search for: mkzero

Displaying 6 results from an estimated 6 matches for "mkzero".

2014 Jan 10
4
[PATCH] Add a minimal hive with "special" keys and values
--- images/README | 15 +++++++++++++++ images/mkzero/Makefile | 7 +++++++ images/mkzero/mkzero.c | 48 ++++++++++++++++++++++++++++++++++++++++++++++++ images/special | Bin 0 -> 8192 bytes 4 files changed, 70 insertions(+) create mode 100644 images/mkzero/Makefile create mode 100644 images/mkzero/mkzero.c create mode 100644 images/...
2014 Jan 13
0
Re: [PATCH 1/7] Add a minimal hive with "special" keys and values
On Sat, Jan 11, 2014 at 12:12:46AM +0100, Hilko Bengen wrote: > --- > images/README | 14 ++++++++++++ > images/mkzero/Makefile | 9 ++++++++ > images/mkzero/mkzero.c | 59 +++++++++++++++++++++++++++++++++++++++++++++++++ > images/special | Bin 0 -> 8192 bytes > 4 files changed, 82 insertions(+) > create mode 100644 images/mkzero/Makefile > create mode 100644 images/mkzero/mkzero.c...
2014 Jan 10
14
[PATCH 1/7] Add a minimal hive with "special" keys and values
--- images/README | 14 ++++++++++++ images/mkzero/Makefile | 9 ++++++++ images/mkzero/mkzero.c | 59 +++++++++++++++++++++++++++++++++++++++++++++++++ images/special | Bin 0 -> 8192 bytes 4 files changed, 82 insertions(+) create mode 100644 images/mkzero/Makefile create mode 100644 images/mkzero/mkzero.c create mode 100644 image...
2014 Jan 14
2
Re: [PATCH 1/7] Add a minimal hive with "special" keys and values
...aused enough troubles to warrant another test hive? --Alex On Mon, Jan 13, 2014 at 8:18 AM, Richard W.M. Jones <rjones@redhat.com>wrote: > On Sat, Jan 11, 2014 at 12:12:46AM +0100, Hilko Bengen wrote: > > --- > > images/README | 14 ++++++++++++ > > images/mkzero/Makefile | 9 ++++++++ > > images/mkzero/mkzero.c | 59 > +++++++++++++++++++++++++++++++++++++++++++++++++ > > images/special | Bin 0 -> 8192 bytes > > 4 files changed, 82 insertions(+) > > create mode 100644 images/mkzero/Makefile > > create mode...
2014 Jan 08
5
hivex: Make node names and value names with embedded null characters accessible
On Windows, there exist at least two APIs for dealing with the Registry: The Win32 API (RegCreateKeyA, RegCreateKeyW, etc.) works with null-terminated ASCII or UTF-16 strings. The native API (ZwCreateKey, etc.), on the other hand works with UTF-16 strings that are stored as buffers+length and may contain null characters. Malware authors have been relying on the Win32 API's inability to
2014 Jan 10
0
Re: [PATCH] Add a minimal hive with "special" keys and values
On Fri, Jan 10, 2014 at 01:14:51AM +0100, Hilko Bengen wrote: > + was created using the 'mkzero/mkzero.c'. (\0 = zero character) Extra whitespace at the end of this ^ line ... > + InitializeObjectAttributes (&key_obj, &key_name, .. and this line. --- So there's no problem with adding this test data, but are you planning to also add some tests :-? Rich. -- Richard...