Journal Issues
| Vol.5, No.1, 2008 | | Vol.4, No.2, 2007 | | Vol.4, No.1, 2007 | | Vol.3, No.2, 2006 | | RECON2006 Conf. Proc. | | Vol.3, No.1, 2006 | | RECON2005 Conf. Proc. | | Vol.2, No.1, 2005 | | Vol.1, No.2, 2004 | | Vol.1, No.1, 2004 |
Statistics
Members: 1925
News: 293
Web Links: 1
Visitors: 3808547
Who's Online
We have 1 guest online
|
 Damn Vulnerable Linux (DVL) is a Linux-based (modified Damn Small Linux) tool for IT-Security & IT-Anti- Security and Attack & Defense. [ CLICK HERE FOR MORE INFOS! ]
|
Featured Conference Video
 OllyBone - Semi-Automatic Unpacking on IA-32. View the conference video here!
|
|
Invisibility on NT boxes - How to become unseen on Windows N |
|
Written by Holy Father
|
This document is about technics of hiding objects, files, services, processes etc. on OS Windows NT. These methods
are based on hooking Windows API functions which are described in my document ”Hooking Windows API”.
Everything here was get from my own research during writing rootkit code, so there is a chance it can be written
more effectively or it can be written much more easily. This also involve my implementation. Hiding arbitrary
object in this document mean to change some system functions which name this object in the way they would skip
its naming. In the case this object is only return value of that function we would return value as the object does
not exist. Basic method (excluding cases of telling different) is that we would call original function with original
arguments and then we would change its output. In this version of this text are described methods of hiding files,
processes, keys and values in registry, system services and drivers, allocated memory and handles.
Download: Invisibility on NT boxes - How to become unseen on Windows N
|
|