<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[errorlife的专栏]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/errorlife</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; errorlife]]></copyright><item><title><![CDATA[BASIC INTERRUPT HOOK part 2]]></title><link>https://blog.youkuaiyun.com/errorlife/article/details/1043054</link><guid>https://blog.youkuaiyun.com/errorlife/article/details/1043054</guid><author>errorlife</author><pubDate>Wed, 09 Aug 2006 19:26:00 +0800</pubDate><description><![CDATA[// ---------------------------// BASIC INTERRUPT HOOK part 2// this hooks the timer interrupt// ---------------------------#include "ntddk.h"#include #define MAKELONG(a, b) ((unsigned long) (((uns]]></description><category></category></item><item><title><![CDATA[BASIC INTERRUPT 1]]></title><link>https://blog.youkuaiyun.com/errorlife/article/details/1043052</link><guid>https://blog.youkuaiyun.com/errorlife/article/details/1043052</guid><author>errorlife</author><pubDate>Wed, 09 Aug 2006 19:23:00 +0800</pubDate><description><![CDATA[// --------------------// BASIC INTERRUPT HOOK// --------------------#include "ntddk.h"#include #define MAKELONG(a, b) ((unsigned long) (((unsigned short) (a)) | ((unsigned long) ((unsigned short)]]></description><category></category></item><item><title><![CDATA[basic_net_1]]></title><link>https://blog.youkuaiyun.com/errorlife/article/details/1043049</link><guid>https://blog.youkuaiyun.com/errorlife/article/details/1043049</guid><author>errorlife</author><pubDate>Wed, 09 Aug 2006 19:21:00 +0800</pubDate><description><![CDATA[include "ntddk.h"// important!! place this before ndis.h#define NDIS40 1#include "ndis.h"#include "stdio.h"//////////////////////////////////////////////// prototypes for all our network callbac]]></description><category></category></item><item><title><![CDATA[BASIc b]]></title><link>https://blog.youkuaiyun.com/errorlife/article/details/1043037</link><guid>https://blog.youkuaiyun.com/errorlife/article/details/1043037</guid><author>errorlife</author><pubDate>Wed, 09 Aug 2006 19:16:00 +0800</pubDate><description><![CDATA[// BASIC ROOTKIT that hides files, directories, and processes// ----------------------------------------------------------// v0.1 - Initial, Greg Hoglund (hoglund@rootkit.com)// v0.2 - DirEntry struct]]></description><category></category></item><item><title><![CDATA[BASIC 6a]]></title><link>https://blog.youkuaiyun.com/errorlife/article/details/1043034</link><guid>https://blog.youkuaiyun.com/errorlife/article/details/1043034</guid><author>errorlife</author><pubDate>Wed, 09 Aug 2006 19:14:00 +0800</pubDate><description><![CDATA[// BASIC ROOTKIT that hides files, directories, and processes// ----------------------------------------------------------// v0.1 - Initial, Greg Hoglund (hoglund@rootkit.com)// v0.2 - DirEntry struct]]></description><category></category></item><item><title><![CDATA[ BASIC 6]]></title><link>https://blog.youkuaiyun.com/errorlife/article/details/1043025</link><guid>https://blog.youkuaiyun.com/errorlife/article/details/1043025</guid><author>errorlife</author><pubDate>Wed, 09 Aug 2006 19:11:00 +0800</pubDate><description><![CDATA[// BASIC ROOTKIT that hides files, directories, and processes// ----------------------------------------------------------// v0.1 - Initial, Greg Hoglund (hoglund@rootkit.com)// v0.2 - DirEntry struct]]></description><category></category></item><item><title><![CDATA[BASIC 5]]></title><link>https://blog.youkuaiyun.com/errorlife/article/details/1043017</link><guid>https://blog.youkuaiyun.com/errorlife/article/details/1043017</guid><author>errorlife</author><pubDate>Wed, 09 Aug 2006 19:09:00 +0800</pubDate><description><![CDATA[// BASIC ROOTKIT that hides files, directories, and processes#include "ntddk.h"#include "stdarg.h"#include "stdio.h"#include "ntiologc.h"#define DWORD unsigned long#define WORD unsigned short#defi]]></description><category></category></item><item><title><![CDATA[BASIC 4]]></title><link>https://blog.youkuaiyun.com/errorlife/article/details/1042974</link><guid>https://blog.youkuaiyun.com/errorlife/article/details/1042974</guid><author>errorlife</author><pubDate>Wed, 09 Aug 2006 18:55:00 +0800</pubDate><description><![CDATA[// BASIC DEVICE DRIVER#include "ntddk.h"/* __________________________________________________________________ . This function just completes all IRPs that come its way. . We are ignoring userland]]></description><category></category></item><item><title><![CDATA[basic 3]]></title><link>https://blog.youkuaiyun.com/errorlife/article/details/1042959</link><guid>https://blog.youkuaiyun.com/errorlife/article/details/1042959</guid><author>errorlife</author><pubDate>Wed, 09 Aug 2006 18:51:00 +0800</pubDate><description><![CDATA[#include "ntddk.h"/* __________________________________________________________________ . This function just completes all IRPs that come its way. . We are ignoring userland completely - so this sh]]></description><category></category></item><item><title><![CDATA[BASIC 1]]></title><link>https://blog.youkuaiyun.com/errorlife/article/details/1042950</link><guid>https://blog.youkuaiyun.com/errorlife/article/details/1042950</guid><author>errorlife</author><pubDate>Wed, 09 