下载
详细说明：尔罗斯著名黑客写的rootkit，里面有很多rootkit技术可以学习-Jilin written by famous hacker rootkit, there are many rootkit technology learning
[配置黑客工具.zip] - 教你怎样配置黑客工具的一个视频教程
[The.Assembly.Programming.Master.Book.rar] - The Assembly Programming Master Book--一本介绍Win32下的汇编编程的好书，书中涉及Win32的方方面面，从内存管理、文件操作到DLL编程、网络编程以及调试、代码分析、内核驱动程序开发。是Win32下学习汇编语言开发不可多得的好书，CHM格式，英文版。
[AFXrootkit2005.zip] - 最新的俄罗斯内核后门，AFXrootkit2005，内含详细说明
[hxdef100_src.zip] - windows rootkit 驱动级的后门! 绝对推荐!
[nbtstat-vc20050331.rar] - 一个局域网的IP地址扫描器,可扫描到局域网的所有机器的名称,IP地址及MAC地址
[hideregrootkit.rar] - 驱动类 rootkit hook注册表读取
[1.zip.rar] - 操作系统实验,电梯算法,c语言编写的程序.
[HideProcesshookMDL.rar] - 通过驱动编程截获内核函数,实现隐藏进程,现今的木马一般选用这种技术
[1336ndis.rar] - ndis协议驱动编程，在网络层形成过滤层，可抓包，解析等功能
[SuperPasswordSpy.rar] - 利用钩子与API截获方法获取WEB网页及应用程序密码编辑框中的密码，值得分析研究！
[The.Assembly.Programming.Master.Book.rar] - The Assembly Programming Master Book--一本介绍Win32下的汇编编程的好书，书中涉及Win32的方方面面，从内存管理、文件操作到DLL编程、网络编程以及调试、代码分析、内核驱动程序开发。是Win32下学习汇编语言开发不可多得的好书，CHM格式，英文版。
[AFXrootkit2005.zip] - 最新的俄罗斯内核后门，AFXrootkit2005，内含详细说明
[hxdef100_src.zip] - windows rootkit 驱动级的后门! 绝对推荐!
[nbtstat-vc20050331.rar] - 一个局域网的IP地址扫描器,可扫描到局域网的所有机器的名称,IP地址及MAC地址
[hideregrootkit.rar] - 驱动类 rootkit hook注册表读取
[1.zip.rar] - 操作系统实验,电梯算法,c语言编写的程序.
[HideProcesshookMDL.rar] - 通过驱动编程截获内核函数,实现隐藏进程,现今的木马一般选用这种技术
[1336ndis.rar] - ndis协议驱动编程，在网络层形成过滤层，可抓包，解析等功能
[SuperPasswordSpy.rar] - 利用钩子与API截获方法获取WEB网页及应用程序密码编辑框中的密码，值得分析研究！
相关函数/类:
GetObject InterlockedExchange InterlockedIncrement InterlockedDecrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection CompareString IsBadWritePtr
GetObject InterlockedExchange InterlockedIncrement InterlockedDecrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection CompareString IsBadWritePtr
文件列表(日期：1999092211~2009021108)(点击判断是否您需要的文件，如果是垃圾请在下面评价投诉):
He4Hook215b6
............\CommonClasses
............\.............\Include
............\.............\.......\KNew.h
............\.............\.......\KTypes.h
............\.............\.......\NtoskrnlUndoc.h
............\.............\KBinaryTree
............\.............\...........\KBinaryTree.cpp
............\.............\...........\KBinaryTree.h
............\.............\...........\KBinaryTreeNode.cpp
............\.............\...........\KBinaryTreeNode.h
............\.............\KDLinkedList
............\.............\............\KDLinkedList.cpp
............\.............\............\KDLinkedList.h
............\.............\............\KDLinkedListItem.cpp
............\.............\............\KDLinkedListItem.h
............\.............\KInterlockedCounter
............\.............\...................\KInterlockedCounter.cpp
............\.............\...................\KInterlockedCounter.h
............\.............\KLocker
............\.............\.......\KLocker.cpp
............\.............\.......\KLocker.h
............\.............\KMemoryManager
............\.............\..............\KMemoryManager.cpp
............\.............\..............\KMemoryManager.h
............\.............\KMutexSynchroObject
............\.............\...................\KMutexSynchroObject.cpp
............\.............\...................\KMutexSynchroObject.h
............\.............\KShieldDirectory
............\.............\................\KShieldDirectory.cpp
............\.............\................\KShieldDirectory.h
............\.............\................\KShieldDirectoryTree.cpp
............\.............\................\KShieldDirectoryTree.h
............\.............\KSpinSynchroObject
............\.............\..................\KSpinSynchroObject.cpp
............\.............\..................\KSpinSynchroObject.h
............\.............\KStdLib
............\.............\.......\krnlstdlib.cpp
............\.............\.......\krnlstdlib.h
............\.............\KSynchroObject
............\.............\..............\KSynchroObject.cpp
............\.............\..............\KSynchroObject.h
