 2.7.x.dll (1.52 KB)

PELock 1.0x.dll (4.00 KB)

PELock 1.06 (regged).dll (5.00 KB)

PELock 1.06 (regged).dll.txt (847.0 B)

Perplex101.dll (2.50 KB)

PESpin.dll (3.04 KB)

PESpinPlugin.dll (28.0 KB)

Plugin.txt (2.09 KB)

PrivateExeProtector 1.8.dll (4.50 KB)

PrivateExeProtector 1.8.txt (738.0 B)

Privilege.dll (2.50 KB)

Protection Plus 4.x.dll (2.50 KB)

RLPack 0.7.dll (2.50 KB)

RLPack 0.7.x.dll (1.52 KB)

RLPack 0.x.dll (6.50 KB)

RLPack 1.16.dll (1.52 KB)

RLPack 1.18.dll (1.52 KB)

SDProtector 1.12.dll (3.00 KB)

SVK Protector #1.dll (4.00 KB)

SVK Protector #2.dll (4.00 KB)

tELock 0.9x.dll (49.0 KB)

tELock 0.71.dll (1.52 KB)

tELock 0.92.dll (28.0 KB)

tELock 0.98 #1.dll (3.00 KB)

tELock 0.98 #2.dll (10.5 KB)

tELock 0.98 #3.dll (49.0 KB)

tELock 0.98 #4.dll (2.50 KB)

tELock 0.98 #5.dll (28.0 KB)

tELock 0.99.dll (2.50 KB)

TPP.dll (4.50 KB)

VisualProtect.dll (2.50 KB)

Yoda Crypter 1.02.dll (2.50 KB)

ZProtect.dll (30.0 KB)

ImportREC.exe (526.0 KB)

ImpREC.ini (422.0 B)

psapi.dll (12.0 KB)

LordPE

LDE

IntelliDump.LDE (3.50 KB)

LDELoad.log (132.0 B)

LDS_Clients

CoolDump1.4

Cooldump.exe (25.4 KB)

Genoep.dll (3.27 KB)

Ug2002.nfo (8.95 KB)

Misc

SoftSnoop

ApiDef

Kernel32.ss (655.0 B)

SS.TXT (1.31 KB)

User32.ss (534.0 B)

Plugins

HelloWorld.dll (2.50 KB)

MsgHook.dll (3.50 KB)

PluginExp3.dll (6.50 KB)

TestMe.exe (1.50 KB)

APISnoop.dll (4.50 KB)

ForceLibrary.dll (10.0 KB)

SoftSnoop.exe (32.5 KB)

SoftSnoop.tXt (2.88 KB)

16Edit.exe (2.00 KB)

16Edit.tXt (916.0 B)

LordElf.exe (17.5 KB)

LordElf.tXt (1.47 KB)

MetaPuck.exe (92.0 KB)

MetaPuck.tXt (2.07 KB)

PESnoop.exe (20.5 KB)

PESnoop.tXt (2.83 KB)

RunKMD.exe (3.50 KB)

RunKMD.tXt (750.0 B)

RunVxD.exe (2.50 KB)

RunVxD.tXt (547.0 B)

yPER.exe (3.56 KB)

yPER.tXt (354.0 B)

16Edit.DLL (18.5 KB)

LordPE.EXE (204.3 KB)

LordPE.iNi (791.0 B)

LordPE_dll.EXE (204.0 KB)

LordPeFix.dll (19.5 KB)

LordPlug.dll (44.0 KB)

PROCS.DLL (8.50 KB)

PSAPI.DLL (28.3 KB)

ReadMe.txt (827.0 B)

REALIGN.DLL (7.50 KB)

RunLDS.BAT (28.0 B)

TrapDll.exe (3.00 KB)

odbg110.rar (1.43 MB)

UIF_chs.exe (442.0 KB)

脚本

AutoHotKey.txt (1.26 KB)

AutoHotKey01.exe (202.7 KB)

AutoHotKey02.exe (213.3 KB)

AutoHotKey02.udd (292.8 KB)

AutoHotKey脚本解密.rar (217.9 KB)

Unpack.idb (5.84 MB)

壳相关

穿山甲

ArmInline v0.96f (Eng)

Nanomites Fixer v1.2

ArmNF.exe (424.0 KB)

ArmNF.exe.manifest (619.0 B)

NanoLib.dll Bug.txt (4.06 KB)

ArmInline.exe (104.0 KB)

Disasm.dll (32.3 KB)

Nanolib.dll (60.0 KB)

NanoView.exe (28.0 KB)

Readme.txt (17.5 KB)

Rwb32.bin (1.58 KB)

Armadillo DLL脱壳.docx (16.3 KB)

EdrLib.dll (496.0 KB)

EdrTest.exe (24.0 KB)

Show.vmp.exe (897.5 KB)

sonar.exe (2.10 MB)

UIF_chs.exe (442.0 KB)

工具

Import REC

Plugin

ACProtect #1.dll (3.00 KB)

ACProtect #2.dll (14.5 KB)

ACProtect #3.dll (1.52 KB)

Alex Protector.dll (1.52 KB)

Armadillo 2.6.dll (4.00 KB)

ASProtect 1.2x Emul API #1.dll (6.00 KB)

ASProtect 1.2x Emul API #2.dll (10.0 KB)

ASProtect 1.2x.dll (18.0 KB)

ASProtect 1.3.dll (7.00 KB)

ASProtect 1.22.dll (6.00 KB)

ASProtect 1.23 rc4.dll (2.50 KB)

ASProtect 2.xx.dll (17.5 KB)

CoolCrypt.dll (2.50 KB)

Cryptocrack's PE Protector.dll (1.52 KB)

Excalibur.dll (3.03 KB)

ExeCryptor.dll (8.00 KB)

EXEStealth275.dll (2.50 KB)

Expressor 1.5.x.dll (2.50 KB)

ExtOverlay.dll (10.5 KB)

GoatsPEMutilator16.dll (2.50 KB)

HowTo.txt (443.0 B)

Krypton 0.4 - 0.5 #1.dll (28.0 KB)

Krypton 0.4 - 0.5 #2.dll (10.5 KB)

Krypton 0.5.dll (1.52 KB)

Morphine.dll (2.50 KB)

NTKrnl Protector 0.1.x.dll (3.00 KB)

Null.dll (28.0 KB)

Obsidium #1.dll (4.00 KB)

Obsidium #2.dll (4.00 KB)

Obsidium #3.dll (4.00 KB)

Obsidium 1.3.dll (3.50 KB)

Obsidium 1.3.dll.txt (551.0 B)

PE123.dll (2.04 KB)

PECompact 2.7.x.dll (1.52 KB)

PELock 1.0x.dll (4.00 KB)

PELock 1.06 (regged).dll (5.00 KB)

PELock 1.06 (regged).dll.txt (847.0 B)

Perplex101.dll (2.50 KB)

PESpin.dll (3.04 KB)

PESpinPlugin.dll (28.0 KB)

Plugin.txt (2.09 KB)

PrivateExeProtector 1.8.dll (4.50 KB)

PrivateExeProtector 1.8.txt (738.0 B)

Privilege.dll (2.50 KB)

Protection Plus 4.x.dll (2.50 KB)

RLPack 0.7.dll (2.50 KB)

RLPack 0.7.x.dll (1.52 KB)

RLPack 0.x.dll (6.50 KB)

RLPack 1.16.dll (1.52 KB)

RLPack 1.18.dll (1.52 KB)

SDProtector 1.12.dll (3.00 KB)

SVK Protector #1.dll (4.00 KB)

SVK Protector #2.dll (4.00 KB)

tELock 0.9x.dll (49.0 KB)

tELock 0.71.dll (1.52 KB)

tELock 0.92.dll (28.0 KB)

tELock 0.98 #1.dll (3.00 KB)

tELock 0.98 #2.dll (10.5 KB)

tELock 0.98 #3.dll (49.0 KB)

tELock 0.98 #4.dll (2.50 KB)

tELock 0.98 #5.dll (28.0 KB)

tELock 0.99.dll (2.50 KB)

TPP.dll (4.50 KB)

VisualProtect.dll (2.50 KB)

Yoda Crypter 1.02.dll (2.50 KB)

ZProtect.dll (30.0 KB)

ImportREC.exe (526.0 KB)

ImpREC.ini (422.0 B)

psapi.dll (12.0 KB)

LordPE

LDE

IntelliDump.LDE (3.50 KB)

LDELoad.log (132.0 B)

LDS_Clients

CoolDump1.4

Cooldump.exe (25.4 KB)

Genoep.dll (3.27 KB)

Ug2002.nfo (8.95 KB)

Misc

SoftSnoop

ApiDef

Kernel32.ss (655.0 B)

SS.TXT (1.31 KB)

User32.ss (534.0 B)

Plugins

HelloWorld.dll (2.50 KB)

MsgHook.dll (3.50 KB)

PluginExp3.dll (6.50 KB)

TestMe.exe (1.50 KB)

APISnoop.dll (4.50 KB)

ForceLibrary.dll (10.0 KB)

SoftSnoop.exe (32.5 KB)

SoftSnoop.tXt (2.88 KB)

16Edit.exe (2.00 KB)

16Edit.tXt (916.0 B)

LordElf.exe (17.5 KB)

LordElf.tXt (1.47 KB)

MetaPuck.exe (92.0 KB)

MetaPuck.tXt (2.07 KB)

PESnoop.exe (20.5 KB)

PESnoop.tXt (2.83 KB)

RunKMD.exe (3.50 KB)

RunKMD.tXt (750.0 B)

RunVxD.exe (2.50 KB)

RunVxD.tXt (547.0 B)

yPER.exe (3.56 KB)

yPER.tXt (354.0 B)

16Edit.DLL (18.5 KB)

LordPE.EXE (204.3 KB)

LordPE.iNi (791.0 B)

LordPE_dll.EXE (204.0 KB)

LordPeFix.dll (19.5 KB)

LordPlug.dll (44.0 KB)

PROCS.DLL (8.50 KB)

PSAPI.DLL (28.3 KB)

ReadMe.txt (827.0 B)

REALIGN.DLL (7.50 KB)

RunLDS.BAT (28.0 B)

TrapDll.exe (3.00 KB)

odbg110.rar (1.43 MB)

UIF_chs.exe (442.0 KB)

IAT修复

KRYPTON

iatfix.txt (353.0 B)

KRYPTON说明.txt (2.11 KB)

tmd

CRC.exe (140.0 KB)

fix_tmd.txt (837.0 B)

过自校验.txt (941.0 B)

Hash.exe (28.5 KB)

Tmd例子.exe (140.0 KB)

TMD例子.udd (12.4 KB)

UIF.exe (176.0 KB)

iat.txt (587.0 B)

Project1.zp.exe (504.0 KB)

tmd.rar (320.1 KB)

