|
|
|---|---|
|
|
|
|
|
|
|
|
原来大家早这么干了
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
我勒个去，居然还没睡，，，牛啊牛。。。
想要让新kernel在旧kernel中跑起来，要有很多事情做……难啊，麻烦啊，天啊 不过要是做出来了……那就真的是打不死的小强了
|
|
|
膜拜 V 插 K 童鞋
|
|
|
|
|
|
|
|
|
顶上去
|
|
|
发个广告……建了个小群，欢迎没事来扯淡：50530582
|
|
|
|
|
|
|
|
|
|
|
|
虽然我的算不上什么技术贴，不过终于遇上一个有相同看法的同志了
|
|
|
|
|
|
|
|
|
这又是什么神奇的技术
|
|
|
 1>c:\kernelloader_sys\drventry.obj : error LNK2019: unresolved external symbol _VerifyCallIndex@4 referenced in function _VerifyCall@12 1>drventry.obj : error LNK2019: unresolved external symbol _VerifyCaller@4 referenced in function _VerifyCall@12 1>c:\kernelloader_sys\drventry.obj : error LNK2019: unresolved external symbol _VerifyCaller@4 referenced in function _VerifyCall@12 1>drventry.obj : error LNK2019: unresolved external symbol _PageProtectOn@0 referenced in function _HookKiFastCallEntry@4 1>c:\kernelloader_sys\drventry.obj : error LNK2019: unresolved external symbol _PageProtectOn@0 referenced in function _HookKiFastCallEntry@4 1>drventry.obj : error LNK2019: unresolved external symbol _PageProtectOff@0 referenced in function _HookKiFastCallEntry@4 1>c:\kernelloader_sys\drventry.obj : error LNK2019: unresolved external symbol _PageProtectOff@0 referenced in function _HookKiFastCallEntry@4 1>drventry.obj : error LNK2019: unresolved external symbol _GetSystemRoutineAddress@4 referenced in function _GetHookStartAddress@0 1>c:\kernelloader_sys\drventry.obj : error LNK2019: unresolved external symbol _GetSystemRoutineAddress@4 referenced in function _GetHookStartAddress@0 1>drventry.obj : error LNK2019: unresolved external symbol _DeleteProcVerify@4 referenced in function _ProcessMonitor@12 1>c:\kernelloader_sys\drventry.obj : error LNK2019: unresolved external symbol _DeleteProcVerify@4 referenced in function _ProcessMonitor@12 1>drventry.obj : error LNK2019: unresolved external symbol _AddProcVerify@4 referenced in function _ProcessMonitor@12 1>c:\kernelloader_sys\drventry.obj : error LNK2019: unresolved external symbol _AddProcVerify@4 referenced in function _ProcessMonitor@12 1>drventry.obj : error LNK2019: unresolved external symbol _UnloadKernel@0 referenced in function _OnUnload@4 1>c:\kernelloader_sys\drventry.obj : error LNK2019: unresolved external symbol _UnloadKernel@0 referenced in function _OnUnload@4 1>drventry.obj : error LNK2019: unresolved external symbol _UninitVerify@0 referenced in function _OnUnload@4 1>c:\kernelloader_sys\drventry.obj : error LNK2019: unresolved external symbol _UninitVerify@0 referenced in function _OnUnload@4 1>drventry.obj : error LNK2019: unresolved external symbol _InitVerify@0 referenced in function _DriverEntry@8 1>c:\kernelloader_sys\drventry.obj : error LNK2019: unresolved external symbol _InitVerify@0 referenced in function _DriverEntry@8 1>drventry.obj : error LNK2019: unresolved external symbol _LoadKernel@4 referenced in function _DriverEntry@8 1>c:\kernelloader_sys\drventry.obj : error LNK2019: unresolved external symbol _LoadKernel@4 referenced in function _DriverEntry@8 1>c:\kernelloader_sys\objchk_wxp_x86\i386\Kernal.sys : fatal error LNK1120: 11 unresolved externals 1>c:\kernelloader_sys\objchk_wxp_x86\i386\kernal.sys : error LNK1120: 11 unresolved externals |
|
|
|
|
|
现在驱动加载成功↓
 但自己写个SSDTHook 和InlineHook 都无法绕过 用冰刃查看也是读取到老内核↓  这是为什么呢? 测试环境 Windows Sp2 WDK7600 |
|
|
|
|
|
|
