TitanHide - Exetools

		Exetools > General > Community Tools
TitanHide

#21

02-08-2014, 21:48

Insid3Code Insid3Code is offline

Family

Join Date: May 2013

Location: Algeria

Posts: 84

Rept. Given: 47

Rept. Rcvd 60 Times in 30 Posts

Thanks Given: 24

Thanks Rcvd at 108 Times in 56 Posts

Quote:

There is however a problem, which is that the EPROCESS structure according to http://www.nirsoft.net/kernel_struct/vista/EPROCESS.html doesn't seem to work on windows XP (it's a vista structure definition). I think I need to install every OS to check the structure definitions using WinDbg...

Windows XP SP3 X86
0x0BC DebugPort
Windows 7 SP1 X86
0x0EC DebugPort
Windows 7 SP1 X64
0x1F0 DebugPort

__________________
Computer Forensics

The Following User Gave Reputation+1 to Insid3Code For This Useful Post:
mr.exodia (02-08-2014)

Tags

driver, hiding, ssdt, titanhide, x64

« Previous Thread | Next Thread »

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Switch to Hybrid Mode Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

All times are GMT +8. The time now is 06:51.