Location:
Search - API HOOK
Search list
Description: 利用API HOOK 实现 Windows NT2000 32位取词-use Windows API HOOK NT2000 32 from words
Platform: |
Size: 212992 |
Author: 孙伟伟 |
Hits:
Description: 怎样让自己的程序进程不让别人强行关闭掉,拦截API函数，利用钩子拦截TerminateProcess这个API函数-how to let their own procedures process forced the closure of not allowing people to swap, intercepting API function, use the hook to intercept the TerminateProcess API
Platform: |
Size: 815104 |
Author: 无名 |
Hits:
Description: api refence book.very helpful
Platform: |
Size: 903168 |
Author: |
Hits:
Description: 完整的API HOOK技术演示完整源代码包！-API HOOK complete integrity of the source code technology demonstration package!
Platform: |
Size: 79872 |
Author: wqwqwq |
Hits:
Description: API Hooking Revealed
by Ivo Ivanov
Platform: |
Size: 311296 |
Author: qin lu |
Hits:
Description: Defeating Kernel Native API Hookers内核层的强力书籍。大家可以学习学习。pure english的哦-Defeating Kernel Native API Hookers books strong inner nuclear layer. Everyone can learn. Oh the pure english
Platform: |
Size: 280576 |
Author: jason |
Hits:
Description: APIhook,可以利用API函数进行MESSAGEBOX的拦截-APIhook, can use the API function interception MESSAGEBOX
Platform: |
Size: 642048 |
Author: znbright |
Hits:
Description: 这是一个非常好的内核级HOOK API的例子，想看看效果里面的bin文件夹可以有编译好的程序，其中内核监视没有实现，进程和注册表监视已经完成。这个代码绝对可以成功编译，因为hookzwcreateprocess里的代码是驱动设备程序的，所以编译环境的设置比较复杂，所以在这个压缩包里也包含了一个小教程，教你去搭建vc 6.0中开发驱动设备程序的环境，并且带了个样本。声明：这个程序运行XP下，在2000下会造成蓝屏-This is a very good kernel-level HOOK API examples, I would like to look at the effects inside the bin folder can be compiled procedures, which did not materialize to monitor the kernel, processes and registry monitoring has been completed. This code is absolutely able to successfully compile, because the code is hookzwcreateprocess in process-driven equipment, so the compiler set up the environment more complex, so in this compression bag also contains a small tutorial to teach you to build in vc 6.0 device driver development program environment, and带了个samples. Statement: This program runs under XP, in 2000 will cause a blue screen
Platform: |
Size: 81920 |
Author: zhenbiao |
Hits:
Description: delphi使用HOOK随心监视Windows-delphi using HOOK heart monitor Windows
Platform: |
Size: 6144 |
Author: linhuamao |
Hits:
Description: 与inject.rar程序配套的，注入到第三方进程中的程序，用来实现hook第三方指定API的功能-Matching procedures and inject.rar injected into third-party process procedures, used to hook a third party to achieve the specified API function
Platform: |
Size: 2417664 |
Author: 安丙春 |
Hits:
Description: ExcpHook is an open source (see license.txt) Exception Monitor for Windows made by Gynvael Coldwind (of Team Vexillium). t uses a ring0 driver to hook KiExceptionDispatch procedure to detect the exceptions, and then shows information about the exception on stdout (using the ring3 part of the program ofc).
The difference between this method, and the standard debug API method it that this method monitores all of XP processes, and the program does not have to attach to any other process to monitor it, hence it s harder to detect.
The code currently is considered as ALPHA, and it has been reported to BSoD sometimes (on multi core/cpu machines). Take Care!
Platform: |
Size: 53248 |
Author: 张京 |
Hits:
Description: HookAPIProcessGuard是一个使用API函数实现进程保护的简单例子，我们Hook了OpenProcess函数，就能够实现保护了！-HookAPIProcessGuard is a realization of the process of using the API function to protect the simple example, we Hook the OpenProcess function can be achieved to protect!
Platform: |
Size: 482304 |
Author: yeqing |
Hits:
Description: APIHook2-Windows API钩子源码及实例。-APIHook2-Windows API hook source code and examples.
Platform: |
Size: 37888 |
Author: along |
Hits:
Description: 系统钩子与API截获,拦截NoCtrl+Alt+Del方法2-Hook and API interception, interception NoCtrl+ Alt+ Del Method 2
Platform: |
Size: 197632 |
Author: Hou |
Hits:
Description: 演示如何windows hook sys api-Demonstrate how the windows hook sys api
Platform: |
Size: 7168 |
Author: focse |
Hits:
Description: 开始，运行输入 sigverif
通过检查数字签名就知道是不是ms的了。
主要使用Win32API实现验证应用或驱动程
WinVerifyTrust API。如果该API被Hook有没有其他方法验证应用或驱动程序是否通过微软签名？如果仅仅是被挂钩了IAT，那么可以直接通过函数指针调用。
如果是像Detours那样用jmp改写了函数头，可以通过读取WinTrust.dll中WinVerifyTrust的实现位置，恢复函数头的机器码。
不知道使用CryptoAPI，再使用指定的Microsoft证书
是不是更好一点，不容易被欺骗
怕调api被hook的话，自己将验证的代码写出来，用openssl应该容易点。-Start, Run enter sigverif by checking the digital signature is not on the know of the ms. Win32API realize the main use of the application or driver to verify WinVerifyTrust API. If the API was Hook has no other way to verify whether the application or driver through Microsoft Signed? If merely being linked to the IAT, you can call directly through the function pointer. If it is used as the Detours as to alter the function jmp head, can be read in WinVerifyTrust Wintrust.dll realize the location, the restoration of function of the binary header. Do not know the use of CryptoAPI, and then use the specified certificate is not Microsoft a little better, not easy to be deceived by fear api tune hook, then he would write the code to verify, using openssl should be easy points.
Platform: |
Size: 200704 |
Author: 齐欢乐 |
Hits:
Description: WinXP下API拦截代码,有兴趣的朋友可以研究下，是比较有借鉴意义的。-API to intercept the code under WinXP, interested friends can be studied, it is drawing on more significance.
Platform: |
Size: 291840 |
Author: 杨勇 |
Hits:
Description: 利用detours库对系统API进行拦截,VC++源码-Use detours library API to intercept the system, VC++ Source
Platform: |
Size: 55296 |
Author: zzq |
Hits:
Description: api挂接的一段源代码，通过c++类来实现，你只要通过对象调用函数即可-api articulated section of the source code through c++ category to achieve, you need only call the function through the object can be
Platform: |
Size: 7168 |
Author: wangwei |
Hits:
Description: 使用系统IAT表查找要Hook的函数地址，然后进行挂钩。本代码Hook的是TextOut函数。-IAT table to find using the system to Hook a function of address, and then proceed to link. Hook this code is the TextOut function.
Platform: |
Size: 37888 |
Author: 骆爽 |
Hits:
«
1
2
3
4
5
6
78
9
10
11
12
...
40
»