搜索资源列表
ForceDel
- 强制删除文件,无注入无驱动无hook,原理就是查找文件的锁定句柄,然后关闭句柄。-Force delete a file, no injection of non-driven non-hook, locking principle is to find the file handle, and then close the handle.
MyCopyHook
- 这是用C++写的一个用于创建拷贝钩子的COM接口处理程序,它可以决定文件夹或打印机是否允许被移动、拷贝、重命名或删除等。有源码说明。-This is a C++ to write with a hook used to create copies of procedure of the COM interface, it can decide whether folders or printers have been allowed to move, copy, rename, or delet
XueTr
- 1.进程、线程、进程模块、进程窗口、进程内存信息查看,热键信息查看,杀进程、杀线程、卸载模块等功能 2.内核驱动模块查看,支持内核驱动模块的内存拷贝 3.SSDT、Shadow SSDT、FSD、KBD、TCPIP、IDT信息查看,并能检测和恢复ssdt hook和inline hook 4.CreateProcess、CreateThread、LoadImage、CmpCallback、BugCheckCallback、Shutdown、Lego等Notify Routine信息查
ttm_bo
- TODO: Add a driver hook to delete driver-specific LRU s here. -TODO: Add a driver hook to delete driver-specific LRU s here.
FormatIO
- 强制删除文件,无注入无驱动无hook,原理就是查找文件的锁定句柄,然后关闭句柄。-Forced to delete the file, no injection no driver no hook, the principle is to find the file lock handle, and then close the handle.