| Current | v9 | v8 | v7 | v6 | v5 | v4 | v3 | v2 | v1 | All | About |
A Catalog of
Windows Local Kernel-mode Backdoor Techniques
August, 2007
Windows Local Kernel-mode Backdoor Techniques
August, 2007
| skape | Skywing | |
| mmiller@hick.org | Skywing@valhallalegends.com |
- Contents
- Introduction
- Techniques
- Image Patches
- Descriptor Tables
- Model-specific Registers
- Page Table Entries
- Function Pointers
- Asynchronous Read Loop
- Leaking CS
- Prevention & Mitigation
- Running Code in Kernel-Mode
- PatchGuard versus Rootkits
- Acknowledgements
- Conclusion
- Bibliography
- About this document ...