搜索资源列表
duxieneicun
- 驱动写入内存,驱动读取内存,注入驱动! 注入驱动!-Drive is written to memory, drive read out of the memory, is injected into the drive!
PCI-test_0410
- 遍历PC的PCI设备。读取配置空间。分析基地址寄存器。得到设备的IO空间和内存空间。-Find PCI device in PC.Get the PCI configuration space.
memory
- 读取内存中的数据并显示出来,含有清屏,按esc退出等-Read the data in memory and display, contain clear screen, press the esc exit, etc
SDT_UnHook_Code
- 通过读取ntoskrnl.exe文件的导出函数API相对虚拟地址,找到ntoskrnl.exe在内存中的基地址,计算各个API真正的起始地址,比较SSDT表中对应的API地址,不同则去掉SSDT钩子的驱动代码-First,the driver code acquires the RVA of APIs the export table of ntoskrnl.exe.Second,program acquires the base address of ntoskrnl.exe loaded