Aug 2006 18:47:00 +0800</pubDate><description><![CDATA[// BASIC DEVICE DRIVER#include "ntddk.h"VOID OnUnload( IN PDRIVER_OBJECT DriverObject ){ DbgPrint("OnUnload called/n");}NTSTATUS DriverEntry( IN PDRIVER_OBJECT theDriverObject, IN PUNICODE_STRIN]]></description><category></category></item><item><title><![CDATA[BASIC DEVICE DRIVER]]></title><link>https://blog.youkuaiyun.com/errorlife/article/details/1042933</link><guid>https://blog.youkuaiyun.com/errorlife/article/details/1042933</guid><author>errorlife</author><pubDate>Wed, 09 Aug 2006 18:44:00 +0800</pubDate><description><![CDATA[// BASIC DEVICE DRIVER#include "ntddk.h"#include "peheader.h"// Length of process name (rounded up to next DWORD)#define PROCNAMELEN     20// Maximum length of NT process name#define NT_PROCNAMELE]]></description><category></category></item><item><title><![CDATA[basic_ndis_1]]></title><link>https://blog.youkuaiyun.com/errorlife/article/details/1042911</link><guid>https://blog.youkuaiyun.com/errorlife/article/details/1042911</guid><author>errorlife</author><pubDate>Wed, 09 Aug 2006 18:37:00 +0800</pubDate><description><![CDATA[#include "ntddk.h"// important!! place this before ndis.h#define NDIS40 1#include "ndis.h"#include "stdio.h"//////////////////////////////////////////////// prototypes for all our network callba]]></description><category></category></item><item><title><![CDATA[basic driver to send/recv raw packets on the network]]></title><link>https://blog.youkuaiyun.com/errorlife/article/details/1042907</link><guid>https://blog.youkuaiyun.com/errorlife/article/details/1042907</guid><author>errorlife</author><pubDate>Wed, 09 Aug 2006 18:36:00 +0800</pubDate><description><![CDATA[//////////////////////////////////////////////////////////////////////////////////////// BHWIN_NET2, hoglund Jan 2004// basic driver to send/recv raw packets on the network// /////////////////////////]]></description><category></category></item><item><title><![CDATA[BASIC TDI DEVICE DRIVER]]></title><link>https://blog.youkuaiyun.com/errorlife/article/details/1042903</link><guid>https://blog.youkuaiyun.com/errorlife/article/details/1042903</guid><author>errorlife</author><pubDate>Wed, 09 Aug 2006 18:35:00 +0800</pubDate><description><![CDATA[/////////////////////////////////////////////////////////////////////////// BASIC TDI DEVICE DRIVER// // (c)2004 Rootkit.com//// June 25, 2004 - Initial cut, Greg Hoglund// // Some components based on]]></description><category></category></item><item><title><![CDATA[ BASIC TDI DEVICE DRIVER]]></title><link>https://blog.youkuaiyun.com/errorlife/article/details/1042890</link><guid>https://blog.youkuaiyun.com/errorlife/article/details/1042890</guid><author>errorlife</author><pubDate>Wed, 09 Aug 2006 18:32:00 +0800</pubDate><description><![CDATA[////////////////////////////////////////////////////////////////////////// BASIC TDI DEVICE DRIVER, version 2// // (c)2004 Rootkit.com//// June 25, 2004 - Initial cut, Greg Hoglund// June 26, 2004 - A]]></description><category></category></item><item><title><![CDATA[BASIC ROOTKIT that hides files, directories, and processes]]></title><link>https://blog.youkuaiyun.com/errorlife/article/details/1042876</link><guid>https://blog.youkuaiyun.com/errorlife/article/details/1042876</guid><author>errorlife</author><pubDate>Wed, 09 Aug 2006 18:26:00 +0800</pubDate><description><![CDATA[ // BASIC ROOTKIT that hides files, directories, and processes// ----------------------------------------------------------// v0.1 - Initial, Greg Hoglund (hoglund@rootkit.com)// v0.2 - DirEntry struc]]></description><category></category></item><item><title><![CDATA[ BASIC DEVICE DRIVER]]></title><link>https://blog.youkuaiyun.com/errorlife/article/details/1042870</link><guid>https://blog.youkuaiyun.com/errorlife/article/details/1042870</guid><author>errorlife</author><pubDate>Wed, 09 Aug 2006 18:23:00 +0800</pubDate><description><![CDATA[// BASIC DEVICE DRIVER#include "ntddk.h"// Length of process name (rounded up to next DWORD)#define PROCNAMELEN     20// Maximum length of NT process name#define NT_PROCNAMELEN  16ULONG gProcess]]></description><category></category></item><item><title><![CDATA[隐藏进程]]></title><link>https://blog.youkuaiyun.com/errorlife/article/details/1042857</link><guid>https://blog.youkuaiyun.com/errorlife/article/details/1042857</guid><author>errorlife</author><pubDate>Wed, 09 Aug 2006 18:18:00 +0800</pubDate><description><![CDATA[/ BASIC ROOTKIT that hides processes #include "ntddk.h" #define DWORD unsigned long #define WORD unsigned short #define BOOL unsigned long #pragma pack(1) typedef struct ServiceDescriptorEntry { unsig]]></description><category></category></item><item><title><![CDATA[RootKit的隐藏文件]]></title><link>https://blog.youkuaiyun.com/errorlife/article/details/1042782</link><guid>https://blog.youkuaiyun.com/errorlife/article/details/1042782</guid><author>errorlife</author><pubDate>Wed, 09 Aug 2006 17:59:00 +0800</pubDate><description><![CDATA[#include "ntddk.h"#define DWORD unsigned long#define WORD unsigned short#define BOOL unsigned long#pragma pack(1)typedef struct ServiceDescriptorEntry { unsigned int *ServiceTableBase; unsigned in]]></description><category></category></item></channel></rss>