IDThjack
所属分类：钩子与API截获
开发工具：Visual C++
文件大小：44KB
下载次数：27
上传日期：2011-11-25 22:52:44
上 传 者：
th81888
说明： 隐藏IDT HOOK，可以过xuetr，PowerTool。发现windbg !idt命令也看不出，看来MS的哥们也偷懒
原理是利用了选择子。直接发码，关于IDT 的知识我就不科普了
(Hidden IDT HOOK, can lead xuetr, PowerTool. Found windbg! Idt command can not see, it seems the man is lazy MS
Is the use of a selector. Send code directly on the IDT is not science knowledge I had)
文件列表:
IDThjack\buildchk_wxp_x86.log (4113, 2011-06-09)
IDThjack\buildchk_wxp_x86.wrn (422, 2011-06-09)
IDThjack\clean.bat (565, 2011-06-02)
IDThjack\common.h (1871, 2011-06-02)
IDThjack\ddkbuild.cmd (46846, 2011-06-02)
IDThjack\IDThjack.c (11424, 2011-06-09)
IDThjack\IDThjack.dsp (2367, 2011-06-02)
IDThjack\IDThjack.dsw (537, 2011-06-02)
IDThjack\IDThjack.h (6203, 2011-06-02)
IDThjack\IDThjack.ncb (74752, 2011-11-09)
IDThjack\IDThjack.opt (53760, 2011-11-09)
IDThjack\IDThjack.plg (5476, 2011-06-09)
IDThjack\IDThjack.positions (154, 2011-06-10)
IDThjack\makefile (245, 2011-06-02)
IDThjack\mybuild.bat (72, 2011-06-03)
IDThjack\objchk_wxp_x86\i386\IDThjack.sys (5120, 2011-06-09)
IDThjack\sources (123, 2011-06-02)
IDThjack\struct.h (10244, 2011-06-02)
IDThjack\objchk_wxp_x86\i386 (0, 2011-11-09)
IDThjack\objchk_wxp_x86 (0, 2011-06-02)
IDThjack (0, 2011-11-09)
近期下载者：
相关文件：
收藏者：