能力值:
( LV12,RANK:420 )
|
-
-
2 楼
ZwCreateDirectoryObject
|
能力值:
( LV2,RANK:10 )
|
-
-
3 楼
我的代码:
UNICODE_STRING OsalObjectDir = RTL_CONSTANT_STRING(L"\\BaseNamedObjects\\osal_object_root");
NTSTATUS Status = STATUS_SUCCESS;
PWSTR Buffer;
OBJECT_ATTRIBUTES oa;
HANDLE osalObjectDirHandle;
InitializeObjectAttributes(
&oa,
&OsalObjectDir,
OBJ_KERNEL_HANDLE | OBJ_CASE_INSENSITIVE,
NULL,
NULL
);
Status = ZwCreateDirectoryObject(
&osalObjectDirHandle,
DIRECTORY_ALL_ACCESS,
&oa);
if (!NT_SUCCESS(Status))
{
Status = ZwOpenDirectoryObject(
&osalObjectDirHandle,
DIRECTORY_ALL_ACCESS,
&oa
);
if (!NT_SUCCESS(Status)) {
KdPrint(("%#.8X\n", Status));
return Status;
}
}
ZwClose(osalObjectDirHandle);
=========================================
执行也是通过的,但是用winobj看不到我创建的这个目录啊
|
能力值:
( LV12,RANK:420 )
|
-
-
4 楼
OBJ_PERMANENT
|
能力值:
( LV12,RANK:420 )
|
-
-
5 楼
如果在RING3程序上使用,还需要Enable SeCreatePermanentPrivilege
不过这个权限默认admin TOKEN没有,需要duplicate token,或者注入SYSTEM帐户的进程
|
能力值:
( LV2,RANK:10 )
|
-
-
6 楼
thank u so much
现在可以看到了,呵呵呵
|
|
|