RL简单的VM

ANTI_dump结构分析.docx (16.9 KB)

calc.exe (67.4 KB)

calc.udd (54.4 KB)

fuckrl1.2xoep CodeReplace.txt (8.81 KB)

VMP加壳处理

vmpdll

Release

StdAfx.obj (212.0 B)

StdAfx.sbr (423.8 KB)

vc60.idb (41.0 KB)

vmpdll.bsc (1.84 MB)

vmpdll.dll (40.0 KB)

vmpdll.exp (557.0 B)

vmpdll.lib (1.88 KB)

vmpdll.obj (3.08 KB)

vmpdll.pch (2.07 MB)

vmpdll.sbr

ReadMe.txt (1.58 KB)

vmpdll.cpp (2.93 KB)

vmpdll.dsp (4.00 KB)

vmpdll.dsw (535.0 B)

vmpdll.ncb (41.0 KB)

vmpdll.opt (47.5 KB)

vmpdll.plg (1.33 KB)

anti.vmp.exe (135.0 KB)

E.vmp.exe (560.0 KB)

FixVmpIat_2.06.txt (13.6 KB)

FixVmpIat_2.09.txt (17.4 KB)

VMP.pptx (578.1 KB)

VMP1.8.exe (2.72 MB)

vmp1.8_iat3.txt (1.04 KB)

Vmp2.05 Unpacker.txt (1.73 KB)

vmp2.05.exe (354.5 KB)

Vmp2.06 Unpacker.txt (1.66 KB)

VMP2.06.exe (453.0 KB)

vmp2.07_Unpacker.txt (672.0 B)

vmp2.09 Unpacker.txt (977.0 B)

VMP2.09.exe (896.5 KB)

vmp2.09.log (17.1 KB)

VMP_log.txt (594.0 B)

vmpdll.dll (40.0 KB)

脱壳UPXShell加壳的notepad.txt (326.0 B)

5逆向及病毒分析

逆向及病毒分析

2014-06-09

实例1-NDF穿还原木马

hide_call_看看隐藏了哪个API.exe (36.0 KB)

SysTracer.exe (2.15 MB)

实例2-简单C 还原病毒EPO真相

_cinit

bin

_cinit.exe (36.0 KB)

_cinit_fix.exe (36.0 KB)

_cinit.cpp (368.0 B)

_cinit.dsp (4.43 KB)

_cinit.dsw (537.0 B)

_cinit.ncb (33.0 KB)

_cinit.opt (47.5 KB)

_cinit.plg (1.71 KB)

ReadMe.txt (1.18 KB)

StdAfx.cpp (293.0 B)

StdAfx.h (769.0 B)

virus.jpg (311.4 KB)

实例3-fixflo新思路感染病毒

fixflo_1 (41.5 KB)

fixflo_2 (517.3 KB)

winlogon.ex_ (481.5 KB)

实例4-如何分析shellcode？

sc---.idb (128.2 KB)

sc.bin (1.36 KB)

实例5-如何找有效代码

分析.idb (1.81 MB)

脱壳后~1.idb (1.82 MB)

实例6-简易多态生成器

gen_polycode.asm (1.37 KB)

gen_polycode.exe (1.50 KB)

gen_polycode.obj (1.02 KB)

gen_rand.inc (986.0 B)

实例7-CVE-2012-158

a.ex_ (307.0 KB)

cve-2012-0158分析.doc (237.5 KB)

MSCOMCTL.OCX (1.03 MB)

sample_cve_2012_0158.doc_ (464.6 KB)

麦洛克菲-逆向病毒分析课程一.ppt (573.0 KB)

麦洛克菲-逆向病毒分析课程二.ppt (758.0 KB)

逆向及病毒分析_课堂笔记

实例1-NDF穿还原木马

hide_call_看看隐藏了哪个API.exe (36.0 KB)

SysTracer.exe (2.15 MB)

实例2-简单C 还原病毒EPO真相

_cinit

bin

_cinit.exe (36.0 KB)

_cinit_fix.exe (36.0 KB)

fc比较.txt

_cinit.cpp (368.0 B)

_cinit.dsp (4.43 KB)

_cinit.dsw (537.0 B)

_cinit.ncb (33.0 KB)

_cinit.opt (47.5 KB)

_cinit.plg (1.71 KB)

ReadMe.txt (1.18 KB)

StdAfx.cpp (293.0 B)

StdAfx.h (769.0 B)

virus.jpg (311.4 KB)

实例3-fixflo新思路感染病毒

fixflo_1 (41.5 KB)

fixflo_2 (517.3 KB)

winlogon.ex_ (481.5 KB)

实例4-如何分析shellcode？

sc---.idb (128.2 KB)

sc.bin (1.36 KB)

实例5-如何找有效代码

分析.idb (1.81 MB)

脱壳后~1.idb (1.82 MB)

实例6-简易多态生成器

gen_polycode.asm (1.48 KB)

gen_polycode.exe (1.50 KB)

gen_polycode.obj (1.02 KB)

gen_polycode_new.asm (1.37 KB)

gen_rand.inc (986.0 B)

实例7-CVE-2012-158

a.ex_ (307.0 KB)

cve-2012-0158分析.doc (237.5 KB)

MSCOMCTL.OCX (1.03 MB)

od命令.txt (17.0 B)

sample_cve_2012_0158.doc_ (464.6 KB)

tools

api-monitor-v2r13-x86-x64.zip (8.20 MB)

apilog18.zip (205.5 KB)

CFF Explorer.7z (2.24 MB)

FFI.7z (1.07 MB)

PEid.7z (6.07 MB)

PEInfo.exe (184.0 KB)

SysTracer.exe (2.15 MB)

断点.txt (1,023.0 B)

麦洛克菲-逆向病毒分析课程一.ppt (573.0 KB)

麦洛克菲-逆向病毒分析课程二.ppt (760.0 KB)

6ARK课程

ARK课程

进程

APC杀线程.mht (570.4 KB)

遍历句柄表.c (3.59 KB)

查看所有的快捷键.mht (417.1 KB)

GetCsrPid.mht (993.8 KB)

基于pspCidTable的进程检测技术.mht (112.7 KB)

KdVersionBlock.mht (113.4 KB)

LdrpHashTable枚举进程模块.mht (204.0 KB)

枚举快捷键.c (2.08 KB)

PEB枚举模块.mht (365.3 KB)

PspCidTable杂谈.mht (267.0 KB)

搜索高端内存枚举进程.htm (38.9 KB)

VAD枚举进程模块.mht (931.0 KB)

Windows句柄表分配算法分析.mht (222.4 KB)

WRK Handle Table技术报告.mht (602.8 KB)

侦测隐藏进程的强文 - Kevins的天空 - CSDNBlog.htm (123.0 KB)

ptetest

mmvalid.cpp (7.07 KB)

mmvalid.h (11.4 KB)

paging.cpp (17.5 KB)

paging.h (1.56 KB)

ptetest.cpp (10.2 KB)

驱动模块

目录树枚举内核模块.c (9.03 KB)

ObjectDirectory隐藏驱动.html (26.6 KB)

PsLoadModuleList_1.html (60.5 KB)

PsLoadModuleList_2.html (85.1 KB)

通过暴搜DRIVER_OBJECT枚举驱动 -.mht (733.5 KB)

[原创]基于交叉引用的搜索检测object hook.mht (188.6 KB)

ARK相关技术.pptx (290.8 KB)

ntdll.idb (2.10 MB)

ntfs.idb (6.30 MB)

ntoskrnl_xp_sp2.idb (31.1 MB)

peloader.c (8.72 KB)

shadow ssdt学习笔记.htm (74.8 KB)

shadow ssdt学习笔记（一）小更新071210 DebugMan - 第8个男人逆向工程-开发-系统底层-Rootkit-Anti-Rootkit - powered by phpwind_net.htm (74.8 KB)

SSDT.cpp (31.5 KB)

WIN7 X64 SSDT函数获得.mht (547.0 B)

win32k.idb (26.4 MB)

win32k.sys (1.78 MB)

ARK课程_课堂笔记

进程

APC杀线程.mht (570.4 KB)

遍历句柄表.c (3.59 KB)

查看所有的快捷键.mht (417.1 KB)

GetCsrPid.mht (993.8 KB)

基于pspCidTable的进程检测技术.mht (112.7 KB)

KdVersionBlock.mht (113.4 KB)

LdrpHashTable枚举进程模块.mht (204.0 KB)

枚举快捷键.c (2.08 KB)

PEB枚举模块.mht (365.3 KB)

PspCidTable杂谈.mht (267.0 KB)

RunIt.rar (5.77 KB)

搜索高端内存枚举进程.htm (38.9 KB)

VAD枚举进程模块.mht (931.0 KB)

Windows句柄表分配算法分析.mht (222.4 KB)

WRK Handle Table技术报告.mht (602.8 KB)

侦测隐藏进程的强文 - Kevins的天空 - CSDNBlog.htm (123.0 KB)

课堂笔记

1进程.txt (2.67 KB)

2线程.txt (662.0 B)

3进程模块.txt (1.10 KB)

4.进程其他项目.txt (527.0 B)

5.驱动模块.txt (1.27 KB)

6.SSDT与ShadowSSDT.txt (2.44 KB)

7.FSD.txt (146.0 B)

8.ARK相关技术.txt (2.37 KB)

ptetest

mmvalid.cpp (7.07 KB)

mmvalid.h (11.5 KB)

paging.cpp (17.5 KB)

paging.h (1.56 KB)

ptetest.cpp (10.2 KB)

驱动模块

目录树枚举内核模块.c (9.03 KB)

ObjectDirectory隐藏驱动.html (26.6 KB)

PsLoadModuleList_1.html (60.5 KB)

PsLoadModuleList_2.html (85.1 KB)

通过暴搜DRIVER_OBJECT枚举驱动 -.mht (733.5 KB)

[原创]基于交叉引用的搜索检测object hook.mht (188.6 KB)

ARK相关技术.pptx (296.2 KB)

ntdll.idb (2.10 MB)

ntfs.idb (6.30 MB)

ntoskrnl_xp_sp2.idb (31.1 MB)

peloader.c (8.65 KB)

shadow ssdt学习笔记.htm (74.8 KB)

shadow ssdt学习笔记（一）小更新071210 DebugMan - 第8个男人逆向工程-开发-系统底层-Rootkit-Anti-Rootkit - powered by phpwind_net.htm (74.8 KB)

SSDT.cpp (31.5 KB)

WIN7 X64 SSDT函数获得.mht (547.0 B)

win32k.idb (26.4 MB)

win32k.sys (1.78 MB)

7ShadowGhost

awdbedit-1.0_bin

docs

license

COPYING.html (21.3 KB)

gnu-head.jpg (5.87 KB)

gpl.css (510.0 B)

sdk

sdk.txt (13.4 KB)

docs.html (764.0 B)

plugins

builtins.dll (96.0 KB)

wavedit.dll (48.0 KB)

skins

back.bmp (16.2 KB)

bluesky.bmp (32.9 KB)

gray.bmp (7.54 KB)

oldphoto.bmp (32.9 KB)

sand.bmp (3.69 KB)

water.bmp (29.3 KB)

