category/92351.aspxzh-CNWed, 09 Jul 2008 16:14:39 GMT60傻傻Kevinshttp://blog.csdn.net/iiprogram/archive/2008/07/09/2629488.aspxWed, 09 Jul 2008 16:15:00 GMThttp://blog.csdn.net/iiprogram/archive/2008/07/09/2629488.aspxcomments/2629488.aspxhttp://blog.csdn.net/iiprogram/archive/2008/07/09/2629488.aspx#Feedback0comments/commentRss/2629488.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2629488使用 Visual C++ 防御功能保护您的代码<img src ="aggbug/2629488.aspx" width = "1" height = "1" />傻傻Kevinshttp://blog.csdn.net/iiprogram/archive/2008/06/30/2599952.aspxMon, 30 Jun 2008 23:41:00 GMThttp://blog.csdn.net/iiprogram/archive/2008/06/30/2599952.aspxcomments/2599952.aspxhttp://blog.csdn.net/iiprogram/archive/2008/06/30/2599952.aspx#Feedback0comments/commentRss/2599952.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2599952如何写windows系统已保护的内存区域 <img src ="aggbug/2599952.aspx" width = "1" height = "1" />傻傻Kevinshttp://blog.csdn.net/iiprogram/archive/2008/06/24/2581010.aspxTue, 24 Jun 2008 09:58:00 GMThttp://blog.csdn.net/iiprogram/archive/2008/06/24/2581010.aspxcomments/2581010.aspxhttp://blog.csdn.net/iiprogram/archive/2008/06/24/2581010.aspx#Feedback0comments/commentRss/2581010.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2581010简单inline hook ObReferenceObjectByHandle保护进程和屏蔽文件执行<img src ="aggbug/2581010.aspx" width = "1" height = "1" />傻傻Kevinshttp://blog.csdn.net/iiprogram/archive/2008/06/24/2580941.aspxTue, 24 Jun 2008 09:38:00 GMThttp://blog.csdn.net/iiprogram/archive/2008/06/24/2580941.aspxcomments/2580941.aspxhttp://blog.csdn.net/iiprogram/archive/2008/06/24/2580941.aspx#Feedback0comments/commentRss/2580941.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2580941一种躲避运行时代码校验的方法<img src ="aggbug/2580941.aspx" width = "1" height = "1" />傻傻Kevinshttp://blog.csdn.net/iiprogram/archive/2008/06/23/2578267.aspxMon, 23 Jun 2008 11:44:00 GMThttp://blog.csdn.net/iiprogram/archive/2008/06/23/2578267.aspxcomments/2578267.aspxhttp://blog.csdn.net/iiprogram/archive/2008/06/23/2578267.aspx#Feedback0comments/commentRss/2578267.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2578267VC编的病毒<img src ="aggbug/2578267.aspx" width = "1" height = "1" />傻傻Kevinshttp://blog.csdn.net/iiprogram/archive/2008/06/23/2578201.aspxMon, 23 Jun 2008 11:25:00 GMThttp://blog.csdn.net/iiprogram/archive/2008/06/23/2578201.aspxcomments/2578201.aspxhttp://blog.csdn.net/iiprogram/archive/2008/06/23/2578201.aspx#Feedback0comments/commentRss/2578201.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2578201create process as system privilege<img src ="aggbug/2578201.aspx" width = "1" height = "1" />傻傻Kevinshttp://blog.csdn.net/iiprogram/archive/2008/06/23/2578177.aspxMon, 23 Jun 2008 11:17:00 GMThttp://blog.csdn.net/iiprogram/archive/2008/06/23/2578177.aspxcomments/2578177.aspxhttp://blog.csdn.net/iiprogram/archive/2008/06/23/2578177.aspx#Feedback1comments/commentRss/2578177.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2578177创建高权限进程<img src ="aggbug/2578177.aspx" width = "1" height = "1" />傻傻Kevinshttp://blog.csdn.net/iiprogram/archive/2008/06/23/2578170.aspxMon, 23 Jun 2008 11:16:00 GMThttp://blog.csdn.net/iiprogram/archive/2008/06/23/2578170.aspxcomments/2578170.aspxhttp://blog.csdn.net/iiprogram/archive/2008/06/23/2578170.aspx#Feedback0comments/commentRss/2578170.