Topic created on: October 19, 2009 16:14 CDT by Genius.
Hello there, want to know anti-rootkit techniques for writing an anti-rootkit software .
please give your advices .
and which language do you think is the best for writing an anti-rootkit ?
thnx .
> and which language do you think is the best for writing an anti-rootkit ?
> thnx .
Although it is totally system programming job that implies C/C++ but actually you are the one that can decide on, having an eye on your goals, extensibility, platform, architecture and design issues.
Hello,
thnx sepulo, yeah, I'm reading the greg's book on rootkits .
but, in fact this book have topics that more related to writing and using techniques for producing Rootkits, but the things I want to know is anti(!) rootkit techniques .
in fact a Programmer / Hacker like me that wants to write an anti-rootkit must know all aspect, both the intruder and the Good-Guy viewpoint .
the rootkit book will give the reader the intruder aspect more the good-guy aspect .
the last chapter introduced some anti-rootkit techniques but it's not enough .
cheers ,
Generally speaking - knowing one half of the coin is the best you will do. It is, as they say, up to the reader to deduce the other half. If you know how someone is going to do something, you must plan and build your own defense and think through it like an attacker.
yeah, both of you are right, I'm agree with you .
well, I think first I must understand the full concepts of rootkits, so after wirte a rootkit (kernel mode) I can learn defense vectors as well,
thnx .
I'd also recommend "The Rootkit Arsenal: Escape and Evasion in the Dark Corners of the System" by Bill Bluden. I'm reading through it right now and I find it very well written and thorough (908 pages).