ZTAO (512.0 KB)

aaa.awd (512.0 KB)

AwardSoftwareInternational,Inc.-F4.rom (1.00 MB)

AwardSoftwareInternational,Inc.-F4.rom.zip (637.5 KB)

awdbedit.exe (128.0 KB)

hook.rom (7.50 KB)

hook2.bin (8.00 KB)

hookxx.bin (8.00 KB)

N68SM218.BSA (512.0 KB)

OLDBIOS.bin (256.0 KB)

readme.html (2.47 KB)

ROMCHK.EXE (5.57 KB)

ZTAO (512.0 KB)

ZTAO.bin (512.0 KB)

ZTAO.zip (340.8 KB)

BIOS_Backup_TooKit_V2.0

AwardSoftwareInternational,Inc.-F8 - 副本.rom (1.00 MB)

AwardSoftwareInternational,Inc.-F8.rom (1.00 MB)

bios.bin (1.00 MB)

BIOS_Backup_TooKit.EXE (599.5 KB)

BIOS_Backup_TooKit.zip (595.4 KB)

IntelCorp.-CNG4110H.86A.0012.2009.1223.1420.rom (1.00 MB)

README.txt (1.18 KB)

白利用

HPLoader.idb (1.00 MB)

enlpu32

enlpu32.cpp (1.26 KB)

enlpu32.def (79.0 B)

enlpu32.dsp (4.37 KB)

enlpu32.dsw (537.0 B)

StdAfx.cpp (294.0 B)

StdAfx.h (802.0 B)

e07cf32207c7bd95aa04a982755cdfa8_TPONSCR.exe (322.6 KB)

e07cf32207c7bd95aa04a982755cdfa8_TPONSCR.idb (2.30 MB)

enlpu32.dll (28.0 KB)

42d439aca2e29fe2539fce37eec22209_QQPCUrlLoader.exe (109.4 KB)

42d439aca2e29fe2539fce37eec22209_QQPCUrlLoader.idb (888.2 KB)

746994da30a10488d090d95f28611e6f_pcmastercoredrv.idb (624.2 KB)

746994da30a10488d090d95f28611e6f_pcmastercoredrv.sys (35.8 KB)

浅谈白利用.doc (118.0 KB)

ShadowGhost3

bin

i386

Bin2Hex.exe (4.50 KB)

Bin2Hex.pdb (67.0 KB)

Driver.pdb (99.0 KB)

Driver.sys (4.50 KB)

Driver.sys.lnk (682.0 B)

Bin2Hex.exe (4.50 KB)

bootload.obj (1.05 KB)

boottest.bin (380.0 B)

boottest.obj (1.07 KB)

clear.bat (29.0 B)

cmd.bat (7.00 B)

Driver.sys.lnk (676.0 B)

hello_tt.sys.lnk (676.0 B)

makebin.bat (228.0 B)

makebintest.bat (71.0 B)

makeVirusHead.bat (52.0 B)

obj2bin.exe (7.50 KB)

PmVirus.obj (1.12 KB)

Bin2Hex

Bin2Hex.cpp (2.20 KB)

Bin2Hex.vcxproj (3.04 KB)

Bin2Hex.vcxproj.filters (1.14 KB)

Bin2Hex.vcxproj.user (143.0 B)

Bin2Hex.vcxproj.vspscc (272.0 B)

buildfre_wnet_x86.log (591.0 B)

ddkbuild.bat (26.1 KB)

ddkbuild.cmd (44.1 KB)

MAKEFILE (290.0 B)

mybuild.bat (60.0 B)

readme.txt (1.28 KB)

SOURCES (665.0 B)

MakeVirusContent

MakeVirusContent.cpp (3.10 KB)

MakeVirusContent.vcxproj (4.55 KB)

MakeVirusContent.vcxproj.filters (1.29 KB)

MakeVirusContent.vcxproj.user (143.0 B)

MakeVirusContent.vcxproj.vspscc (281.0 B)

ReadMe.txt (1.58 KB)

stdafx.cpp (221.0 B)

stdafx.h (233.0 B)

targetver.h (236.0 B)

obj2bin

obj2bin.cpp (6.23 KB)

obj2bin.vcxproj (4.52 KB)

obj2bin.vcxproj.filters (1.28 KB)

obj2bin.vcxproj.user (143.0 B)

obj2bin.vcxproj.vspscc (272.0 B)

ReadMe.txt (1.52 KB)

stdafx.cpp (212.0 B)

stdafx.h (233.0 B)

targetver.h (236.0 B)

ProtectModeVirus

Release

ProtectModeVirus.log (636.0 B)

make.bat (108.0 B)

PmVirus.asm (5.40 KB)

ProtectModeVirus.vcxproj (2.94 KB)

ProtectModeVirus.vcxproj.filters (1.02 KB)

ProtectModeVirus.vcxproj.user (143.0 B)

ProtectModeVirus.vcxproj.vspscc (281.0 B)

readme.txt (1.32 KB)

Release

ShadowGhost3

drvss.cpp (7.55 KB)

drvss.h (1.30 KB)

ntdll.h (103.8 KB)

ntdll.lib (353.2 KB)

ReadMe.txt (1.55 KB)

ShadowGhost3.cpp (7.76 KB)

ShadowGhost3.vcxproj (4.80 KB)

ShadowGhost3.vcxproj.filters (1.74 KB)

ShadowGhost3.vcxproj.user (143.0 B)

ShadowGhost3.vcxproj.vspscc (277.0 B)

stdafx.cpp (217.0 B)

stdafx.h (233.0 B)

targetver.h (236.0 B)

Sys

objchk_wlh_x86

i386

_objects.mac (256.0 B)

main.obj (87.3 KB)

main.obj.oacr.root.x86chk.pft.xml (2.89 KB)

buildchk_wlh_x86.log (2.64 KB)

buildfre_wnet_x86.log (626.0 B)

ddkbuild.bat (26.1 KB)

ddkbuild.cmd (44.1 KB)

Main.c (19.1 KB)

Main.c.bak (19.5 KB)

MAKEFILE (267.0 B)

mybuild.bat (60.0 B)

ntifs_48.h (238.7 KB)

ntifs_48_Old.h (238.7 KB)

readme.txt (1.26 KB)

SOURCES (94.0 B)

stdafx.h (4.79 KB)

stdafx.h.bak (4.79 KB)

Sys.vcxproj (3.15 KB)

Sys.vcxproj.filters (1.43 KB)

Sys.vcxproj.user (143.0 B)

Sys.vcxproj.vspscc (268.0 B)

zwfunc.h (30.7 KB)

zwfunc.h.bak (30.7 KB)

VirusMBR

Release

VirusMBR.log (829.0 B)

bootload.asm (5.69 KB)

boottest.asm (5.71 KB)

boottest.asm.bak (5.71 KB)

make.bat (109.0 B)

make.bat.bak (194.0 B)

maketest.bat (194.0 B)

maketest.bat.bak (188.0 B)

readme.txt (1.29 KB)

VirusMBR.vcxproj (2.94 KB)

VirusMBR.vcxproj.filters (1.02 KB)

VirusMBR.vcxproj.user (143.0 B)

VirusMBR.vcxproj.vspscc (273.0 B)

mssccprj.scc (152.0 B)

ShadowGhost3.sln (4.93 KB)

ShadowGhost3.vssscc (256.0 B)

说明.txt (3.61 KB)

360发布“BMW病毒”技术分析报告1.doc (166.0 KB)

Bochs使用手册.doc (60.0 KB)

Bootkit课程.ppt (103.5 KB)

鬼影2_TDL4技术分析.doc (546.5 KB)

鬼影3断点.txt (583.0 B)

鬼影3技术分析.doc (689.0 KB)

INT13.doc (65.5 KB)

基于MBR 的bootkit的进展.ppt (642.0 KB)

The Art of Bootkit Development.pdf (1.63 MB)

Windows NT引导过程源代码分析.doc (820.5 KB)

Windows 下汇编基础知识.ppt (1.23 MB)

7ShadowGhost_课堂笔记

awdbedit-1.0_bin

docs

license

COPYING.html (21.3 KB)

gnu-head.jpg (5.87 KB)

gpl.css (510.0 B)

sdk

sdk.txt (13.4 KB)

docs.html (764.0 B)

plugins

builtins.dll (96.0 KB)

wavedit.dll (48.0 KB)

skins

back.bmp (16.2 KB)

bluesky.bmp (32.9 KB)

gray.bmp (7.54 KB)

oldphoto.bmp (32.9 KB)

sand.bmp (3.69 KB)

water.bmp (29.3 KB)

ZTAO (512.0 KB)

aaa.awd (512.0 KB)

AwardSoftwareInternational,Inc.-F4.rom (1.00 MB)

AwardSoftwareInternational,Inc.-F4.rom.zip (637.5 KB)

awdbedit.exe (128.0 KB)

hook.rom (7.50 KB)

hook2.bin (8.00 KB)

hookxx.bin (8.00 KB)

N68SM218.BSA (512.0 KB)

OLDBIOS.bin (256.0 KB)

readme.html (2.47 KB)

ROMCHK.EXE (5.57 KB)

ZTAO (512.0 KB)

ZTAO.bin (512.0 KB)

ZTAO.zip (340.8 KB)

BIOS_Backup_TooKit_V2.0

AwardSoftwareInternational,Inc.-F8 - 副本.rom (1.00 MB)

AwardSoftwareInternational,Inc.-F8.rom (1.00 MB)

bios.bin (1.00 MB)

BIOS_Backup_TooKit.EXE (599.5 KB)

BIOS_Backup_TooKit.zip (595.4 KB)

IntelCorp.-CNG4110H.86A.0012.2009.1223.1420.rom (1.00 MB)

README.txt (1.18 KB)

白利用

HPLoader.idb (1.00 MB)

enlpu32

enlpu32.cpp (1.26 KB)

enlpu32.def (79.0 B)

enlpu32.dsp (4.37 KB)

enlpu32.dsw (537.0 B)

StdAfx.cpp (294.0 B)

StdAfx.h (802.0 B)

e07cf32207c7bd95aa04a982755cdfa8_TPONSCR.exe (322.6 KB)

e07cf32207c7bd95aa04a982755cdfa8_TPONSCR.idb (2.30 MB)

enlpu32.dll (28.0 KB)

42d439aca2e29fe2539fce37eec22209_QQPCUrlLoader.exe (109.4 KB)

42d439aca2e29fe2539fce37eec22209_QQPCUrlLoader.idb (888.2 KB)

746994da30a10488d090d95f28611e6f_pcmastercoredrv.idb (624.2 KB)

746994da30a10488d090d95f28611e6f_pcmastercoredrv.sys (35.8 KB)

pcmaster_test.cpp (1.11 KB)

