<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/pengdawei521</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; pengdawei521]]></copyright><item><title><![CDATA[2009 更新一篇以示存在]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/3993903</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/3993903</guid><author>pengdawei521</author><pubDate>Mon, 16 Mar 2009 11:29:00 +0800</pubDate><description><![CDATA[如果不小心把windows中显示桌面文件删除了，别急，咱自己来diy一个，新建一文件，命令为"显示桌面.scf"或其他，然后输入以下内容，并保存：[Shell]Command=2IconFile=explorer.exe,3[Taskbar]Command=ToggleDesktop OK，现在就可双击"显示桌面.scf"玩了。 ps: Windows os]]></description><category></category></item><item><title><![CDATA[泄露啊泄露]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/3605875</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/3605875</guid><author>pengdawei521</author><pubDate>Thu, 25 Dec 2008 17:45:00 +0800</pubDate><description><![CDATA[用了几天的PocketMusic，感觉总体挺不错的，特别客户化界面模式]]></description><category></category></item><item><title><![CDATA[Endian的由来]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/3342237</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/3342237</guid><author>pengdawei521</author><pubDate>Thu, 20 Nov 2008 19:59:00 +0800</pubDate><description><![CDATA[Endian的由来一、引子　　在各种计算机体系结构中，对于字节、字等的存储机制有所不同，因而引发了计算机通信领域中一个很重要的问题，即通信双方交流的信息单元（比特、字节、字、双字等等）应该以什么样的顺序进行传送。如果不达成一致的规则，通信双方将无法进行正确的编/译码从而导致通信失败。目前在各种体系的计算机中通常采用的字节存储机制主要有两种：big-edian和little-endian。本文简要描]]></description><category></category></item><item><title><![CDATA[Web OS体验]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/2606746</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/2606746</guid><author>pengdawei521</author><pubDate>Wed, 02 Jul 2008 23:02:00 +0800</pubDate><description><![CDATA[不多说，自己去体验：http://www.oos.cc很好，很强大。]]></description><category></category></item><item><title><![CDATA[奋斗之2008-2009]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/2575731</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/2575731</guid><author>pengdawei521</author><pubDate>Sun, 22 Jun 2008 13:54:00 +0800</pubDate><description><![CDATA[      放弃是一种艰难的决择，记得第一次听向菲的《人生及选择》时，似乎不太理解，为什么要把别人的选择拿到台面上说道，对我有什么益处吗！然而我是继续听了下去的，一直到毕业，从中看到许多的坚强、执着与激情；也有爱；也有放弃之痛、坚定的执着。      当前我也站在选择的十字路口上，但我已选好了方向，即将放弃关系融洽的同事们、民族自豪感的工作（老总说的）、较好的工作学习环境、还有另一个10K的诱惑（]]></description><category></category></item><item><title><![CDATA[在路上]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/2575517</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/2575517</guid><author>pengdawei521</author><pubDate>Sun, 22 Jun 2008 12:43:00 +0800</pubDate><description><![CDATA[《在路上》 刘欢那一天我不得已上路为不安分的心为自尊的生存为自我的证明路上的辛酸已融进我的眼睛心灵的困境已化作我的坚定在路上 用我心灵的呼声在路上 只为伴着我的人在路上 是我生命的远行在路上 只为温暖我的人温暖我的人... ...]]></description><category></category></item><item><title><![CDATA[曝FLASE ODay，警惕FLASH网马]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/2486741</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/2486741</guid><author>pengdawei521</author><pubDate>Tue, 27 May 2008 14:25:00 +0800</pubDate><description><![CDATA[最近几天拦截到利用Adobe Flash Player SWF文件漏洞的网马，该网马通过网页加载一个正常的FLASH文件，再在那个FLASH文件里调用嵌入恶意构造的FLASH文件，这时会导致溢出，从而可能执行任意指令。