............\.............\KTdiInterface
............\.............\.............\KTdiInterface.cpp
............\.............\.............\KTdiInterface.h
............\.............\.............\smpletcp.h
............\.............\KTdiStreamSocket
............\.............\................\KTdiStreamSocket.cpp
............\.............\................\KTdiStreamSocket.h
............\.............\Misc
............\.............\....\Misc.cpp
............\.............\....\Misc.h
............\.............\PeFile
............\.............\......\Pefile.cpp
............\.............\......\Pefile.h
............\.............\......\PeHeader.h
............\COPYING
............\He4HookInv
............\..........\DevStudio
............\..........\.........\bin
............\..........\.........\...\win2k
............\..........\.........\...\.....\i386
............\..........\.........\...\.....\....\Free
............\..........\.........\...\winnt
............\..........\.........\...\.....\i386
............\..........\.........\...\.....\....\Free
............\..........\.........\win2k
............\..........\.........\.....\He4HookInv.dsp
............\..........\.........\.....\He4HookInv.dsw
............\..........\.........\winnt
............\..........\.........\.....\He4HookInv.dsp
............\..........\.........\.....\He4HookInv.dsw
............\..........\do.h
............\..........\DriverObjectHook.cpp
............\..........\DriverObjectHook.h
............\..........\FileSystemHook.cpp
............\..........\FileSystemHook.h
............\..........\He4Boot
............\..........\.......\He4Boot.cpp
............\..........\.......\He4Boot.dsp
............\..........\.......\He4Boot.dsw
............\..........\.......\He4HookBootDriverHide
............\..........\.......\.....................\He4HookBootDriverHide.cpp
............\..........\.......\.....................\He4HookBootDriverHide.hpp
............\..........\.......\He4NDISBootDriver
............\..........\.......\.................\He4NDISBootDriver.cpp
............\..........\.......\.................\He4NDISBootDriver.hpp
............\..........\.......\NtBootDriverControlHide
............\..........\.......\.......................\NtBootDriverControlHide.cpp
............\..........\.......\.......................\NtBootDriverControlHide.hpp
............\..........\.......\ntdll.h
............\..........\He4Command.h
............\..........\He4HookDriverHide
............\..........\.................\He4HookDriverHide.cpp
............\..........\.................\He4HookDriverHide.hpp
............\..........\He4HookInv.cpp
............\..........\He4HookInv.h
............\..........\NtDriverControlHide
............\..........\...................\NtDriverControlHide.cpp
............\..........\...................\NtDriverControlHide.hpp
He4Hook215b6
............\CommonClasses
............\.............\Include
............\.............\.......\KNew.h
............\.............\.......\KTypes.h
............\.............\.......\NtoskrnlUndoc.h
............\.............\KBinaryTree
............\.............\...........\KBinaryTree.cpp
............\.............\...........\KBinaryTree.h
............\.............\...........\KBinaryTreeNode.cpp
............\.............\...........\KBinaryTreeNode.h
............\.............\KDLinkedList
............\.............\............\KDLinkedList.cpp
............\.............\............\KDLinkedList.h
............\.............\............\KDLinkedListItem.cpp
............\.............\............\KDLinkedListItem.h
............\.............\KInterlockedCounter
............\.............\...................\KInterlockedCounter.cpp
............\.............\...................\KInterlockedCounter.h
............\.............\KLocker
............\.............\.......\KLocker.cpp
............\.............\.......\KLocker.h
............\.............\KMemoryManager