浅谈白利用.doc (117.5 KB)

bochs

bios.rar (222.3 KB)

bochs.rar (891.0 KB)

Bochs使用手册.doc (60.0 KB)

help.txt (226.0 B)

Rootkit

Npfs164-aliduck-intelk34系列rootkit木马驱动主要分析.doc (2.22 MB)

Togoupplib驱动木马技术分析.doc (339.5 KB)

ShadowGhost3

bin

i386

Bin2Hex.exe (4.50 KB)

Bin2Hex.pdb (67.0 KB)

Driver.pdb (99.0 KB)

Driver.sys (4.50 KB)

Driver.sys.lnk (682.0 B)

Bin2Hex.exe (4.50 KB)

bootload.obj (1.05 KB)

boottest.bin (380.0 B)

boottest.obj (1.07 KB)

clear.bat (29.0 B)

cmd.bat (7.00 B)

Driver.sys.lnk (676.0 B)

hello_tt.sys.lnk (676.0 B)

makebin.bat (228.0 B)

makebintest.bat (71.0 B)

makeVirusHead.bat (52.0 B)

obj2bin.exe (7.50 KB)

PmVirus.obj (1.12 KB)

Bin2Hex

Bin2Hex.cpp (2.20 KB)

Bin2Hex.vcxproj (3.04 KB)

Bin2Hex.vcxproj.filters (1.14 KB)

Bin2Hex.vcxproj.user (143.0 B)

Bin2Hex.vcxproj.vspscc (272.0 B)

buildfre_wnet_x86.log (591.0 B)

ddkbuild.bat (26.1 KB)

ddkbuild.cmd (44.1 KB)

MAKEFILE (290.0 B)

mybuild.bat (60.0 B)

readme.txt (1.28 KB)

SOURCES (665.0 B)

MakeVirusContent

MakeVirusContent.cpp (3.10 KB)

MakeVirusContent.vcxproj (4.55 KB)

MakeVirusContent.vcxproj.filters (1.29 KB)

MakeVirusContent.vcxproj.user (143.0 B)

MakeVirusContent.vcxproj.vspscc (281.0 B)

ReadMe.txt (1.58 KB)

stdafx.cpp (221.0 B)

stdafx.h (233.0 B)

targetver.h (236.0 B)

obj2bin

obj2bin.cpp (6.23 KB)

obj2bin.vcxproj (4.52 KB)

obj2bin.vcxproj.filters (1.28 KB)

obj2bin.vcxproj.user (143.0 B)

obj2bin.vcxproj.vspscc (272.0 B)

ReadMe.txt (1.52 KB)

stdafx.cpp (212.0 B)

stdafx.h (233.0 B)

targetver.h (236.0 B)

ProtectModeVirus

Release

ProtectModeVirus.log (636.0 B)

make.bat (108.0 B)

PmVirus.asm (5.40 KB)

ProtectModeVirus.vcxproj (2.94 KB)

ProtectModeVirus.vcxproj.filters (1.02 KB)

ProtectModeVirus.vcxproj.user (143.0 B)

ProtectModeVirus.vcxproj.vspscc (281.0 B)

readme.txt (1.32 KB)

Release

ShadowGhost3

drvss.cpp (7.55 KB)

drvss.h (1.30 KB)

ntdll.h (103.8 KB)

ntdll.lib (353.2 KB)

ReadMe.txt (1.55 KB)

ShadowGhost3.cpp (7.76 KB)

ShadowGhost3.vcxproj (4.80 KB)

ShadowGhost3.vcxproj.filters (1.74 KB)

ShadowGhost3.vcxproj.user (143.0 B)

ShadowGhost3.vcxproj.vspscc (277.0 B)

stdafx.cpp (217.0 B)

stdafx.h (233.0 B)

targetver.h (236.0 B)

Sys

objchk_wlh_x86

i386

_objects.mac (256.0 B)

main.obj (87.3 KB)

main.obj.oacr.root.x86chk.pft.xml (2.89 KB)

buildchk_wlh_x86.log (2.64 KB)

buildfre_wnet_x86.log (626.0 B)

ddkbuild.bat (26.1 KB)

ddkbuild.cmd (44.1 KB)

Main.c (19.1 KB)

Main.c.bak (19.5 KB)

MAKEFILE (267.0 B)

mybuild.bat (60.0 B)

ntifs_48.h (238.7 KB)

ntifs_48_Old.h (238.7 KB)

readme.txt (1.26 KB)

SOURCES (94.0 B)

stdafx.h (4.79 KB)

stdafx.h.bak (4.79 KB)

Sys.vcxproj (3.15 KB)

Sys.vcxproj.filters (1.43 KB)

Sys.vcxproj.user (143.0 B)

Sys.vcxproj.vspscc (268.0 B)

zwfunc.h (30.7 KB)

zwfunc.h.bak (30.7 KB)

VirusMBR

Release

VirusMBR.log (829.0 B)

bootload.asm (5.69 KB)

boottest.asm (5.71 KB)

boottest.asm.bak (5.71 KB)

make.bat (109.0 B)

make.bat.bak (194.0 B)

maketest.bat (194.0 B)

maketest.bat.bak (188.0 B)

readme.txt (1.29 KB)

VirusMBR.vcxproj (2.94 KB)

VirusMBR.vcxproj.filters (1.02 KB)

VirusMBR.vcxproj.user (143.0 B)

VirusMBR.vcxproj.vspscc (273.0 B)

mssccprj.scc (152.0 B)

ShadowGhost3.sln (4.93 KB)

ShadowGhost3.vssscc (256.0 B)

说明.txt (3.61 KB)

ShadowGhost3_Real

bin

i386

Bin2Hex.exe (4.50 KB)

Bin2Hex.pdb (67.0 KB)

Driver.pdb (99.0 KB)

Driver.sys (5.50 KB)

Bin2Hex.exe (4.50 KB)

bootload.obj (1.05 KB)

clear.bat (29.0 B)

cmd.bat (7.00 B)

Driver.sys (5.50 KB)

hello_tt.sys (5.50 KB)

makebin.bat (228.0 B)

makeVirusHead.bat (52.0 B)

obj2bin.exe (7.50 KB)

PmVirus.obj (1.12 KB)

Bin2Hex

Bin2Hex.cpp (2.20 KB)

Bin2Hex.vcxproj (3.04 KB)

Bin2Hex.vcxproj.filters (1.14 KB)

Bin2Hex.vcxproj.user (143.0 B)

Bin2Hex.vcxproj.vspscc (272.0 B)

buildfre_wnet_x86.log (591.0 B)

ddkbuild.bat (26.1 KB)

ddkbuild.cmd (44.1 KB)

MAKEFILE (290.0 B)

mybuild.bat (60.0 B)

readme.txt (1.28 KB)

SOURCES (665.0 B)

MakeVirusContent

MakeVirusContent.cpp (3.10 KB)

MakeVirusContent.vcxproj (4.55 KB)

MakeVirusContent.vcxproj.filters (1.29 KB)

MakeVirusContent.vcxproj.user (143.0 B)

MakeVirusContent.vcxproj.vspscc (281.0 B)

ReadMe.txt (1.58 KB)

stdafx.cpp (221.0 B)

stdafx.h (233.0 B)

targetver.h (236.0 B)

obj2bin

obj2bin.cpp (6.23 KB)

obj2bin.vcxproj (4.52 KB)

obj2bin.vcxproj.filters (1.28 KB)

obj2bin.vcxproj.user (143.0 B)

obj2bin.vcxproj.vspscc (272.0 B)

ReadMe.txt (1.52 KB)

stdafx.cpp (212.0 B)

stdafx.h (233.0 B)

targetver.h (236.0 B)

ProtectModeVirus

Release

ProtectModeVirus.log (636.0 B)

make.bat (108.0 B)

PmVirus.asm (5.40 KB)

ProtectModeVirus.vcxproj (2.94 KB)

ProtectModeVirus.vcxproj.filters (1.02 KB)

ProtectModeVirus.vcxproj.user (143.0 B)

ProtectModeVirus.vcxproj.vspscc (281.0 B)

readme.txt (1.32 KB)

Release

ShadowGhost3

drvss.cpp (7.55 KB)

drvss.h (1.30 KB)

ntdll.h (103.8 KB)

ntdll.lib (353.2 KB)

ReadMe.txt (1.55 KB)

ShadowGhost3.cpp (7.76 KB)

ShadowGhost3.vcxproj (4.80 KB)

ShadowGhost3.vcxproj.filters (1.74 KB)

ShadowGhost3.vcxproj.user (143.0 B)

ShadowGhost3.vcxproj.vspscc (277.0 B)

stdafx.cpp (217.0 B)

stdafx.h (233.0 B)

targetver.h (236.0 B)

Sys

buildfre_wnet_x86.log (626.0 B)

ddkbuild.bat (26.1 KB)

ddkbuild.cmd (44.1 KB)

Main.c (19.1 KB)

MAKEFILE (267.0 B)

mybuild.bat (60.0 B)

ntifs_48.h (238.7 KB)

readme.txt (1.26 KB)

SOURCES (94.0 B)

stdafx.h (4.79 KB)

Sys.vcxproj (3.15 KB)

Sys.vcxproj.filters (1.43 KB)

Sys.vcxproj.user (143.0 B)

Sys.vcxproj.vspscc (268.0 B)

zwfunc.h (30.7 KB)

VirusMBR

Release

VirusMBR.log (829.0 B)

bootload.asm (5.69 KB)

make.bat (109.0 B)

readme.txt (1.29 KB)

VirusMBR.vcxproj (2.94 KB)

VirusMBR.vcxproj.filters (1.02 KB)

VirusMBR.vcxproj.user (143.0 B)

VirusMBR.vcxproj.vspscc (273.0 B)

mssccprj.scc (152.0 B)

ShadowGhost3.sln (4.93 KB)

ShadowGhost3.vssscc (256.0 B)

说明.txt (3.61 KB)

360发布“BMW病毒”技术分析报告1.doc (166.0 KB)

Bootkit课程.ppt (106.5 KB)

鬼影2_TDL4技术分析.doc (546.5 KB)

鬼影3断点.txt (583.0 B)

鬼影3技术分析.doc (703.0 KB)

INT13.doc (66.5 KB)

基于MBR 的bootkit的进展.ppt (629.0 KB)

内核驱动漏洞与攻击预防.pdf (302.1 KB)

The Art of Bootkit Development.pdf (1.63 MB)

Windows NT引导过程源代码分析.doc (820.5 KB)

Windows 下汇编基础知识.ppt (1.22 MB)

9tenl-firewall

Demo

basic

tcp

clientdemo

clientdemo.cpp (1.24 KB)

clientdemo.dsp (4.48 KB)

clientdemo.dsw (545.0 B)

StdAfx.cpp (297.0 B)

StdAfx.h (769.0 B)

serverdemo

serverdemo.cpp (1.39 KB)

serverdemo.dsp (4.48 KB)

serverdemo.dsw (545.0 B)