以下为调用页内容：  window.onerror=function(){return true;} function init(){window.status=”";}wind]]></description><category></category></item><item><title><![CDATA[Sality.q病毒变种之EXE感染方式分析]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/2276014</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/2276014</guid><author>pengdawei521</author><pubDate>Thu, 10 Apr 2008 10:20:00 +0800</pubDate><description><![CDATA[/* Sality.q病毒变种之EXE感染方式分析 * 文件名：vcmgcd32.dll * MD5：ae22ca9f11ade8e362254b452cc07f78 * 壳：未加 * By Vincent.peng on 2008.04.08 */调试方法：在Fun为10003FF0的CreateThread断下，然后转EIP到10003FF0处。一、感染过程分析：1 保存文件属性、时间。2 设]]></description><category></category></item><item><title><![CDATA[Windows 伪句柄]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/2142107</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/2142107</guid><author>pengdawei521</author><pubDate>Mon, 03 Mar 2008 10:06:00 +0800</pubDate><description><![CDATA[    Windows核心编程中的伪句柄，看了半天，也不知道说是什么，遂即跟踪了一下所给的API（GetCurrentProcess, GetCurrentThread），GetCurrentProcess反汇编代码为：OR EAX,FFFFFFFFRETNGetCurrentThread反汇编代码为：PUSH -2POP EAXRETN也就是说GetCurrentProcess返回值始终是0xF]]></description><category></category></item><item><title><![CDATA[Point-H in XP]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/2112876</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/2112876</guid><author>pengdawei521</author><pubDate>Fri, 22 Feb 2008 11:31:00 +0800</pubDate><description><![CDATA[Point-H in XPMD5: a3d58bbb002e474c9ef1c05233f6e1f9取XP下的万能断点。该断点位于user32.dll的“F3 A5 8B C8 83 E1 03 F3 A4 E8”特征串处。参考资料：《Point-h in WinXP tutorial》]]></description><category></category></item><item><title><![CDATA[Reverse ]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/2107359</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/2107359</guid><author>pengdawei521</author><pubDate>Tue, 19 Feb 2008 18:15:00 +0800</pubDate><description><![CDATA[OllyDbg+WinXP万能断点法：POINT H收集翻译http://bbs.pediy.com/showthread.php?s=&threadid=10833&highlight=pointhPoint-h in WinXP english tutorial http://bbs.pediy.com/showthread.php?s=&threadid=8915&highlight=p]]></description><category></category></item><item><title><![CDATA[什么是内存对齐]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/2071996</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/2071996</guid><author>pengdawei521</author><pubDate>Tue, 29 Jan 2008 18:31:00 +0800</pubDate><description><![CDATA[什么是内存对齐    考虑下面的结构：         struct foo         {           char c1;           short s;           char c2;           int i;          };        假设这个结构的成员在内存中是紧凑排列的，假设c1的地址是0，那么s的地址就应该是1，c2的地址就是3，i的地]]></description><category></category></item><item><title><![CDATA[Hook ZwSetInformationFile, 根据目标路径拦截MoveFile移动文件]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/2070444</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/2070444</guid><author>pengdawei521</author><pubDate>Mon, 28 Jan 2008 18:40:00 +0800</pubDate><description><![CDATA[Hook ZwSetInformationFile, 根据目标路径拦截MoveFile移动文件    MoveFile的形式为：MoveFile( LPCTSTR lpExistingFileName, LPCTSTR lpNewFileName)，现需要根据lpNewFileName的路径来判断是否可以移动，在这我们Hook ZwSetInformationFile实现的，跟踪MoveFile可]]></description><category></category></item><item><title><![CDATA[Realpalyer 最新漏洞下载]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/2041503</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/2041503</guid><author>pengdawei521</author><pubDate>Sun, 13 Jan 2008 13:50:00 +0800</pubDate><description><![CDATA[       近期出现利用realplayer 缓冲区溢出漏洞的脚本病毒，当用户浏览带有该脚本病毒网页时，电脑会被中入其他病毒、木马。