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2578170Starting an Interactive Client Process in C++ <img src ="aggbug/2578170.aspx" width = "1" height = "1" />傻傻Kevinshttp://blog.csdn.net/iiprogram/archive/2008/06/17/2557291.aspxTue, 17 Jun 2008 15:29:00 GMThttp://blog.csdn.net/iiprogram/archive/2008/06/17/2557291.aspxcomments/2557291.aspxhttp://blog.csdn.net/iiprogram/archive/2008/06/17/2557291.aspx#Feedback0comments/commentRss/2557291.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2557291如何获得当前线程的用户名和此用户的SID<img src ="aggbug/2557291.aspx" width = "1" height = "1" />傻傻Kevinshttp://blog.csdn.net/iiprogram/archive/2008/06/17/2557260.aspxTue, 17 Jun 2008 15:25:00 GMThttp://blog.csdn.net/iiprogram/archive/2008/06/17/2557260.aspxcomments/2557260.aspxhttp://blog.csdn.net/iiprogram/archive/2008/06/17/2557260.aspx#Feedback0comments/commentRss/2557260.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2557260如何调整中注册表权限<img src ="aggbug/2557260.aspx" width = "1" height = "1" />傻傻Kevinshttp://blog.csdn.net/iiprogram/archive/2008/06/17/2557231.aspxTue, 17 Jun 2008 15:21:00 GMThttp://blog.csdn.net/iiprogram/archive/2008/06/17/2557231.aspxcomments/2557231.aspxhttp://blog.csdn.net/iiprogram/archive/2008/06/17/2557231.aspx#Feedback0comments/commentRss/2557231.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2557231利用IAT hook实现windows通用密码后门 <img src ="aggbug/2557231.aspx" width = "1" height = "1" />傻傻Kevinshttp://blog.csdn.net/iiprogram/archive/2008/06/17/2557207.aspxTue, 17 Jun 2008 15:18:00 GMThttp://blog.csdn.net/iiprogram/archive/2008/06/17/2557207.aspxcomments/2557207.aspxhttp://blog.csdn.net/iiprogram/archive/2008/06/17/2557207.aspx#Feedback0comments/commentRss/2557207.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2557207GUI-Based RunAsEx<img src ="aggbug/2557207.aspx" width = "1" height = "1" />傻傻Kevinshttp://blog.csdn.net/iiprogram/archive/2008/06/17/2557193.aspxTue, 17 Jun 2008 15:16:00 GMThttp://blog.csdn.net/iiprogram/archive/2008/06/17/2557193.aspxcomments/2557193.aspxhttp://blog.csdn.net/iiprogram/archive/2008/06/17/2557193.aspx#Feedback0comments/commentRss/2557193.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2557193lsass.exe调试方法 选项 <img src ="aggbug/2557193.aspx" width = "1" height = "1" />傻傻Kevinshttp://blog.csdn.net/iiprogram/archive/2008/06/17/2557175.aspxTue, 17 Jun 2008 15:14:00 GMThttp://blog.csdn.net/iiprogram/archive/2008/06/17/2557175.aspxcomments/2557175.aspxhttp://blog.csdn.net/iiprogram/archive/2008/06/17/2557175.aspx#Feedback0comments/commentRss/2557175.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2557175编程实现木马的ActiveX启动和注入IE的启动方式<img src ="aggbug/2557175.aspx" width = "1" height = "1" />傻傻Kevinshttp://blog.csdn.net/iiprogram/archive/2008/06/12/2540607.aspxThu, 12 Jun 2008 17:30:00 GMThttp://blog.csdn.net/iiprogram/archive/2008/06/12/2540607.aspxcomments/2540607.aspxhttp://blog.csdn.net/iiprogram/archive/2008/06/12/2540607.aspx#Feedback0comments/commentRss/2540607.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2540607Finddll.c - searches are running processes For module occurrency<img src ="aggbug/2540607.aspx" width = "1" height = "1" />