StdAfx.cpp (297.0 B)

StdAfx.h (769.0 B)

udp

a.cpp (1.23 KB)

a.dsp (4.37 KB)

a.dsw (527.0 B)

StdAfx.cpp (288.0 B)

StdAfx.h (769.0 B)

b.cpp (1.06 KB)

b.dsp (4.37 KB)

b.dsw (527.0 B)

StdAfx.cpp (288.0 B)

StdAfx.h (769.0 B)

iocpdemo

clientdemo

clientdemo.cpp (1.24 KB)

clientdemo.dsp (4.48 KB)

clientdemo.dsw (545.0 B)

StdAfx.cpp (297.0 B)

StdAfx.h (769.0 B)

serverdemo

serverdemo.cpp (5.00 KB)

serverdemo.dsp (4.48 KB)

serverdemo.dsw (545.0 B)

StdAfx.cpp (297.0 B)

StdAfx.h (769.0 B)

ndis

client

common

ado.cpp (44.0 KB)

ado.h (14.5 KB)

BlowFish.cpp (23.2 KB)

Blowfish.h (2.84 KB)

BtnST.cpp (58.0 KB)

BtnST.h (9.69 KB)

ColorStatic.cpp (5.56 KB)

ColorStatic.h (4.38 KB)

DialogResize.cpp (10.7 KB)

DialogResize.h (3.17 KB)

Filt.h (2.40 KB)

fw_rule.h (1.04 KB)

HistogramCtrl.cpp (7.25 KB)

HistogramCtrl.h (1.93 KB)

HyperlinkStatic.cpp (3.44 KB)

HyperlinkStatic.h (1.74 KB)

IconListBox.cpp (4.86 KB)

IconListBox.h (1.72 KB)

Led.cpp (5.09 KB)

Led.h (807.0 B)

MD5Checksum.cpp (20.3 KB)

MD5Checksum.h (16.2 KB)

MD5ChecksumDefines.h (5.20 KB)

NewWizDialog.cpp (11.8 KB)

NewWizDialog.h (2.54 KB)

NewWizPage.cpp (3.85 KB)

NewWizPage.h (2.07 KB)

PasseckDialog.cpp (3.82 KB)

PasseckDialog.h (1.33 KB)

Registry.cpp (21.5 KB)

Registry.h (2.19 KB)

SpinLock.h (1.70 KB)

Splash.cpp (3.20 KB)

Splash.h (1.13 KB)

SystemTray.cpp (12.5 KB)

SystemTray.h (3.97 KB)

ThemeHelperST.cpp (2.58 KB)

ThemeHelperST.h (3.08 KB)

Unzipper.cpp (9.36 KB)

Unzipper.h (2.95 KB)

XmlDocument.cpp (13.1 KB)

XmlDocument.h (1.78 KB)

XPStyleButtonST.cpp (4.31 KB)

XPStyleButtonST.h (1.65 KB)

FirewallDemo

res

BITMAP3.bmp (1.38 KB)

BITMAP4.bmp (1.38 KB)

bitmap5.bmp (1.38 KB)

BITMAP6.bmp (1.38 KB)

BITMAP7.bmp (1.38 KB)

bitmap8.bmp (1.38 KB)

BITMAP9.bmp (1.38 KB)

bitmap10.bmp (1.38 KB)

bitmap11.bmp (1.38 KB)

CONFIG.ICO (3.19 KB)

EXIT.ICO (3.19 KB)

Filter.ico (3.19 KB)

FirewallDemo.ico (14.2 KB)

FirewallDemo.rc2 (404.0 B)

FW_LOGO.ico (14.2 KB)

Green_logo.ico (2.19 KB)

HELP.ICO (3.19 KB)

Hide.ico (3.19 KB)

icon1.ico (1.05 KB)

log.ico (3.19 KB)

LOGO.ICO (2.19 KB)

main.ico (2.19 KB)

netstate.ico (3.55 KB)

network.ico (3.69 KB)

NullApp.ico (1.05 KB)

Orange_logo.ico (2.19 KB)

Red_logo.ico (2.19 KB)

REG.ICO (3.19 KB)

Snap1.bmp (434.0 KB)

splash.bmp (24.1 KB)

teen.ico (4.05 KB)

UPDATE.ICO (3.19 KB)

updateitem.ico (894.0 B)

AddRule.cpp (6.88 KB)

AddRule.h (2.76 KB)

Common.cpp (3.84 KB)

Common.h (2.26 KB)

condef.h (3.67 KB)

Config.cpp (3.41 KB)

Config.h (1.69 KB)

DDKLBLInc.h (1.90 KB)

drvdef.h (4.05 KB)

ethertype.h (2.68 KB)

FirewallDemo.cpp (2.61 KB)

FirewallDemo.dsp (8.55 KB)

FirewallDemo.dsw (547.0 B)

FirewallDemo.h (1.42 KB)

FirewallDemo.rc (13.5 KB)

FirewallDemoDlg.cpp (21.5 KB)

FirewallDemoDlg.h (3.42 KB)

fw_log.h (610.0 B)

IN_SYSTM.H (2.43 KB)

IP.H (6.12 KB)

IP_ICMP.H (6.91 KB)

Log.cpp (1.48 KB)

Log.h (1.24 KB)

Monitor.cpp (4.74 KB)

Monitor.h (1.65 KB)

NetState.cpp (1.85 KB)

NetState.h (1.38 KB)

ReadMe.txt (3.60 KB)

resource.h (4.52 KB)

Splash.cpp (3.18 KB)

Splash.h (1.13 KB)

StdAfx.cpp (214.0 B)

StdAfx.h (1.19 KB)

TCP.H (4.20 KB)

UDP.H (2.22 KB)

XInstall.cpp (3.09 KB)

XInstall.h (2.56 KB)

passthru

Bin

FirewallDemo.exe (824.1 KB)

netsf.inf (6.02 KB)

netsf_m.inf (2.28 KB)

passthru.dll (51.5 KB)

passthru.sys (33.1 KB)

common

common.h (1.37 KB)

xp_passthru

cons_def.h (863.0 B)

DDKLBLInc.h (1.92 KB)

ethertype.h (2.68 KB)

fw_interface.h (2.10 KB)

fw_log.h (611.0 B)

fw_rule.h (1.07 KB)

IGMP.H (4.15 KB)

IN.H (4.92 KB)

IN_SYSTM.H (2.43 KB)

IP.H (6.11 KB)

IP_ICMP.H (6.91 KB)

IP_MROUT.H (4.50 KB)

makefile (244.0 B)

miniport.c (34.1 KB)

netsf.inf (6.02 KB)

netsf_m.inf (2.28 KB)

passthru.c (19.6 KB)

passthru.dll (51.5 KB)

passthru.h (9.68 KB)

passthru.htm (16.8 KB)

passthru.map (14.7 KB)

passthru.rc (2.68 KB)

PCAENET.H (3.12 KB)

precomp.h (123.0 B)

protocol.c (45.7 KB)

resource.h (455.0 B)

Rule.c (34.8 KB)

Rule.h (1.59 KB)

sources (840.0 B)

TCP.H (4.20 KB)

UDP.H (2.22 KB)

xp_passthru.dsp (5.21 KB)

xp_passthru.dsw (545.0 B)

tdi

tdifw-1.4.4

addon

ndis_hk

bin

ndis_hk.sys (10.2 KB)

src

ndis_hk

adapters.c (2.90 KB)

adapters.h (1.09 KB)

doxygen.cfg (41.3 KB)

filter.c (7.20 KB)

filter.h (1.50 KB)

hooked_fn.c (45.8 KB)

makefile (267.0 B)

ndis_hk.c (8.91 KB)

ndis_hk.h (4.21 KB)

pe.h (4.27 KB)

sources (319.0 B)

av.c (3.98 KB)

av.h (1.99 KB)

dirs (23.0 B)

except.h (733.0 B)

memtrack.c (3.45 KB)

memtrack.h (1.67 KB)

ndis_hk_ioctl.h (3.60 KB)

net.h (1.92 KB)

nt.h (838.0 B)

sock.c (1.32 KB)

sock.h (2.42 KB)

install_2k.bat (96.0 B)

install_2k.reg (982.0 B)

install_nt4.bat (97.0 B)

install_nt4.reg (339.0 B)

bin

install.exe (5.00 KB)

tdifw.exe (19.5 KB)

tdifw_drv.sys (27.4 KB)

src

drv

tdidrvpr

tdidrvpr.dsp (6.23 KB)

tdidrvpr.dsw (541.0 B)

conn_state.c (19.8 KB)

conn_state.h (1.27 KB)

disp_conn.c (14.0 KB)

disp_dg.c (8.22 KB)

disp_ev.c (4.49 KB)

disp_obj.c (12.7 KB)

disp_sr.c (3.27 KB)

dispatch.c (1.40 KB)

dispatch.h (1.06 KB)

ev_conn.c (12.0 KB)

ev_dg.c (4.22 KB)

ev_recv.c (6.56 KB)

events.c (1.21 KB)

events.h (1.82 KB)

filter.c (14.8 KB)

filter.h (1.11 KB)

ipc.c (4.42 KB)

MAKEFILE (267.0 B)

memtrack.c (3.83 KB)

memtrack.h (1.09 KB)

ndis_hk_ioctl.h (3.96 KB)

obj_tbl.c (13.9 KB)

obj_tbl.h (2.86 KB)

packet.c (22.2 KB)

packet.h (242.0 B)

pid_pname.c (5.71 KB)

pid_pname.h (491.0 B)

sids.c (4.80 KB)

sids.h (921.0 B)

sock.c (1.02 KB)

sock.h (2.38 KB)

SOURCES (648.0 B)

tdi_fw.c (24.6 KB)

tdi_fw.h (3.63 KB)

install

MAKEFILE (267.0 B)

SOURCES (220.0 B)

tdi_install.c (7.18 KB)

svc

flt_rule.c (7.21 KB)

flt_rule.h (193.0 B)

iphlpapi.h (1.63 KB)

iphlpapi.lib (2.58 KB)

main.c (11.4 KB)

MAKEFILE (267.0 B)

msg.h (945.0 B)

msg.mc (81.0 B)

msg.rc (37.0 B)

SOURCES (333.0 B)

tdi_fw_svc.rc (19.0 B)

tdifw_svc.c (40.4 KB)

tdifw_svc.h (788.0 B)

thread.h (466.0 B)

dirs (47.0 B)

ipc.h (4.99 KB)

net.h (1.80 KB)

changelog.txt (4.58 KB)

changelog_old.txt (1.73 KB)

debug.txt (1.76 KB)

install.bat (507.0 B)

install_nt4.bat (617.0 B)

install_nt4.reg (366.0 B)

log_format.txt (1.79 KB)

packet_engine.txt (572.0 B)

readme.txt (1.66 KB)

tdifw.conf (4.70 KB)

tips.txt (718.0 B)

uninstall.bat (471.0 B)

uninstall_nt4.bat (481.0 B)

uninstall_nt4.reg (79.0 B)

