<![CDATA[hambaga的博客]]>https://blog.csdn.net/Kwansyzh-cnhttps://blog.csdn.net/<![CDATA[KTHREAD 结构体属性介绍]]>https://blog.csdn.net/Kwansy/article/details/110671173https://blog.csdn.net/Kwansy/article/details/110671173KwansyWed, 10 Mar 2021 11:30:05 +0800<![CDATA[EPROCESS 结构体属性介绍]]>https://blog.csdn.net/Kwansy/article/details/110672988https://blog.csdn.net/Kwansy/article/details/110672988KwansyWed, 10 Mar 2021 11:29:58 +0800<![CDATA[ETHREAD 结构体属性介绍]]>https://blog.csdn.net/Kwansy/article/details/110674081https://blog.csdn.net/Kwansy/article/details/110674081KwansyWed, 10 Mar 2021 11:29:51 +0800<![CDATA[vs2019 编译 WRK 踩坑记录]]>https://blog.csdn.net/Kwansy/article/details/110457212https://blog.csdn.net/Kwansy/article/details/110457212KwansyWed, 10 Mar 2021 11:29:15 +0800<![CDATA[进程线程创建过程]]>https://blog.csdn.net/Kwansy/article/details/110938883https://blog.csdn.net/Kwansy/article/details/110938883KwansyWed, 10 Mar 2021 10:26:23 +0800<![CDATA[几种常见的反调试方法]]>https://blog.csdn.net/Kwansy/article/details/114520927https://blog.csdn.net/Kwansy/article/details/114520927KwansyMon, 08 Mar 2021 09:37:56 +0800<![CDATA[使用SEH实现跳转]]>https://blog.csdn.net/Kwansy/article/details/114455200https://blog.csdn.net/Kwansy/article/details/114455200KwansySat, 06 Mar 2021 20:25:38 +0800<![CDATA[花指令——多个指令共用字节]]>https://blog.csdn.net/Kwansy/article/details/114442024https://blog.csdn.net/Kwansy/article/details/114442024KwansySat, 06 Mar 2021 16:25:29 +0800<![CDATA[CreateProcess 重定向CMD实现反弹shell]]>https://blog.csdn.net/Kwansy/article/details/114274598https://blog.csdn.net/Kwansy/article/details/114274598KwansyMon, 01 Mar 2021 23:53:53 +0800<![CDATA[timestomping 修改文件时间戳]]>https://blog.csdn.net/Kwansy/article/details/114262524https://blog.csdn.net/Kwansy/article/details/114262524KwansyMon, 01 Mar 2021 14:43:45 +0800<![CDATA[CreateService / SC 创建自启动服务]]>https://blog.csdn.net/Kwansy/article/details/114259834https://blog.csdn.net/Kwansy/article/details/114259834KwansyMon, 01 Mar 2021 12:05:22 +0800<![CDATA[repne scasb + rep movsd + rep movsb 内联实现 strcat]]>https://blog.csdn.net/Kwansy/article/details/114242070https://blog.csdn.net/Kwansy/article/details/114242070KwansySun, 28 Feb 2021 23:14:29 +0800<![CDATA[rep movsd + rep movsb 内联实现 strcpy]]>https://blog.csdn.net/Kwansy/article/details/114239988https://blog.csdn.net/Kwansy/article/details/114239988KwansySun, 28 Feb 2021 21:09:52 +0800<![CDATA[repne scasb 内联实现 strlen]]>https://blog.csdn.net/Kwansy/article/details/114225995https://blog.csdn.net/Kwansy/article/details/114225995KwansySun, 28 Feb 2021 15:39:28 +0800<![CDATA[“/c del %s ＞＞ NUL“ 删除自身demo]]>https://blog.csdn.net/Kwansy/article/details/114223951https://blog.csdn.net/Kwansy/article/details/114223951KwansySun, 28 Feb 2021 15:00:35 +0800<![CDATA[CreateFileMapping 内存映射读写文件]]>https://blog.csdn.net/Kwansy/article/details/114062311https://blog.csdn.net/Kwansy/article/details/114062311KwansyThu, 25 Feb 2021 09:55:58 +0800<![CDATA[逆向分析使用COM组件对象模型的代码]]>https://blog.csdn.net/Kwansy/article/details/114010975https://blog.csdn.net/Kwansy/article/details/114010975KwansyWed, 24 Feb 2021 10:06:43 +0800<![CDATA[reflective dll injection 反射注入]]>https://blog.csdn.net/Kwansy/article/details/113881923https://blog.csdn.net/Kwansy/article/details/113881923KwansySat, 20 Feb 2021 13:55:04 +0800<![CDATA[apatedns unhandled exception]]>https://blog.csdn.net/Kwansy/article/details/113643057https://blog.csdn.net/Kwansy/article/details/113643057KwansyThu, 04 Feb 2021 14:02:06 +0800<![CDATA[Win10 EPROCESS 断链]]>https://blog.csdn.net/Kwansy/article/details/113372198https://blog.csdn.net/Kwansy/article/details/113372198KwansyFri, 29 Jan 2021 10:51:54 +0800