SDT Cleaner

[Nytro]

SDT Cleaner

[TABLE]

[TR]

[TH=bgcolor: #E6EBFF, align: left]Author: [/TH]

[TD] Nahuel C. Riva [/TD]

[/TR]

[TR]

[TH=bgcolor: #E6EBFF, align: left] Website: [/TH]

[TD=colspan: 2] Corelabs site [/TD]

[/TR]

[TR]

[TH=bgcolor: #E6EBFF, align: left] Current version: [/TH]

[TD=colspan: 2] 1.0 [/TD]

[/TR]

[TR]

[TH=bgcolor: #E6EBFF, align: left] Last updated: [/TH]

[TD=colspan: 2]

[/TD]

[/TR]

[TR]

[TH=bgcolor: #E6EBFF, align: left] Direct D/L link: [/TH]

[TD=colspan: 2] Locally archived copy[/TD]

[/TR]

[/TABLE]

SDT Cleaner is a tool that intends to clean the SSDT (system service descriptor table) from hooks.

* The SDT Cleaner allows you to clean hooks installed by Anti-Virus and Firewalls.

* This little tool (in this first release) tries to collect info from your current kernel and then switches to kernel land and if there are any hooks in SSDT, this tool will replace them with the original entries.

Download:

http://corelabs.coresecurity.com/index.php?module=Wiki&action=attachment&type=tool&page=SDT_Cleaner&file=SDTCleaner-v1.0.zip

Sursa: Category:Kernel Hook Detection Tools - Collaborative RCE Tool Library