WFP

inspect

sys

inspect.c (36.1 KB)

inspect.h (3.89 KB)

inspect.inf (1.46 KB)

makefile (734.0 B)

sources (399.0 B)

TL_drv.c (22.0 KB)

utils.c (12.3 KB)

utils.h (9.71 KB)

dirs (17.0 B)

msnmntr

exe

makefile (734.0 B)

monitor.cpp (17.9 KB)

mtrace.cmd (8.00 KB)

sources (799.0 B)

inc

ioctl.h (880.0 B)

mntrguid.h (779.0 B)

sys

ctl.c (6.27 KB)

ctl.h (252.0 B)

init.c (4.43 KB)

makefile (734.0 B)

msnmntr.c (22.2 KB)

msnmntr.h (1,000.0 B)

msnmntr.inf (1.45 KB)

notify.c (15.0 KB)

notify.h (555.0 B)

sources (442.0 B)

dirs (29.0 B)

麦洛克菲内核开发第九课.ppt (1.40 MB)

tdi ndis wfp.txt

9tenl-firewall_课堂笔记

Demo

basic

tcp

clientdemo

clientdemo.cpp (1.24 KB)

clientdemo.dsp (4.48 KB)

clientdemo.dsw (545.0 B)

StdAfx.cpp (297.0 B)

StdAfx.h (769.0 B)

serverdemo

serverdemo.cpp (1.39 KB)

serverdemo.dsp (4.48 KB)

serverdemo.dsw (545.0 B)

StdAfx.cpp (297.0 B)

StdAfx.h (769.0 B)

udp

a.cpp (1.23 KB)

a.dsp (4.37 KB)

a.dsw (527.0 B)

StdAfx.cpp (288.0 B)

StdAfx.h (769.0 B)

b.cpp (1.06 KB)

b.dsp (4.37 KB)

b.dsw (527.0 B)

StdAfx.cpp (288.0 B)

StdAfx.h (769.0 B)

iocpdemo

clientdemo

clientdemo.cpp (1.24 KB)

clientdemo.dsp (4.48 KB)

clientdemo.dsw (545.0 B)

StdAfx.cpp (297.0 B)

StdAfx.h (769.0 B)

serverdemo

serverdemo.cpp (5.00 KB)

serverdemo.dsp (4.48 KB)

serverdemo.dsw (545.0 B)

StdAfx.cpp (297.0 B)

StdAfx.h (769.0 B)

ndis

client

common

ado.cpp (44.0 KB)

ado.h (14.5 KB)

BlowFish.cpp (23.2 KB)

Blowfish.h (2.84 KB)

BtnST.cpp (58.0 KB)

BtnST.h (9.69 KB)

ColorStatic.cpp (5.56 KB)

ColorStatic.h (4.38 KB)

DialogResize.cpp (10.7 KB)

DialogResize.h (3.17 KB)

Filt.h (2.40 KB)

fw_rule.h (1.04 KB)

HistogramCtrl.cpp (7.25 KB)

HistogramCtrl.h (1.93 KB)

HyperlinkStatic.cpp (3.44 KB)

HyperlinkStatic.h (1.74 KB)

IconListBox.cpp (4.86 KB)

IconListBox.h (1.72 KB)

Led.cpp (5.09 KB)

Led.h (807.0 B)

MD5Checksum.cpp (20.3 KB)

MD5Checksum.h (16.2 KB)

MD5ChecksumDefines.h (5.20 KB)

NewWizDialog.cpp (11.8 KB)

NewWizDialog.h (2.54 KB)

NewWizPage.cpp (3.85 KB)

NewWizPage.h (2.07 KB)

PasseckDialog.cpp (3.82 KB)

PasseckDialog.h (1.33 KB)

Registry.cpp (21.5 KB)

Registry.h (2.19 KB)

SpinLock.h (1.70 KB)

Splash.cpp (3.20 KB)

Splash.h (1.13 KB)

SystemTray.cpp (12.5 KB)

SystemTray.h (3.97 KB)

ThemeHelperST.cpp (2.58 KB)

ThemeHelperST.h (3.08 KB)

Unzipper.cpp (9.36 KB)

Unzipper.h (2.95 KB)

XmlDocument.cpp (13.1 KB)

XmlDocument.h (1.78 KB)

XPStyleButtonST.cpp (4.31 KB)

XPStyleButtonST.h (1.65 KB)

FirewallDemo

res

BITMAP3.bmp (1.38 KB)

BITMAP4.bmp (1.38 KB)

bitmap5.bmp (1.38 KB)

BITMAP6.bmp (1.38 KB)

BITMAP7.bmp (1.38 KB)

bitmap8.bmp (1.38 KB)

BITMAP9.bmp (1.38 KB)

bitmap10.bmp (1.38 KB)

bitmap11.bmp (1.38 KB)

CONFIG.ICO (3.19 KB)

EXIT.ICO (3.19 KB)

Filter.ico (3.19 KB)

FirewallDemo.ico (14.2 KB)

FirewallDemo.rc2 (404.0 B)

FW_LOGO.ico (14.2 KB)

Green_logo.ico (2.19 KB)

HELP.ICO (3.19 KB)

Hide.ico (3.19 KB)

icon1.ico (1.05 KB)

log.ico (3.19 KB)

LOGO.ICO (2.19 KB)

main.ico (2.19 KB)

netstate.ico (3.55 KB)

network.ico (3.69 KB)

NullApp.ico (1.05 KB)

Orange_logo.ico (2.19 KB)

Red_logo.ico (2.19 KB)

REG.ICO (3.19 KB)

Snap1.bmp (434.0 KB)

splash.bmp (24.1 KB)

teen.ico (4.05 KB)

UPDATE.ICO (3.19 KB)

updateitem.ico (894.0 B)

AddRule.cpp (6.88 KB)

AddRule.h (2.76 KB)

Common.cpp (3.84 KB)

Common.h (2.26 KB)

condef.h (3.67 KB)

Config.cpp (3.41 KB)

Config.h (1.69 KB)

DDKLBLInc.h (1.90 KB)

drvdef.h (4.05 KB)

ethertype.h (2.68 KB)

FirewallDemo.cpp (2.61 KB)

FirewallDemo.dsp (8.55 KB)

FirewallDemo.dsw (547.0 B)

FirewallDemo.h (1.42 KB)

FirewallDemo.rc (13.5 KB)

FirewallDemoDlg.cpp (21.5 KB)

FirewallDemoDlg.h (3.42 KB)

fw_log.h (610.0 B)

IN_SYSTM.H (2.43 KB)

IP.H (6.12 KB)

IP_ICMP.H (6.91 KB)

Log.cpp (1.48 KB)

Log.h (1.24 KB)

Monitor.cpp (4.74 KB)

Monitor.h (1.65 KB)

NetState.cpp (1.85 KB)

NetState.h (1.38 KB)

ReadMe.txt (3.60 KB)

resource.h (4.52 KB)

Splash.cpp (3.18 KB)

Splash.h (1.13 KB)

StdAfx.cpp (214.0 B)

StdAfx.h (1.19 KB)

TCP.H (4.20 KB)

UDP.H (2.22 KB)

XInstall.cpp (3.09 KB)

XInstall.h (2.56 KB)

passthru

Bin

FirewallDemo.exe (824.1 KB)

netsf.inf (6.02 KB)

netsf_m.inf (2.28 KB)

passthru.dll (51.5 KB)

passthru.sys (33.1 KB)

common

common.h (1.37 KB)

xp_passthru

cons_def.h (863.0 B)

DDKLBLInc.h (1.92 KB)

ethertype.h (2.68 KB)

fw_interface.h (2.10 KB)

fw_log.h (611.0 B)

fw_rule.h (1.07 KB)

IGMP.H (4.15 KB)

IN.H (4.92 KB)

IN_SYSTM.H (2.43 KB)

IP.H (6.11 KB)

IP_ICMP.H (6.91 KB)

IP_MROUT.H (4.50 KB)

makefile (244.0 B)

miniport.c (34.1 KB)

netsf.inf (6.02 KB)

netsf_m.inf (2.28 KB)

passthru.c (19.6 KB)

passthru.dll (51.5 KB)

passthru.h (9.68 KB)

passthru.htm (16.8 KB)

passthru.map (14.7 KB)

passthru.rc (2.68 KB)

PCAENET.H (3.12 KB)

precomp.h (123.0 B)

protocol.c (45.7 KB)

resource.h (455.0 B)

Rule.c (34.8 KB)

Rule.h (1.59 KB)

sources (840.0 B)

TCP.H (4.20 KB)

UDP.H (2.22 KB)

xp_passthru.dsp (5.21 KB)

xp_passthru.dsw (545.0 B)

tdi

tdifw-1.4.4

addon

ndis_hk

bin

ndis_hk.sys (10.2 KB)

src

ndis_hk

adapters.c (2.90 KB)

adapters.h (1.09 KB)

doxygen.cfg (41.3 KB)

filter.c (7.20 KB)

filter.h (1.50 KB)

hooked_fn.c (45.8 KB)

makefile (267.0 B)

ndis_hk.c (8.91 KB)

ndis_hk.h (4.21 KB)

pe.h (4.27 KB)

sources (319.0 B)

av.c (3.98 KB)

av.h (1.99 KB)

dirs (23.0 B)

except.h (733.0 B)

memtrack.c (3.45 KB)

memtrack.h (1.67 KB)

ndis_hk_ioctl.h (3.60 KB)

net.h (1.92 KB)

nt.h (838.0 B)

sock.c (1.32 KB)

sock.h (2.42 KB)

install_2k.bat (96.0 B)

install_2k.reg (982.0 B)

install_nt4.bat (97.0 B)

install_nt4.reg (339.0 B)

bin

install.exe (5.00 KB)

tdifw.exe (19.5 KB)

tdifw_drv.sys (27.4 KB)

src

drv

tdidrvpr

tdidrvpr.dsp (6.23 KB)

tdidrvpr.dsw (541.0 B)

conn_state.c (19.8 KB)

conn_state.h (1.27 KB)

disp_conn.c (14.0 KB)

disp_dg.c (8.22 KB)

disp_ev.c (4.49 KB)

disp_obj.c (12.7 KB)

disp_sr.c (3.27 KB)

dispatch.c (1.40 KB)

dispatch.h (1.06 KB)

ev_conn.c (12.0 KB)

ev_dg.c (4.22 KB)

ev_recv.c (6.56 KB)

events.c (1.21 KB)

events.h (1.82 KB)

filter.c (14.8 KB)

filter.h (1.11 KB)

ipc.c (4.42 KB)

