关于Stoned Bootkit v2编译和Bochs调试软盘MBR的吐槽(伤不起啊..)

     昨天晚上弄着弄着搞到2点多,早上眼睛睁开,6点40,想着问题没解决,很是不爽,脑海里浮现n种方案(n>2),果断下床继续干活.天不负我..泪流满面.终于停在该死的0x7c00上面了..阿西..上图

    图片发到微薄上就删了..大家将就着看吧.

    下面不是进入正题,今天没有正题,今天就是吐槽...

    前几天看群里三哥发了鬼影3的无壳样本,决心分析一下,结果无奈不是exe,只有mbr的饼(bin),无望(现在搞懂调试了可以看看,啊哈哈哈哈哈),网上找资料发现有一个德国的靓仔,把一个bootkit整个放出来了,不过是隔了一段时间的,应该是他参加black hat 2009的时候的产物,最终放出来的版本是v2,2010年年初完成的.mb的人家19岁啊有木有,长得帅啊有木有,年轻有为的黑客啊有木有.应女性观众的要求上作者生活照一张,去求交往吧,Peter Kleissner:

    (看着镜子:你这个死宅男,死胖纸...)

    Stoned Bootkit,一个强悍的mbr病毒框架吧(用的好了可以用做计算机取证用,所以说mbr病毒框架也不太好),对于bootkit的主题,基本上是asm写的,编译用nasm,编译过程相当吐血,主要是用的工具太多.(Stoned Bootkit v2编译,怎么编译,编译设置,成功编译Stoned Bootkit),关键词骗百度的,大家无视.

/* You need following software for compiling and testing: - Netwide Assembler (to compile the bootkit) - Perl (for various compiling scripts) - Microsoft Visual Studio 2010 Beta 2 (to compile the infector) - Microsoft Visual Studio 2008 (for the compatible v90 library) - Bochs, Qemu, VirtualBox (for emulation testing) - Windows debugger Windbg (to test the finally bootkit) - Windows Driver Kit (to compile the drivers) - Windows Automated Installation Kit (to create the Live CD) =========== = Compile = =========== You need nasm in the path and Visual Studio 2008 to compile the entire Stoned Bootkit. 1. Compile the modules: /Boot Code/Kernel Modules/Boot Module/release.bat /Boot Code/Kernel Modules/Bootloader/release.bat /Boot Code/Kernel Modules/Crypto Module/release.bat /Boot Code/Kernel Modules/Disk System/release.bat /Boot Code/Kernel Modules/System Loader/release Windows Pwn.bat /Boot Code/Kernel Modules/Textmode User Interface/release.bat 2. Copy propriet