平常工作收集的一些网址(2)
内容 | 备注 |
http://www.cnblogs.com/angells/archive/2009/12/05/1617679.html |
indext.dat解析 |
https://github.com/nmgwddj/learn-windows-drivers/blob/master/ProcessMonitor/DriverEntry.c | |
ed nt!Kd_SXS_Mask 0 |
windbg驱动调试时,无限打印问题 |
https://bbs.pediy.com/thread-144567.htm http://www.voidcn.com/article/p-kmxfkake-ty.html
|
minifilter相关 |
lmvm IMFSafeBox //查看驱动版本信息 |
|
https://www.xuebuyuan.com/323569.html |
__try __finally相关 |
http://www.360doc.com/content/12/0731/15/5073814_227474024.shtml https://blog.csdn.net/pizi0475/article/details/7849822 |
windbg |
http://bbs.pediy.com/showthread.php?t=186922 |
驱动动态检测 verfier |
https://bbs.pediy.com/thread-225059.htm |
RFID破解相关 |
.load wow64exts |
windbg 64 切32
|
https://www.cnbeta.com/articles/tech/820281.htm?tdsourcetag=s_pctim_aiomsg |
WinRAR安全漏洞 |
link.exe /dump /headers /exports IMFCameraProtect.sys |
sys信息查看 |
https://community.osr.com/discussion/287333 https://docs.microsoft.com/zh-cn/windows-hardware/drivers/debugger/bug-check-0x139--kernel-security-check-failure |
驱动字节对齐 中文 |
https://www.cnblogs.com/gaochundong/p/windbg_cheat_sheet.html http://bsodanalysis.blogspot.com/2014/05/0x19-debugging.html |
windbg命令 常规windbg调试经验 |
https://bbs.pediy.com/thread-212152.htm https://download.csdn.net/download/qq_22038209/9787780 |
wfp进程监控 |
https://docs.microsoft.com/zh-cn/windows-hardware/drivers/kernel/introduction-to-interrupt-service-routines |
中文msdn |
https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-erref/596a1078-e883-4972-9bbc-49e60bebca55 |
NTSTATUS 错误码 |
https://www.cnblogs.com/zyrblog/p/7545868.html |
node.js |
regsvr32 "D:\Program Files (x86)\IObit\IObit Malware Fighter\IMFShellExt.dll" |
|
https://www.easyicon.net/covert/ |
icon编辑相关 |
https://github.com/microsoft/Windows-driver-samples |
win10驱动参考 |
https://www.drivereasy.com/knowledge/video-scheduler-internal-error-on-windows-10-solved/ |
常用驱动修复步骤 |
https://www.xuebuyuan.com/1536438.html |
模糊hash(fuzzy hash) |
https://www.sandboxie.com/GettingStarted |
sandboxie |
http://blog.topsec.com.cn/ad_lab/%E9%9A%90%E8%97%8F%E5%9C%A8windbg%E4%B8%8B%E9%9D%A2%E7%9A%84%E6%9 4%BB%E9%98%B2%E5%AF%B9%E6%8A%97/ http://blog.topsec.com.cn/%e9%9a%90%e8%97%8f%e5%9c%a8windbg%e4%b8%8b%e9%9d%a2%e7%9a%84%e6%94%bb%e9%98%b2%e5%af%b9%e6%8a%97/ |
阿尔法实验室 |
https://github.com/ZoloZiak/WinNT4/blob/master/private/ntos/boot/bootcode/ntfs/i386/ntfsboot.asm |
windows内核源码 |
http://www.cgsoftlabs.ro/studpe.html |
一些反汇编工具 |
https://github.com/reactos/reactos/blob/d296bbebbef07e1a9eab79dd6f503e20d38fdeeb/dll/win32/wintrust/wintrust_main.c |
reactos |
https://docs.microsoft.com/en-us/windows/win32/seccrypto/example-c-program--verifying-the-signature-of-a-pe-file |
微软例子--数字签名 |
https://docs.microsoft.com/zh-cn/sysinternals/ |
微软工具集 |
http://www.bathome.net/ |
批处理之家 |
https://www.holibear.com/hblog/%E4%BA%BA%E7%94%9F%E5%88%B0%E5%BA%95%E8%A6%81%E5%81%9A%E4%BB%80%E9 %BA%BC%E4%B8%83%E5%80%8B%E5%95%8F%E9%A1%8C%E5%B9%AB%E4%BD%A0%E6%89%BE%E5%88%B0%E4 %BA%BA%E7%94%9F%E7%9A%84%E6%84%8F%E7%BE%A9-%E5%93%88/ |
人生的意义 |