A forum for reverse engineering, OS internals and malware analysis 

Rootkits

Ask your beginner questions here.

Rootkits

 #4708  by bwfc1989
 Mon Jan 24, 2011 5:40 pm
Just a quick question, looking at user mode rootkits, you have things such as DLL injection, windows hooks, remote code injection, IAT hooks and inline function patching, are these classed as user mode techniques?

any advice is much appreciated

Re: Rootkits

 #4709  by EP_X0FF
 Mon Jan 24, 2011 5:45 pm
DLL injection
remote code injection
IAT hooks and inline function patching
This can be in both modes.
For example Dll injection can be done through APC.
 Return to “Newbie Questions”