............\.............\..............\KMemoryManager.cpp
............\.............\..............\KMemoryManager.h
............\.............\KMutexSynchroObject
............\.............\...................\KMutexSynchroObject.cpp
............\.............\...................\KMutexSynchroObject.h
............\.............\KShieldDirectory
............\.............\................\KShieldDirectory.cpp
............\.............\................\KShieldDirectory.h
............\.............\................\KShieldDirectoryTree.cpp
............\.............\................\KShieldDirectoryTree.h
............\.............\KSpinSynchroObject
............\.............\..................\KSpinSynchroObject.cpp
............\.............\..................\KSpinSynchroObject.h
............\.............\KStdLib
............\.............\.......\krnlstdlib.cpp
............\.............\.......\krnlstdlib.h
............\.............\KSynchroObject
............\.............\..............\KSynchroObject.cpp
............\.............\..............\KSynchroObject.h
............\.............\KTdiInterface
............\.............\.............\KTdiInterface.cpp
............\.............\.............\KTdiInterface.h
............\.............\.............\smpletcp.h
............\.............\KTdiStreamSocket
............\.............\................\KTdiStreamSocket.cpp
............\.............\................\KTdiStreamSocket.h
............\.............\Misc
............\.............\....\Misc.cpp
............\.............\....\Misc.h
............\.............\PeFile
............\.............\......\Pefile.cpp
............\.............\......\Pefile.h
............\.............\......\PeHeader.h
............\COPYING
............\He4HookInv
............\..........\DevStudio
............\..........\.........\bin
............\..........\.........\...\win2k
............\..........\.........\...\.....\i386
............\..........\.........\...\.....\....\Free
............\..........\.........\...\winnt
............\..........\.........\...\.....\i386
............\..........\.........\...\.....\....\Free
............\..........\.........\win2k
............\..........\.........\.....\He4HookInv.dsp
............\..........\.........\.....\He4HookInv.dsw
............\..........\.........\winnt
............\..........\.........\.....\He4HookInv.dsp
............\..........\.........\.....\He4HookInv.dsw
............\..........\do.h
............\..........\DriverObjectHook.cpp
............\..........\DriverObjectHook.h
............\..........\FileSystemHook.cpp
............\..........\FileSystemHook.h
............\..........\He4Boot
............\..........\.......\He4Boot.cpp
............\..........\.......\He4Boot.dsp
............\..........\.......\He4Boot.dsw
............\..........\.......\He4HookBootDriverHide
............\..........\.......\.....................\He4HookBootDriverHide.cpp
............\..........\.......\.....................\He4HookBootDriverHide.hpp
............\..........\.......\He4NDISBootDriver
............\..........\.......\.................\He4NDISBootDriver.cpp
............\..........\.......\.................\He4NDISBootDriver.hpp
............\..........\.......\NtBootDriverControlHide
............\..........\.......\.......................\NtBootDriverControlHide.cpp
............\..........\.......\.......................\NtBootDriverControlHide.hpp
............\..........\.......\ntdll.h
............\..........\He4Command.h
............\..........\He4HookDriverHide
............\..........\.................\He4HookDriverHide.cpp
............\..........\.................\He4HookDriverHide.hpp
............\..........\He4HookInv.cpp
............\..........\He4HookInv.h
............\..........\NtDriverControlHide
............\..........\...................\NtDriverControlHide.cpp
............\..........\...................\NtDriverControlHide.hpp
Driver Develop