qwqdanchun
/
BypassDriverDetection_And_Kill360Process
mirror of https://github.com/qwqdanchun/BypassDriverDetection_And_Kill360Process.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
9 Commits 1 Branch 0 Tags 2 MiB
C 100%
Go to file
KID d81fb437dc
Add files via upload 		2018-05-21 15:08:26 +08:00
BypassDriverDetection.cpp Add files via upload 2018-05-21 15:08:26 +08:00
Kill360Process.c Add files via upload 2018-05-21 15:08:26 +08:00
KillAndBypass.rar Add files via upload 2018-05-21 15:08:26 +08:00
KillAndBypassReport.docx Add files via upload 2018-05-21 15:08:26 +08:00
README.md Add files via upload 2018-05-21 15:08:26 +08:00

README.md

BypassDriverDetection_And_Kill360Process

环境：Win7 7600 x86

360版本：11.4.0.2002

目标1：绕过360加载驱动检测。

目标2：实现结束360关键进程。

一、Ring3绕过360加载驱动检测

1.1、选取方向

1.2、确定寄宿者

1.3、Test

1.4、移花接木

1.5、Extend

二、实现结束360关键进程

1、MiIsAddressValidEx

2.1、ZeroProcessMemory

2.2、杀掉进程其它实现：

3、分析Win2000源码

3.1、MmIsAddressValid

3.2、ProbeForRead()

3.3、ProbeForWrite()

3.4、总结：

三、实现代码：

1、绕过检测代码

2、结束进程代码