MS12-020:asm rdp and how to using

Publish: March 18, 2012 Category: Windows Kernel

The Remote Desktop Protocol is used by the "Terminal Services / Remote Desktop Services "and works at kernel level on port 3389.

Read the rest of this entry »

MS12-020 using code

Publish: March 17, 2012 Category: Windows Kernel

可惜了,弄出来的都是一堆的shellcode,正在查具体的函数名称,相关的攻击方式等。唯独知道是使用Remote Desktop Protocol (RDP is designed as a way to let administrators control and configure machines remotely over a network).其攻击可以导致蓝屏.

Read the rest of this entry »

Creating Windows Runtime Components in C++

Publish: September 26, 2011 Category: Windows Kernel

[This documentation is for preview only, and is subject to change in later releases. Blank topics are included as placeholders.]
This topic shows how to create a Windows Runtime Component DLL in C++ that is callable from a Metro style app built for Windows using JavaScript. There are several reasons for building such a component, for example:

Read the rest of this entry »

WinRT and XAML:New Application UI

Publish: September 20, 2011 Category: Windows Kernel

自从win8 build发布以来,不仅带来了新的界面metro ui的简单风格,也随之带来了另一个东西:WinRT.
那么WinRT,是什么额?简单的来说,它是Win32的面向对象替代品

Read the rest of this entry »

Kernel Functions

Publish: June 23, 2011 Category: Windows Kernel

ActivateActCtx
AddAtomA
AddAtomW
AddConsoleAliasA
AddConsoleAliasW

Read the rest of this entry »

Kernel32 Reconstruction

Publish: June 23, 2011 Category: Windows Kernel

Using Cracker and WRK,we can know kernel32 Architecture.such as:

Ord=0x005d Hint=0x005c RVA=0x0000e9cf(0000ddcf) (00004642)
CreateMutexA

Read the rest of this entry »

xp 英文无法打开chm文件

Publish: May 30, 2011 Category: Windows Kernel

俺现在安装的是xp的英文系统,都已经更新到最新版,但一打开chm就会出现错误“不能打开文件mk:@*.chm
”。找了很多的原因,也重新注册了Hhctrl.ocx,甚至运行了hh.exe,不管用~!

Read the rest of this entry »

Side-By-Side error

Publish: April 3, 2011 Category: Windows Kernel

今个重装了系统,呵改成了win7了。以后就开始用这个了,就如之前的博文所说:我是为了IE9.但在安装QQ TM2009 Beta3.2时,出现了Side-by-Side的错误。在此之前曾经也遇到过,也了解了这块了,所以这次连想都不用想,就直接下载了个东西,安装上就ok了。

Read the rest of this entry »