Updated Analysis of PatchGuard on Microsoft Windows 10 RS4 - 源码 - 源码 - 免费下载

Updated Analysis of PatchGuard on Microsoft Windows 10 RS4

文件大小： 1690k

源码售价： 10 个金币积分规则积分充值

资源说明：Updated Analysis of PatchGuard on Microsoft Windows 10 RS4 Since Windows 64b, PatchGuard has been of great interest in Windows security. For most iterations of its development, several people have analyzed its main mechanisms and internals which, many times, led to a functional bypass. Researchers seem to agree on one thing: bypassing PatchGuard will always be theoretically possible since it runs at the same level as a driver. Which seems true, theoretically. That said, just like vulnerability exploit isn't about NOP-sled anymore, bypassing PatchGuard isn't about hooking KeBugCheck anymore. This paper will present a complete overview of PatchGuard mecanisms, from the initialization to the Blue Screen Of Death, and insights about how we implemented a driver able to disable it. Especially, this research has been conducted using timeless analysis with Tetrane’s tool REVEN. Not a single debugger was used during this entire analysis.

部分文件列表（点击文件名可查看文件内容）

					
									本源码包内暂不包含可直接显示的源代码文件，请下载源码包。