Archive for the ‘ Ring 0 ’ Category
Hi =) Recently I read a post of Ivanlef0u : LdrpHashTable where he was showing how to hide a Dll from this table. So by reading this post we can say that we know 4 techniques to hide a Dll : Unlink from InLoadOrderModuleList. Unlink from InMemoryOrderModuleList. Unlink from InInitializationOrderModuleList. Unlink from LdrpHashTable. Well my purpose is to show you a [ READ MORE ]