搜索资源列表
UpLoad
- 驱动枚举进程,控制线程AFFINITY,通过修改EPROCESS,ETHREAD ,KTHREAD 等结构,修改AFFINITY-thread affinity control in windows driver
NtCreateThread
- hookNtCreateThread 可以第一时间注入到目标进程,进程创建后,然后就好调用 NtCreateThread创建主线程-hookNtCreateThread the first time can be injected into the target process, the process is created, then create the main thread is like calling NtCreateThread
Packet_Analysis
- 基于Passthru的扩展,抓取IP数据包,并在内核中利用队列、系统线程实时将IP数据包解析到磁盘文件中,同时提供用户控制,在RING3使用SDK编写界面。 本程序可以帮助您熟悉驱动编写、windows编程、用户态和内核态交互编程以及网络知识的基础应用。 驱动安装使用snetcfg,已集成到用户界面中。-Based on the expansion of passthru, crawl IP packet, and the use of the kernel queue, the sys
createthread
- 利用 kevent进行线程的同步创建操作,并且获取线程所在进程的值-Thread synchronization using kevent to create action, and where the process of obtaining the value of the thread
FileThread
- 利用vc辟邪一个驱动程序,改程序的作用是演示线程实验-Vc evil using a driver, change the role of the program is to demonstrate the thread experiment
driver_thread
- 驱动,通过控制号创建线程,关闭线程例子代码,简洁明了-Drive, create a thread through the control number, close the thread sample code, clear, concise
thread
- WINDOWS 驱动编程中 自己写的一个 thread 例子, 很容易的一个例子,希望能对有些人帮助, WDK 编译-WINDOWS-driven programming to write their own example of a thread, it is easy for an example, hoping for some help, WDK compiler
DLoad_SRC
- 源代码包含三种不同的驱动加载方法,使用ZwSetSystemInformation函数加载驱动,使用NtLoadDriver函数加载驱动,使用服务控制管理器加载驱动,还包括三种线程注入技术,使用RtlCreateUserThread 函数注入线程,使用CreateRemoteThread函数注入线程,使用NtCreateThreadEx函数注入线程,源代码包含C,C#的demo-The source code contains three different loading methods
ADC
- s3c6410 自带adc的驱动程序,其中使用到线程-comes adc driver s3c6410, which use the thread
RootKit
- 基于线程调度链表检测rootkit,内核态下使用threadlist检测-Detect rootkit-based thread scheduling Chain
YATMon_src
- 通过异步过程调用 APC 来实现内核枚举进程 。-Thread Monitor presents a view of process and thread execution with a bit more granularity than TaskManager, and uses the sparsely documented Asynchronous Procedure Call (APC) mechanism tocommunicate the kernels creation and
comElves
- 实现对串口的调试功能,其中一个亮点是新开辟一个线程的方法,和线程间传递数据的方法,很实用。-Serial debugging features, one of the highlights is the new open up a thread, and pass data between threads, very practical.
MyFanWG
- 对于反WG做初步的解释: 没有采用驱动技术,而是采用了大众化的动态链接库技术(DLL),兼容性强,可在xp 、win7、 win8 等操作系统上运作。 功能如下: 1、启动线程检测 网速主流和非主流内存搜索工具的检测(比如金山游侠、ce等) 2、启动线程检测 检测游戏自身的DLL是否出了非法模块,比如 speed.dll等变速齿轮的dll 或wpe.dll封包拦截工具WPE的dll,沙盘的dll 3、非法主流WG的窗口标题 4、采用 C
PsSuspendThread
- 内核中暂停任意线程代码-Kernel suspend any thread
PICSHOW.ZIP
- 投影片播放影片er component for Delphi 3, 4, and 5 適用-TPicShow is an image slider component for Delphi 3, 4, and 5. It can display image with 122 different effect. TPicShow can use a separate thread for its process
wdf-get-process-info
- wdf获取创建的进程信息,包括进程id,进程名字以及线程id等信息。-wdf obtain information creation process, including the process id, process name, and thread id information.
[7-1]EnumRemoveProcessThreadNotify
- 枚举与删除进线程回调,进程回调可以监视进程的创建和退出-Enumerate and delete into the thread callback, the callback process can monitor the process of creating and exit
c164
- 模拟生产消费者实现线程同步,并且调用了windows提供的API函数-Simulation of production of consumers realize thread synchronization, and call the API functions provided by windows
InjectThread
- Help you to inject your own thread in running process.
QWorker3.0_20160108
- Delphi 移动平台多线程例子-Delphi Mobile Mutile Thread Demo..!!
