文件名称:NP_Source
-
所属分类:
- 标签属性:
- 上传时间:2013-08-19
-
文件大小:125.88kb
-
已下载:0次
-
提 供 者:
-
相关连接:无下载说明:别用迅雷下载,失败请重下,重下不扣分!
介绍说明--下载内容来自于网络,使用问题请自行百度
NP启动后通过WriteProcessMemory跟CreateRemoteThread向所有进程注入代码(除了系统进程smss.exe),代码通过np自己的LoadLibrary向目标进程加载npggNT.des。npggNT.des一旦加载就马上开始干“坏事”,挂钩(HOOK)系统关键函数如OpenProcess,ReadProcessMemory,WriteProcessMemory,PostMessage等等。
挂钩方法是通过改写系统函数头,在函数开始JMP到npggNT.des中的替换函数。用户调用相应的系统函数时,会首先进入到npggNT.des模块等待NP的检查,-NP starts with CreateRemoteThread via WriteProcessMemory inject code to all processes (in addition to system process smss.exe), np own code through LoadLibrary to load the target process npggNT.des. npggNT.des Once loaded immediately start doing "bad", hooks (HOOK) system-critical functions such as OpenProcess, ReadProcessMemory, WriteProcessMemory, PostMessage and so on.
Hook method is through rewriting system function head start in the function of JMP to npggNT.des replacement function. Users call the corresponding system function, will first enter into npggNT.des module waits for NP examination,
挂钩方法是通过改写系统函数头,在函数开始JMP到npggNT.des中的替换函数。用户调用相应的系统函数时,会首先进入到npggNT.des模块等待NP的检查,-NP starts with CreateRemoteThread via WriteProcessMemory inject code to all processes (in addition to system process smss.exe), np own code through LoadLibrary to load the target process npggNT.des. npggNT.des Once loaded immediately start doing "bad", hooks (HOOK) system-critical functions such as OpenProcess, ReadProcessMemory, WriteProcessMemory, PostMessage and so on.
Hook method is through rewriting system function head start in the function of JMP to npggNT.des replacement function. Users call the corresponding system function, will first enter into npggNT.des module waits for NP examination,
(系统自动生成,下载前可以参看下载内容)
下载文件列表
NP Source/dump_wmimmc/ddkbuild.bat
NP Source/dump_wmimmc/hook.h
NP Source/dump_wmimmc/makefile
NP Source/dump_wmimmc/myFunction.h
NP Source/dump_wmimmc/myNativeAPIs.h
NP Source/dump_wmimmc/myNtoskrnlAPIs.h
NP Source/dump_wmimmc/myWin32kAPIs.h
NP Source/dump_wmimmc/Process.h
NP Source/dump_wmimmc/sources
NP Source/dump_wmimmc/wmimmc.c
NP Source/dump_wmimmc/wmimmc.dsp
NP Source/dump_wmimmc/wmimmc.dsw
NP Source/dump_wmimmc/wmimmc.h
NP Source/dump_wmimmc/原驱动文件/dump_wmmimc.sys
NP Source/dump_wmimmc/原驱动文件
NP Source/dump_wmimmc
NP Source
NP Source/dump_wmimmc/hook.h
NP Source/dump_wmimmc/makefile
NP Source/dump_wmimmc/myFunction.h
NP Source/dump_wmimmc/myNativeAPIs.h
NP Source/dump_wmimmc/myNtoskrnlAPIs.h
NP Source/dump_wmimmc/myWin32kAPIs.h
NP Source/dump_wmimmc/Process.h
NP Source/dump_wmimmc/sources
NP Source/dump_wmimmc/wmimmc.c
NP Source/dump_wmimmc/wmimmc.dsp
NP Source/dump_wmimmc/wmimmc.dsw
NP Source/dump_wmimmc/wmimmc.h
NP Source/dump_wmimmc/原驱动文件/dump_wmmimc.sys
NP Source/dump_wmimmc/原驱动文件
NP Source/dump_wmimmc
NP Source
本网站为编程资源及源代码搜集、介绍的搜索网站,版权归原作者所有! 粤ICP备11031372号
1999-2046 搜珍网 All Rights Reserved.