|
[求助]这样直接调用call可行吗?错在哪里?
远程注入 要注意堆栈平衡,不能用全局变量 |
|
求解答,这是AES加密吗?123456加密后的。
看着像BASE64。不过一般SALT用在HMAC上,算法一般用MD5 SHA等 |
|
如何取消正在运行的ping命令~~
过滤数据包,IMCP协议的CUT |
|
[求助]吐血破壳,搞了一个星期了毫无头绪,求支招
先确定什么壳 |
|
[求助]DES变异算法?
可能就是个自己实现的算法 |
|
[原创]枚举进程定时器
关键是 gptmrFirst 地址怎么获取啊 |
|
[转帖]VMProtect 1.7 Delph 5.0 Source
哇,什么软件逆的? |
|
|
|
内容已删除
借用你的头像 |
|
|
|
[求助][求助]求推导加密方式,-----提请各路高手留意
AES BF等对称块加密,要分析代码,单纯看数据不可能看出加密算法的 |
|
[求助]R3无驱动进入R0
Detailed description In Windows Server 2003 SP1, user-mode access to the \Device\PhysicalMemory object is not permitted. All forms of access (read, write) are refused when the \Device\PhysicalMemory object is accessed from a user-mode application. Access to the \Device\PhysicalMemory object is refused regardless of the user context (Administrators, Users, Local System, etc.) the application is running in. Kernel-mode (driver) access to the \Device\PhysicalMemory object is unchanged for Windows Server 2003 SP1. There are no means to revert this changed behavior in Windows Server 2003 SP1. Why is this change important? What threats does it help mitigate? This change was made to help prevent security exploits that might leverage the functionality of the \Device\PhysicalMemory object from user-mode. In previous versions of Windows, access to the \Device\PhsyicalMemory object was protected by an access control list (ACL). However, the ACL may be inadvertently changed. Refusing all access to the \Device\PhysicalMemory object from user-mode ensures this scenario cannot occur. 微软的说明 http://technet.microsoft.com/en-us/library/cc787565(v=ws.10) XP SP3 , 2K3 SP1以后 改的 |
|
[求助]R3无驱动进入R0
突破的方法也有,很复杂,老外有一篇文章以前看过,找找 |
|
[求助]R3无驱动进入R0
进入RING0 关键是通过 \Device\PhysicalMemory 映射内核空间内存,然后跳转,在SP3以前在RING3下是可以通过 \Device\PhysicalMemory 对象读写物理内存,SP3后只能读,所以权限不够。 |
|
[求助]一个VMP的DLL脱壳修复后为什么还不能运行
嗯,本来脱壳的目的是研究其内部算法,带壳进去看了,关键代码VM了,脱了也没用 |
操作理由
RANk
{{ user_info.golds == '' ? 0 : user_info.golds }}
雪币
{{ experience }}
课程经验
{{ score }}
学习收益
{{study_duration_fmt}}
学习时长
基本信息
荣誉称号:
{{ honorary_title }}
能力排名:
No.{{ rank_num }}
等 级:
LV{{ rank_lv-100 }}
活跃值:
在线值:
浏览人数:{{ visits }}
最近活跃:{{ last_active_time }}
注册时间:{{ user_info.create_date_jsonfmt }}
勋章
兑换勋章
证书
证书查询 >
能力值