[转帖]去香港汇丰银行开户遇到的尴尬事到漫谈手机root环境检测
6

[活动]春节大礼包，《看雪论坛精华23期》发布！
新年快乐

[讨论]KCTF2020秋季赛有奖竞猜
3天

[2019中秋礼物]《看雪论坛精华15》发布！（礼物1：踩楼中奖；礼物2：论坛取消了回帖扣雪币功能）
中秋快乐

[分享] 选出一款你喜欢的看雪文化衫吧！
2

[注意]在停了3年后，《看雪论坛精华17 》计划春节发布
支持

[活动]端午节踩楼送奖品活动！（活动结束）
端午节快乐

[原创]看雪科技获永洲创投500万天使轮投资
恭喜恭喜

[推荐][抢楼也有奖]阿里聚安全“APP安全体检，赢百万大礼”
#阿里聚安全#土豪

[活动已结束]逆转VM [X-Men: Days of VM Past]
纯围观。

[求助]用Ddvp调试PP保护的疑问
之前遇到过

pp检测CR4.VMXE 位的值

解决方案：
VmxWrite(CR4_GUEST_HOST_MASK, (1 << 13));
VmxWrite(CR4_READ_SHADOW, RegGetCr4() & ~(1 << 13));

[求助]问下dbghelp.lib和dbghelp.h在哪啊
windbg的sdk里面就有

[讨论]HS5.6了哦~
HS 有一个时间检测一直没搞懂，暂停时间比较长，会退出。

[活动结束]Kx币换QQ公仔，限量30只
支持。

[求助]谁有PE 文件结构那张图
76bK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4m8W2k6r3W2&6i4K6u0W2j5$3!0E0i4K6u0r3k6r3!0U0N6h3#2W2L8Y4c8Q4x3V1k6b7c8g2)9J5k6i4u0S2M7R3`.`.

[注意]测试你的肺活量，按住键盘0，憋气，看你能有多少行，男人不做假!
000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000

[求助]关于驱动免杀
驱动校验和必须修正,不然加载会失败

[求助]64位系统下为什么还不能结束360进程？
不是一定要用hook保护进程的

[求助]向64h写入FEh会造成电脑重启？那么请问OD或别的什么调试器可以针对这一动作下断点？
搞个vt拦截

win7怎么获得特定进程所打开的文件信息
NtQuerySystemInformation, ring3也能调用 ntdll.dll 有导出
NtQuerySystemInformation  传  SystemHandleInformation