Questions tagged [nt]
67 questions
0
votes
4 answers
NT Kernel Programming
I would like to know where to get started, or how possible it is to hook into, or patch the windows kernel(XP and up). I am specifically interested in software like McAfee Entercept, or certain antivirus scanners that patch the kernel. I would like…
Sonny Ordell
- 334
- 2
- 20
- 59
0
votes
1 answer
Different NT Groups Return Local/Server
I have two functions which list a users NT groups on an ASP.NET app
Private Function getUserGroups() As Boolean
' collect the user domain and identity
Dim arr As String() =…
Ryan McDonough
- 9,732
- 3
- 55
- 76
0
votes
1 answer
When use Jena to read RDF(N-Triple),it throws out "com.hp.hpl.jena.shared.InvalidPropertyURIException "
I download an N-Triple file from dbpedia,but when I wanted to read it in to Jena model,some exceptions throw out.Below is a part of this file:
…
Wang Ruiqi
- 804
- 6
- 19
-1
votes
1 answer
How retrieve complete filename with NtQueryDirectoryFile in recursive mode?
I'm using this code to go through all files and directories recursively.
Now i want know how extract complete filename (path + filename + extension)? the following line(also present on reference code) give only filename + exension (without directory…
user13342579
-1
votes
1 answer
How to "trick" program installers so they will work on unsupported OS?
I want to install some software on a pre-alpha XP build (codename Windows Whistler). However, 90% of the installers fail to run. I guess it is because of the kernel version, which I suppose is somewhere between 5.0 and 5.1 (as I remember even the…
Alex Popov
- 65
- 7
-1
votes
1 answer
How pass parameters to ZwCreateThreadEx routine?
This code below working fine to create separated threads without pass any parameter of data types. Now i want know how i can pass parameters to method that executes when ZwCreateThreadEx is called?
For example, how pass a HANDLE type and a type…
user9672569
-2
votes
1 answer
PIMAGE_NT_HEADERS Showing different Values
so I am currently attempting to locally map my suspended thread when I pop my program into CFF explorer it says that the value of PIMAGE_NT_HEADERS is 00004550:
however while attempting to map it by myself my value comes out to be…
brainlet
- 41
- 6