Software·43,781 discussions

New rootkit code base

Locked

If you ever wondered how process injection works, or kernel hooking, or keyboard logging, or file filtering, or network filtering, or email filtering, or any other rootkit technology, you can now download the code from http://www.wrox.com/WileyCDA/WroxTitle/productCd-0470101547.html and see for yourself. This is free, modular, commented, production quality code.

Topic

Hmmm, this would n’t be a

In reply to New rootkit code base

plug for your book by any chance would it?

😀

Must confess I’d be more interested in how they work so I could stop them working, than anything else.

Yes; a rather shameless plug at that!

In reply to Hmmm, this would n’t be a

Tony:
There are chapters on detecting and preventing rootkits that might be just what you’re looking for!
Ric 🙂

[Author]

Replies