MAKEFILE (267.0 B)

memtrack.c (3.83 KB)

memtrack.h (1.09 KB)

ndis_hk_ioctl.h (3.96 KB)

obj_tbl.c (13.9 KB)

obj_tbl.h (2.86 KB)

packet.c (22.2 KB)

packet.h (242.0 B)

pid_pname.c (5.71 KB)

pid_pname.h (491.0 B)

sids.c (4.80 KB)

sids.h (921.0 B)

sock.c (1.02 KB)

sock.h (2.38 KB)

SOURCES (648.0 B)

tdi_fw.c (24.6 KB)

tdi_fw.h (3.63 KB)

install

MAKEFILE (267.0 B)

SOURCES (220.0 B)

tdi_install.c (7.18 KB)

svc

flt_rule.c (7.21 KB)

flt_rule.h (193.0 B)

iphlpapi.h (1.63 KB)

iphlpapi.lib (2.58 KB)

main.c (11.4 KB)

MAKEFILE (267.0 B)

msg.h (945.0 B)

msg.mc (81.0 B)

msg.rc (37.0 B)

SOURCES (333.0 B)

tdi_fw_svc.rc (19.0 B)

tdifw_svc.c (40.4 KB)

tdifw_svc.h (788.0 B)

thread.h (466.0 B)

dirs (47.0 B)

ipc.h (4.99 KB)

net.h (1.80 KB)

changelog.txt (4.58 KB)

changelog_old.txt (1.73 KB)

debug.txt (1.76 KB)

install.bat (507.0 B)

install_nt4.bat (617.0 B)

install_nt4.reg (366.0 B)

log_format.txt (1.79 KB)

packet_engine.txt (572.0 B)

readme.txt (1.66 KB)

tdifw.conf (4.70 KB)

tips.txt (718.0 B)

uninstall.bat (471.0 B)

uninstall_nt4.bat (481.0 B)

uninstall_nt4.reg (79.0 B)

WFP

inspect

sys

inspect.c (36.1 KB)

inspect.h (3.89 KB)

inspect.inf (1.46 KB)

makefile (734.0 B)

sources (399.0 B)

TL_drv.c (22.0 KB)

utils.c (12.3 KB)

utils.h (9.71 KB)

dirs (17.0 B)

msnmntr

exe

makefile (734.0 B)

monitor.cpp (17.9 KB)

mtrace.cmd (8.00 KB)

sources (799.0 B)

inc

ioctl.h (880.0 B)

mntrguid.h (779.0 B)

sys

ctl.c (6.27 KB)

ctl.h (252.0 B)

init.c (4.43 KB)

makefile (734.0 B)

msnmntr.c (22.2 KB)

msnmntr.h (1,000.0 B)

msnmntr.inf (1.45 KB)

notify.c (15.0 KB)

notify.h (555.0 B)

sources (442.0 B)

dirs (29.0 B)

麦洛克菲内核开发第九课.ppt (1.09 MB)

tdi ndis wfp.txt

13fivel-A盾源码分析

3600safeOpenSource

3600safe

Release

res

3600safe - 副本.ico (97.3 KB)

3600safe.bmp (557.9 KB)

3600safe.ico (97.3 KB)

Dispatch.ico (97.3 KB)

GDriver.ico (97.3 KB)

Hips.ico (97.3 KB)

KernelHook.ico (97.3 KB)

KernelModule.ico (97.3 KB)

KernelThread.ico (97.3 KB)

My3600safe.rc2 (676.0 B)

Process.ico (97.3 KB)

ring3.ico (97.3 KB)

Services.ico (97.3 KB)

Tcpview.ico (97.3 KB)

Toolbar.bmp (1.05 KB)

Toolbar256.bmp (5.68 KB)

3600safe.cpp (4.10 KB)

3600safe.h (652.0 B)

3600safe.rc (39.1 KB)

3600safe.suo (15.5 KB)

3600safe.vcxproj (9.63 KB)

3600safe.vcxproj.filters (10.1 KB)

3600safe.vcxproj.user (143.0 B)

3600safeDoc.cpp (2.53 KB)

3600safeDoc.h (869.0 B)

3600safeView.cpp (58.7 KB)

3600safeView.h (4.85 KB)

AboutDlg.cpp (513.0 B)

AboutDlg.h (359.0 B)

Atapi.cpp (6.07 KB)

Atapi.h (580.0 B)

C3600Splash.cpp (1.47 KB)

C3600Splash.h (332.0 B)

ClrListCtrl.cpp (5.22 KB)

ClrListCtrl.h (1.73 KB)

DLLModule.cpp (12.9 KB)

DLLModule.h (2.51 KB)

DpcTimer.cpp (6.44 KB)

DpcTimer.h (499.0 B)

FilterDriver.cpp (4.08 KB)

FilterDriver.h (480.0 B)

FsdHook.cpp (5.94 KB)

FsdHook.h (601.0 B)

HipsLog.cpp (8.96 KB)

HipsLog.h (1.22 KB)

Install.cpp (13.3 KB)

Install.h (871.0 B)

Kbdclass.cpp (6.27 KB)

Kbdclass.h (619.0 B)

KernelHook.cpp (6.73 KB)

KernelHook.h (617.0 B)

KernelModule.cpp (12.8 KB)

KernelModule.h (623.0 B)

KernelThread.cpp (3.07 KB)

KernelThread.h (519.0 B)

MainFrm.cpp (3.85 KB)

MainFrm.h (974.0 B)

Md5.cpp (10.4 KB)

Md5.h (603.0 B)

Mouclass.cpp (6.27 KB)

Mouclass.h (619.0 B)

Nsiproxy.cpp (6.29 KB)

Nsiproxy.h (610.0 B)

ntdll.lib (353.2 KB)

ObjectHook.cpp (3.63 KB)

ObjectHook.h (589.0 B)

Process.cpp (12.5 KB)

Process.h (1.04 KB)

ProcessHandle.cpp (7.76 KB)

ProcessHandle.h (1.84 KB)

ProcessThread.cpp (12.9 KB)

ProcessThread.h (2.29 KB)

ReadMe.txt (3.31 KB)

resource.h (14.2 KB)

Services.cpp (23.2 KB)

Services.h (1.13 KB)

ShadowSSDT.cpp (6.55 KB)

ShadowSSDT.h (870.0 B)

SSDT.cpp (8.22 KB)

SSDT.h (505.0 B)

stdafx.cpp (141.0 B)

stdafx.h (8.88 KB)

SubModule.cpp (7.00 KB)

SubModule.h (1,007.0 B)

SystemNotify.cpp (7.33 KB)

SystemNotify.h (691.0 B)

SystemThread.cpp (8.93 KB)

SystemThread.h (1.15 KB)

targetver.h (234.0 B)

Tcpip.cpp (6.06 KB)

Tcpip.h (615.0 B)

TcpView.cpp (7.80 KB)

TcpView.h (1,009.0 B)

uninstall360.cpp (6.85 KB)

uninstall360.h (270.0 B)

UnloadDllModule.h (5.42 KB)

UserImages.bmp (7.79 KB)

Windows7Home_CN.h (181.5 KB)

Windows7SP1_CN.h (190.4 KB)

Windows2003SP1_CN.h (130.7 KB)

Windows2003SP2_CN.h (137.0 KB)

WindowsXPSP2_CN.h (129.5 KB)

WindowsXPSP3_CN.h (140.6 KB)

bin

A-ProtectSDK

example

3600safeConsole.suo (14.0 KB)

A-ProtectConsole.cpp (3.20 KB)

A-ProtectConsole.h (122.0 B)

A-ProtectConsole.sln (898.0 B)

A-ProtectConsole.suo (8.50 KB)

A-ProtectConsole.vcxproj (4.00 KB)

Install.cpp (5.92 KB)

Install.h (905.0 B)

KernelModule.h (1.64 MB)

ntdll.lib (353.2 KB)

include

A-ProtectSDK.h (25.6 KB)

readme.txt (1.05 KB)

A-Protect.txt (15.2 KB)

Driver

AntiInlineHook.c (5.16 KB)

AntiInlineHook.h (660.0 B)

Atapi.c (12.2 KB)

Atapi.h (1.88 KB)

buildchk_win7_x86.log (5.89 KB)

buildchk_win7_x86.wrn (174.0 B)

Common.h (8.11 KB)

Control.c (62.1 KB)

Control.h (13.7 KB)

DeleteFile.c (8.17 KB)

DeleteFile.h (353.0 B)

DpcTimer.c (8.98 KB)

DpcTimer.h (6.43 KB)

DriverHips.c (3.62 KB)

DriverHips.h (871.0 B)

drvcommon.h (1.34 KB)

drvversion.h (2.09 KB)

drvversion.rc (1.99 KB)

dump.c (1.13 KB)

dump.h (153.0 B)

file.c (1.59 KB)

file.h (730.0 B)

FileSystem.c (16.4 KB)

FileSystem.h (8.57 KB)

Fixrelocation.c (14.3 KB)

Fixrelocation.h (830.0 B)

Function.c (44.2 KB)

Function.h (936.0 B)

InitWindowsVersion.c (1.80 KB)

InitWindowsVersion.h (469.0 B)

InlineHook.c (23.4 KB)

InlineHook.h (1,011.0 B)

kbdclass.c (15.7 KB)

kbdclass.h (2.01 KB)

KernelFilterDriver.c (11.8 KB)

KernelFilterDriver.h (1.53 KB)

KernelHookCheck.c (27.0 KB)

KernelHookCheck.h (1.47 KB)

KernelReload.c (24.0 KB)

KernelReload.h (830.0 B)

KernelThread.c (4.55 KB)

KernelThread.h (1.24 KB)

KillProcess.c (6.88 KB)

KillProcess.h (838.0 B)

ldasm.c (24.8 KB)

ldasm.h (306.0 B)

libdasm.c (26.9 KB)

libdasm.h (14.4 KB)

makefile (260.0 B)

Mouclass.c (15.8 KB)

Mouclass.h (2.01 KB)

NetworkDefense.c (12.7 KB)

NetworkDefense.h (1.64 KB)

nsiproxy.c (23.0 KB)

nsiproxy.h (2.51 KB)

Ntfs.c (16.7 KB)

Ntfs.h (2.13 KB)

ntifs.h (787.3 KB)

ntos.c (23.5 KB)

ntos.h (17.3 KB)

ObjectHookCheck.c (23.8 KB)

ObjectHookCheck.h (5.05 KB)

Port.c (23.9 KB)

Port.h (4.81 KB)

Process.c (6.83 KB)

Process.h (1.98 KB)

ProcessModule.c (17.6 KB)

ProcessModule.h (3.66 KB)

Protect.c (17.3 KB)

Protect.h (4.00 KB)

ReLoadSSDTTableHook.c (2.15 KB)

ReLoadSSDTTableHook.h (273.0 B)

SafeSystem.c (3.23 KB)

SafeSystem.h (2.65 KB)

SafeSystem.sln (886.0 B)

SafeSystem.suo (96.0 KB)

SafeSystem.vcxproj (7.06 KB)

SafeSystem.vcxproj.filters (12.3 KB)

