RSSAmplifier

· Dec 1, 2024

hooking functions to hide system artifacts

0
Sign in to vote or save

This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.

tl;dr rootkit-style code that uses the Microsoft Detours library to perform system call hooking. this tool allows us to: hide malicious processes (like backdoors) from Task Manager and security tools. conceal files and directories from file explorers and system utilities. hide registry keys from registry editors and system queries. the power comes from where it operates - at the Native API level…

Read on /posts/hooky/

Comments

Nothing yet. Say the first thing.

    Sign in to join the conversation.