求高手指教

xhlhsu

我在毛豆论坛看到一款测试工具http://download.comodo.com/securitytests/CLT.zip ，为什么DLL Injection 1一直显示的是testing，如何设置可以测试通过。
DLL Injection 1 - Injects DLL into trusted process (svchost.exe) by injecting APC on LoadLibraryExA with "dll.dll" as a param. The string "dll.dll" is not written into process memory, it's from the ntdll.dll export table which has the same address in all processes. The APC is injected into second thread of the svchost.exe which is always in alertable state.
其余各项皆处于保护状态。

[ 本帖最后由 xhlhsu 于 2008-10-25 21:12 编辑 ]

Magis

有兴趣的话看看这个帖子http://bbs.kafan.cn/viewthread.php?tid=351685&highlight=CLT，好像确实是这样，求解。

xhlhsu

谢谢，看样子就是一直testing