SafeSystem.vcxproj.user (143.0 B)

SDTShadowRestore.h (78.1 KB)

Services.c (15.2 KB)

Services.h (1.44 KB)

ShadowSSDT.c (11.4 KB)

ShadowSSDT.h (1.49 KB)

sources (1.14 KB)

SSDT.c (18.0 KB)

SSDT.h (1.49 KB)

SysModule.c (5.61 KB)

SysModule.h (1.04 KB)

SystemNotify.c (34.0 KB)

SystemNotify.h (4.46 KB)

SystemThread.c (8.57 KB)

SystemThread.h (2.06 KB)

tables.h (208.7 KB)

Tcpip.c (21.9 KB)

Tcpip.h (2.36 KB)

win32k.c (9.34 KB)

win32k.h (1.34 KB)

3600safe.sln (1.32 KB)

3600safe.suo (10.0 KB)

readme.txt (5.76 KB)

麦洛克菲界内核开发技巧.ppt (245.0 KB)

13fivel-A盾源码分析_课堂笔记

3600safeOpenSource

3600safe

Release

res

3600safe - 副本.ico (97.3 KB)

3600safe.bmp (557.9 KB)

3600safe.ico (97.3 KB)

Dispatch.ico (97.3 KB)

GDriver.ico (97.3 KB)

Hips.ico (97.3 KB)

KernelHook.ico (97.3 KB)

KernelModule.ico (97.3 KB)

KernelThread.ico (97.3 KB)

My3600safe.rc2 (676.0 B)

Process.ico (97.3 KB)

ring3.ico (97.3 KB)

Services.ico (97.3 KB)

Tcpview.ico (97.3 KB)

Toolbar.bmp (1.05 KB)

Toolbar256.bmp (5.68 KB)

3600safe.cpp (4.10 KB)

3600safe.h (652.0 B)

3600safe.rc (39.1 KB)

3600safe.suo (15.5 KB)

3600safe.vcxproj (9.72 KB)

3600safe.vcxproj.filters (10.1 KB)

3600safe.vcxproj.user (143.0 B)

3600safeDoc.cpp (2.53 KB)

3600safeDoc.h (869.0 B)

3600safeView.cpp (58.7 KB)

3600safeView.h (4.85 KB)

AboutDlg.cpp (513.0 B)

AboutDlg.h (359.0 B)

Atapi.cpp (6.07 KB)

Atapi.h (580.0 B)

C3600Splash.cpp (1.47 KB)

C3600Splash.h (332.0 B)

ClrListCtrl.cpp (5.22 KB)

ClrListCtrl.h (1.73 KB)

DLLModule.cpp (12.9 KB)

DLLModule.h (2.51 KB)

DpcTimer.cpp (6.44 KB)

DpcTimer.h (499.0 B)

FilterDriver.cpp (4.08 KB)

FilterDriver.h (480.0 B)

FsdHook.cpp (5.94 KB)

FsdHook.h (601.0 B)

HipsLog.cpp (8.96 KB)

HipsLog.h (1.22 KB)

Install.cpp (13.3 KB)

Install.h (871.0 B)

Kbdclass.cpp (6.27 KB)

Kbdclass.h (619.0 B)

KernelHook.cpp (6.73 KB)

KernelHook.h (617.0 B)

KernelModule.cpp (12.8 KB)

KernelModule.h (623.0 B)

KernelThread.cpp (3.07 KB)

KernelThread.h (519.0 B)

MainFrm.cpp (3.85 KB)

MainFrm.h (974.0 B)

Md5.cpp (10.4 KB)

Md5.h (603.0 B)

Mouclass.cpp (6.27 KB)

Mouclass.h (619.0 B)

Nsiproxy.cpp (6.29 KB)

Nsiproxy.h (610.0 B)

ntdll.lib (353.2 KB)

ObjectHook.cpp (3.63 KB)

ObjectHook.h (589.0 B)

Process.cpp (12.5 KB)

Process.h (1.04 KB)

ProcessHandle.cpp (7.76 KB)

ProcessHandle.h (1.84 KB)

ProcessThread.cpp (12.9 KB)

ProcessThread.h (2.29 KB)

ReadMe.txt (3.31 KB)

resource.h (14.2 KB)

Services.cpp (23.2 KB)

Services.h (1.13 KB)

ShadowSSDT.cpp (6.55 KB)

ShadowSSDT.h (870.0 B)

SSDT.cpp (8.22 KB)

SSDT.h (505.0 B)

stdafx.cpp (141.0 B)

stdafx.h (8.88 KB)

SubModule.cpp (7.00 KB)

SubModule.h (1,007.0 B)

SystemNotify.cpp (7.33 KB)

SystemNotify.h (691.0 B)

SystemThread.cpp (8.93 KB)

SystemThread.h (1.15 KB)

targetver.h (234.0 B)

Tcpip.cpp (6.06 KB)

Tcpip.h (615.0 B)

TcpView.cpp (7.80 KB)

TcpView.h (1,009.0 B)

uninstall360.cpp (6.85 KB)

uninstall360.h (270.0 B)

UnloadDllModule.h (5.42 KB)

UserImages.bmp (7.79 KB)

Windows7Home_CN.h (181.5 KB)

Windows7SP1_CN.h (190.4 KB)

Windows2003SP1_CN.h (130.7 KB)

Windows2003SP2_CN.h (137.0 KB)

WindowsXPSP2_CN.h (129.5 KB)

WindowsXPSP3_CN.h (140.6 KB)

bin

A-ProtectSDK

example

3600safeConsole.suo (14.0 KB)

A-ProtectConsole.cpp (3.20 KB)

A-ProtectConsole.h (122.0 B)

A-ProtectConsole.sln (898.0 B)

A-ProtectConsole.suo (8.50 KB)

A-ProtectConsole.vcxproj (4.00 KB)

Install.cpp (5.92 KB)

Install.h (905.0 B)

KernelModule.h (1.64 MB)

ntdll.lib (353.2 KB)

include

A-ProtectSDK.h (25.6 KB)

readme.txt (1.05 KB)

A-Protect.txt (15.2 KB)

Driver

AntiInlineHook.c (5.16 KB)

AntiInlineHook.h (660.0 B)

Atapi.c (12.2 KB)

Atapi.h (1.88 KB)

buildchk_win7_x86.log (5.89 KB)

buildchk_win7_x86.wrn (174.0 B)

Common.h (8.11 KB)

Control.c (62.1 KB)

Control.h (13.7 KB)

DeleteFile.c (8.17 KB)

DeleteFile.h (353.0 B)

DpcTimer.c (8.98 KB)

DpcTimer.h (6.43 KB)

DriverHips.c (3.62 KB)

DriverHips.h (871.0 B)

drvcommon.h (1.34 KB)

drvversion.h (2.09 KB)

drvversion.rc (1.99 KB)

dump.c (1.13 KB)

dump.h (153.0 B)

file.c (1.59 KB)

file.h (730.0 B)

FileSystem.c (16.4 KB)

FileSystem.h (8.57 KB)

Fixrelocation.c (14.3 KB)

Fixrelocation.h (830.0 B)

Function.c (44.2 KB)

Function.h (936.0 B)

InitWindowsVersion.c (1.80 KB)

InitWindowsVersion.h (469.0 B)

InlineHook.c (23.4 KB)

InlineHook.h (1,011.0 B)

kbdclass.c (15.7 KB)

kbdclass.h (2.01 KB)

KernelFilterDriver.c (11.8 KB)

KernelFilterDriver.h (1.53 KB)

KernelHookCheck.c (27.0 KB)

KernelHookCheck.h (1.47 KB)

KernelReload.c (24.0 KB)

KernelReload.h (830.0 B)

KernelThread.c (4.55 KB)

KernelThread.h (1.24 KB)

KillProcess.c (6.88 KB)

KillProcess.h (838.0 B)

ldasm.c (24.8 KB)

ldasm.h (306.0 B)

libdasm.c (26.9 KB)

libdasm.h (14.4 KB)

makefile (260.0 B)

Mouclass.c (15.8 KB)

Mouclass.h (2.01 KB)

NetworkDefense.c (12.7 KB)

NetworkDefense.h (1.64 KB)

nsiproxy.c (23.0 KB)

nsiproxy.h (2.51 KB)

Ntfs.c (16.7 KB)

Ntfs.h (2.13 KB)

ntifs.h (787.3 KB)

ntos.c (23.6 KB)

ntos.h (17.3 KB)

ObjectHookCheck.c (23.8 KB)

ObjectHookCheck.h (5.05 KB)

Port.c (23.9 KB)

Port.h (4.81 KB)

Process.c (6.85 KB)

Process.h (1.98 KB)

ProcessModule.c (17.6 KB)

ProcessModule.h (3.66 KB)

Protect.c (17.3 KB)

Protect.h (4.00 KB)

ReLoadSSDTTableHook.c (2.15 KB)

ReLoadSSDTTableHook.h (273.0 B)

SafeSystem.c (3.46 KB)

SafeSystem.h (2.65 KB)

SafeSystem.sln (886.0 B)

SafeSystem.suo (96.0 KB)

SafeSystem.vcxproj (7.22 KB)

SafeSystem.vcxproj.filters (12.3 KB)

SafeSystem.vcxproj.user (143.0 B)

SDTShadowRestore.h (78.1 KB)

Services.c (15.2 KB)

Services.h (1.44 KB)

ShadowSSDT.c (11.4 KB)

ShadowSSDT.h (1.49 KB)

sources (1.14 KB)

SSDT.c (18.0 KB)

SSDT.h (1.49 KB)

SysModule.c (5.61 KB)

SysModule.h (1.04 KB)

SystemNotify.c (34.0 KB)

SystemNotify.h (4.46 KB)

SystemThread.c (8.57 KB)

SystemThread.h (2.06 KB)

tables.h (208.7 KB)

Tcpip.c (21.9 KB)

Tcpip.h (2.36 KB)

win32k.c (9.34 KB)

win32k.h (1.34 KB)

ipch

3600safe-ca051cd3

3600safe-ad8c3eae.ipch (88.6 MB)

3600safe.sdf (89.1 MB)

3600safe.sln (1.32 KB)

3600safe.suo (10.0 KB)

readme.txt (5.76 KB)

麦洛克菲界内核开发技巧.ppt (240.0 KB)

1驱动安全.png (10.9 KB)

2移动安全.png (8.73 KB)

3安卓病毒分析.png (2.40 KB)

3逆向基础课程.png (2.35 KB)

4脱壳与逆向.png (2.93 KB)

5逆向及病毒分析.png (3.63 KB)

6ARK课程.png (1.87 KB)

7ShadowGhost.png (2.10 KB)

9tenl-firewall.png (2.91 KB)

13fivel-A盾源码分析.png (3.84 KB)

麦洛克菲价值9000元的培训课程.png (8.64 KB)

说明.txt (252.0 B)

下载链接

点我免费下载

资源预览