平常工作收集的一些网址(2)

indext.dat解析

ed nt!Kd_SXS_Mask 0
ed nt!Kd_FUSION_Mask 0

https://bbs.pediy.com/thread-144567.htm
https://stackoverflow.com/questions/47159942/minifilter-driver-tracking-changes-in-files
https://blog.csdn.net/eric491179912/article/details/6105192
http://www.osronline.com/showThread.cfm?link=121320
https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/bug-check-0x7f--unexpected-kernel-mode-trapd

http://www.voidcn.com/article/p-kmxfkake-ty.html

lmvm IMFSafeBox //查看驱动版本信息

https://www.xuebuyuan.com/323569.html

__try __finally相关

http://www.360doc.com/content/12/0731/15/5073814_227474024.shtml

https://blog.csdn.net/pizi0475/article/details/7849822
https://blog.csdn.net/chenyujing1234/article/details/7743460

windbg

http://bbs.pediy.com/showthread.php?t=186922

驱动动态检测  verfier

https://bbs.pediy.com/thread-225059.htm

RFID破解相关

.load wow64exts
!sw

 windbg 64 切32

https://www.cnbeta.com/articles/tech/820281.htm?tdsourcetag=s_pctim_aiomsg

WinRAR安全漏洞

link.exe /dump /headers /exports IMFCameraProtect.sys

sys信息查看

https://community.osr.com/discussion/287333
https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/bug-check-0x19--bad-pool-header

https://docs.microsoft.com/zh-cn/windows-hardware/drivers/debugger/bug-check-0x139--kernel-security-check-failure

 驱动字节对齐

中文

https://www.cnblogs.com/gaochundong/p/windbg_cheat_sheet.html

http://bsodanalysis.blogspot.com/2014/05/0x19-debugging.html

windbg命令

常规windbg调试经验

https://bbs.pediy.com/thread-212152.htm

https://download.csdn.net/download/qq_22038209/9787780

wfp进程监控

https://docs.microsoft.com/zh-cn/windows-hardware/drivers/kernel/introduction-to-interrupt-service-routines

中文msdn

https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-erref/596a1078-e883-4972-9bbc-49e60bebca55

NTSTATUS 错误码

https://www.cnblogs.com/zyrblog/p/7545868.html

node.js

regsvr32 "D:\Program Files (x86)\IObit\IObit Malware Fighter\IMFShellExt.dll"
echo regsvr32 exec. time > "$(OutDir)\regsvr32.trg"

https://www.easyicon.net/covert/
https://www.iconfinder.com/

https://github.com/microsoft/Windows-driver-samples

https://www.drivereasy.com/knowledge/video-scheduler-internal-error-on-windows-10-solved/

https://www.xuebuyuan.com/1536438.html
https://patents.google.com/patent/CN102811213A/zh
https://www.claudxiao.net/2012/02/fuzzy_hashing/

https://www.sandboxie.com/GettingStarted
https://github.com/sandboxie/sandboxie
https://sandboxie-plus.com/

http://blog.topsec.com.cn/ad_lab/%E9%9A%90%E8%97%8F%E5%9C%A8windbg%E4%B8%8B%E9%9D%A2%E7%9A%84%E6%9

4%BB%E9%98%B2%E5%AF%B9%E6%8A%97/

http://blog.topsec.com.cn/%e9%9a%90%e8%97%8f%e5%9c%a8windbg%e4%b8%8b%e9%9d%a2%e7%9a%84%e6%94%bb%e9%98%b2%e5%af%b9%e6%8a%97/

https://github.com/ZoloZiak/WinNT4/blob/master/private/ntos/boot/bootcode/ntfs/i386/ntfsboot.asm

http://www.cgsoftlabs.ro/studpe.html

https://github.com/reactos/reactos/blob/d296bbebbef07e1a9eab79dd6f503e20d38fdeeb/dll/win32/wintrust/wintrust_main.c

https://docs.microsoft.com/en-us/windows/win32/seccrypto/example-c-program--verifying-the-signature-of-a-pe-file

https://docs.microsoft.com/zh-cn/sysinternals/
http://mobilehot.iobit.com/android/doku.php?id=itopvpn:server

http://www.bathome.net/

https://www.holibear.com/hblog/%E4%BA%BA%E7%94%9F%E5%88%B0%E5%BA%95%E8%A6%81%E5%81%9A%E4%BB%80%E9

%BA%BC%E4%B8%83%E5%80%8B%E5%95%8F%E9%A1%8C%E5%B9%AB%E4%BD%A0%E6%89%BE%E5%88%B0%E4

%BA%BA%E7%94%9F%E7%9A%84%E6%84%8F%E7%BE%A9-%E5%93%88/