From Collaborative RCE Tool Library
IceStealth
| Tool name: | IceStealth |
|
||
|---|---|---|---|---|
| Author: | Daniel Steinhäußer | |||
| Website: | http://www.woodmann.com/forum/showthread.php?t=12131 | |||
| Current version: | 1.69 | |||
| Last updated: | August 28, 2009 | |||
| Direct D/L link: | Locally archived copy | |||
| License type: | Free | |||
| Description: | IceStealth is a SoftICE hiding tool, that should protect from: CreateFileA, CreateFileW, NtCreateFile, also nmtrans.dll wont find SoftICE with these methods NtQueryDirectoryObject NtQueryObject OpenServiceA, OpenServiceW, EnumServicesStatusA,EnumServicesStatusW,EnumServicesStatusExA, EnumServicesStatusExW UnhandledExceptionFilter (2 Options) SEH BPM Protection BPM Protection NtQuerySystemInformation int 41 killed + DPL 0 int 1 DPL 0 Basic Registry Protection (if ever needed) (RegOpenKeyExA, RegOpenKeyExW, RegOpenKeyA, RegOpenKeyW) SaveDisk Protection |
|||
| Related URLs: | No related URLs have been submitted for this tool yet | |||
Feed containing all updates for this tool.
(please also edit it if you think it fits well in some additional category, since this can also be controlled)
You are welcome to add your own useful notes about this tool, for others to see!