请立即下载补丁程升级你的realplayer。       受影响的realplayer版本：RealPlayer 10.5 and RealPlayer 11 beta。       补丁下载地址：http://service.real.com/realp]]></description><category></category></item><item><title><![CDATA[com/lsass.exe smss.exe(磁碟机病毒) 感染方式之我分析 -- 2008第一博]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/2030787</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/2030787</guid><author>pengdawei521</author><pubDate>Tue, 08 Jan 2008 19:34:00 +0800</pubDate><description><![CDATA[    为XXX研究所提供技术支持时截获的样本，com/lsass.exe smss.exe，病毒中文名为磁碟机病毒，貌似很强，此等病毒岂能错过，分析之，不感独乐，遂将感染方式贴上：感染文件类型：(文件全名后三位)1 .htm, tml, .js2 .exe3 .rar, .zipweb文件感染函数:1 按行读取web文件内容2 如果没有找到匹配的：document.write(""); 则在文件]]></description><category></category></item><item><title><![CDATA[QQ trail]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/2003386</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/2003386</guid><author>pengdawei521</author><pubDate>Sat, 29 Dec 2007 17:16:00 +0800</pubDate><description><![CDATA[ ]]></description><category></category></item><item><title><![CDATA[Vista下程序提权]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/2003311</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/2003311</guid><author>pengdawei521</author><pubDate>Sat, 29 Dec 2007 16:41:00 +0800</pubDate><description><![CDATA[1 把下面内容保存到文件中：  version="1.0.0.0"  processorArchitecture="X86"  name="mulitray.exe.manifest"  type="win32"/>                    2 在资源中将刚刚的文件“导入”，资源类型命名为24，资源名为1。]]></description><category></category></item><item><title><![CDATA[Vista程序提权]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/2003266</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/2003266</guid><author>pengdawei521</author><pubDate>Sat, 29 Dec 2007 16:23:00 +0800</pubDate><description><![CDATA[电脑通过手机GPRS功能的cmwap方式上网简介手机（NOKIA  N70）1、在电脑上安装数据线驱动程序（可到NOKIA官方网站下载DKU-2驱动程序）。2、把N70通过DKU-2数据线与电脑连接起来。3、在控制面版中找到“网络与拨号连接”程序组，并打开。4、选择“新建连接”，弹出网络连接向导，按下一步。5、在连接网络类型中选择第一项“拨号到专用网络”，点击下一步。6、在网络连接设备中选择调]]></description><category></category></item><item><title><![CDATA[Windows快捷命令]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/1907219</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/1907219</guid><author>pengdawei521</author><pubDate>Thu, 29 Nov 2007 15:17:00 +0800</pubDate><description><![CDATA[1 控制面板control.exe  desk.cplhdwwiz.cplinetcpl.cplappwiz.cplintl.cpljoy.cplaccess.cplmain.cplncpa.cplnusrmgr.cpltimedate.cplmmsys.cplpowercfg.cplsysdm.cpltelephon.cplodbccp32.cpl]]></description><category></category></item><item><title><![CDATA[病毒 资料篇]]></title><link>https://blog.youkuaiyun.com/pengdawei521/article/details/1880628</link><guid>https://blog.youkuaiyun.com/pengdawei521/article/details/1880628</guid><author>pengdawei521</author><pubDate>Mon, 12 Nov 2007 16:44:00 +0800</pubDate><description><![CDATA[1 服务器ARP攻击《服务器被ARP攻击了》 http://www.zenghuijun.com/post/ARP-attack.html《服务器ARP病毒攻击分析与防御》http://www.cuobie.cn/blog/parser-server-arp-attack.html《ARP欺骗攻击防护》http://www.7x24.cn/colocation/arp-safety.htm《ARP]]></description><category></category></item></channel></rss>