Skip to content

{ Author Archives }

Google Public DNS 国内访问的性能

<br>

Change the default zoom mode in Google Chromium

As a WebKit based browser, Google Chrome use the text zoom mode as default zoom mode. It means, if you choose the Zoom -> Larger in the page context menu, or press the Ctrl + ‘+’ accelerator, all the text font size in the page will be increased by 20%. On the other hand, if [...]

Use 3rd party font render engine in Google Chromium

    As you know, there are some 3rd party font engines, such as GDI++, which could hook Windows font related APIs, and render font more smoother.     In my opinion, that engine seems better than ClearType or other build-in Windows font engine.      For Chromium, it use multi-processes architecture, a standalone renderer process will render the page in sandbox. It means that [...]

Virtualization Detection

As you know, virtualization is changing traditional IT infrastructure.VMware ESX server, the market leading hypervisor, has been accepted by customers of all sizes, including all of the Fortune 100; Microsoft Windows 2008 also integrate Hyper-V as a core server role; several open source projects also focus on it, such as Xen (Intel), KVM (Linux) and [...]

New challenge for malware detection: Virtualization Based rootkit

Several days ago, Invisible Things Lab release a new open source project which named Blue Pill, the first battle ready hardware virtualization based rootkits. Even the code is not sophisticated in this version; I also believe its impact is profound significance. It is a starting gun for new trend of rootkits and malware, which will [...]

Wireshark Dissector Plugin for Look’n'Stop

From a developer viewpoint, Look’n’Stop is a great personal firewall. Even their design may not very clearly for the normal user, but if you have enough background knowledge, it can be a powerful analyzer for the security threats. After a packet be allowed or blocked by rule, Look’n’Stop record it to log and provide a [...]

Write a debugger in 5 minutes with PyDbgEng

The debug mechanism of PyDbgEng is same to other Win32 debugger, just create or attach to a debuggee process and call WaitForEvent to process the debug events, such as create process, load module etc. #!/usr/bin/env pythonimport sysfrom PyDbgEng import * c = DebugClient() c.CreateProcess(“ftp.exe”, createFlags=[CreateFlags.ATTACH_ONLY_THIS_PROCESS, CreateFlags.NEW_CONSOLE]) while c.Control.WaitForEvent():pass The previous code is a simple debugger [...]

Get Adobe Flash playerPlugin by wpburn.com wordpress themes