Location:
Search - Detours 1.5
Search list
Description: 微软提供的截取Win32 API函数的开发包和例子1.5版本
Platform: |
Size: 604983 |
Author: |
Hits:
Description: 开始，运行输入 sigverif
通过检查数字签名就知道是不是ms的了。
主要使用Win32API实现验证应用或驱动程
WinVerifyTrust API。如果该API被Hook有没有其他方法验证应用或驱动程序是否通过微软签名？如果仅仅是被挂钩了IAT，那么可以直接通过函数指针调用。
如果是像Detours那样用jmp改写了函数头，可以通过读取WinTrust.dll中WinVerifyTrust的实现位置，恢复函数头的机器码。
不知道使用CryptoAPI，再使用指定的Microsoft证书
是不是更好一点，不容易被欺骗
怕调api被hook的话，自己将验证的代码写出来，用openssl应该容易点。
Platform: |
Size: 201211 |
Author: 下雨天 |
Hits:
Description: 微软提供的截取Win32 API函数的开发包和例子1.5版本-SDK and example in 1.5 version of hooking Win32 API which are provided by Microsoft
Platform: |
Size: 605184 |
Author: 站长 |
Hits:
Description: Microsoft的Detours 1.5v-Microsoft Detours 1.5V
Platform: |
Size: 530432 |
Author: 春 |
Hits:
Description: 微软API截获库，该代码也包含在MSDN的例子中。-intercepted the Microsoft API, the code also included in the MSDN examples.
Platform: |
Size: 609280 |
Author: fishxz |
Hits:
Description: 微软提供的截取Win32 API函数的开发包和例子 1.5版-Microsoft Win32 API function interception Development Kit version 1.5 and examples
Platform: |
Size: 529408 |
Author: rivershan |
Hits:
Description: 开始，运行输入 sigverif
通过检查数字签名就知道是不是ms的了。
主要使用Win32API实现验证应用或驱动程
WinVerifyTrust API。如果该API被Hook有没有其他方法验证应用或驱动程序是否通过微软签名？如果仅仅是被挂钩了IAT，那么可以直接通过函数指针调用。
如果是像Detours那样用jmp改写了函数头，可以通过读取WinTrust.dll中WinVerifyTrust的实现位置，恢复函数头的机器码。
不知道使用CryptoAPI，再使用指定的Microsoft证书
是不是更好一点，不容易被欺骗
怕调api被hook的话，自己将验证的代码写出来，用openssl应该容易点。-Start, Run enter sigverif by checking the digital signature is not on the know of the ms. Win32API realize the main use of the application or driver to verify WinVerifyTrust API. If the API was Hook has no other way to verify whether the application or driver through Microsoft Signed? If merely being linked to the IAT, you can call directly through the function pointer. If it is used as the Detours as to alter the function jmp head, can be read in WinVerifyTrust Wintrust.dll realize the location, the restoration of function of the binary header. Do not know the use of CryptoAPI, and then use the specified certificate is not Microsoft a little better, not easy to be deceived by fear api tune hook, then he would write the code to verify, using openssl should be easy points.
Platform: |
Size: 200704 |
Author: 齐欢乐 |
Hits:
Description: detours 1.5 for vc6 .h and .lib
不需要自己编译-detours 1.5 for vc6 .h and .lib
compiled version
Platform: |
Size: 62464 |
Author: alaphate |
Hits:
Description: 一个拦截CreateProcess函数，不允许创建进程的程序例子！
Platform: |
Size: 508928 |
Author: 解寒瑜 |
Hits:
Description: detours库for VC6.0, 这是1.5版本的。-detoursforVC6.0
Platform: |
Size: 48128 |
Author: 程黄一男 |
Hits:
Description: Detours ，希望对大家有用
Platform: |
Size: 48128 |
Author: c-king |
Hits:
Description: php操作mysql，新手入门时可以参考的东西，嗯方便新手走很多弯路，可以值得拥有-php Operation mysql, beginners can refer to something, ah take a lot of detours to facilitate novice can worth having
Platform: |
Size: 1024 |
Author: Mine |
Hits:
Description: c程序设计参考资料，为设计者提供经验参考，希望能够在设计时少走弯路。-c programming reference, providing designers with experience in reference to the hope in the design of detours.
Platform: |
Size: 1744896 |
Author: lihua |
Hits:
Description: 微软的API拦截的函数库，detours教材，适用于WindowNt系统-detours API
Platform: |
Size: 605184 |
Author: asa |
Hits:
Description: 一、Detours库的来历及下载： Detours库类似于WTL的来历，是由Galen Hunt and Doug Brubacher自己开发出来，于99年7月发表在一篇名为《Detours: Binary Interception of Win32 Functions.》的论文中。基本原理是改写函数的头5个字节（因为一般函数开头都是保存堆栈环境的三条指令共5个字节：8B FF 55 8B EC）为一条跳转指令，直接跳转到自己的函数开头，从而实现API拦截的。后来得到MS的支持并在其网站上提供下载空间：
-Detours origins of the library and download: Detours library similar to the origins of the WTL developed by Galen Hunt and Doug Brubacher, published on July 99 in an article entitled "Detours: Binary Interception of the Win32 Functions." The papers. The basic principle is that the first five bytes of the rewrite function (three instructions to save the stack environment since the beginning of the general function of 5 bytes: 8B FF 55 8B EC) for a jump instruction to jump directly to the beginning of the function , enabling API interception. Later MS support and download the space provided on its website:
Platform: |
Size: 49152 |
Author: 田戈 |
Hits:
Description: 单片机开发，是初学者最好的阅读书籍之一，会让初学单片机的学子们少走弯路-SCM is best for beginners to read one of the books, let beginners SCM students who detours
Platform: |
Size: 2568192 |
Author: 姚志远 |
Hits:
Description: 为什么选择黑帽seo培训
黑帽seo培训是学习黑帽seo最快的方式，因为别人花了几年时间研究出来的黑帽seo优化技术，如果进行黑帽seo系统培训，你可能用几个星期就学会了，黑帽seo培训大大节省了学习黑帽seo所耗费的时间，而且因为有人指导，可以少走很多弯路，加上自己后期的黑帽seo实战经验，可以快速的融入黑帽seo行业。大幅提高自身的黑帽seo技术水平。
【黑帽学习网www.heimaoxuexi.com】黑帽seo技术从入门到实战教程，零基础学习无负担！最新的黑帽SEO代码,黑帽seo技术,黑帽seo培训,零基础学习黑帽seo无负担,解决各行业关键词无排名的问题，迎合搜索引擎算法实现快速排名的目的，黑帽seo技术、泛解析、泛二级站群、泛目录、新闻源劫持、寄生虫繁殖、批量生成百万目录、二级目录劫持、快照劫持、权重劫持等上百种黑帽seo技术代码视频教程；
【黑帽学习网】黑帽seo技术交流论坛工具视频区http://www.heimaoxuexi.com/forum-2-1.html
黑帽学习网是交流和学习黑帽seo的好地方，遇到问题多交流，交流才能进步，多请教其他朋友，当你解决了绝大多数的问题的时候，你会发现你其实早已和我一样是黑帽seo高手了。-Why choose black hat seo training
Black hat seo black hat seo training is to learn the fastest way, because people spent years finding out the black hat seo optimization techniques, if the black hat seo training system, you might learn a few weeks, Black Hat seo training saves learning black hat seo time-consuming, but also because it was the guide, you can take a lot less detours, coupled with his black hat seo late practical experience, can quickly integrate into the black hat seo industry. A substantial increase in their level of black hat seo techniques.
[Black Hat Learning Network www.heimaoxuexi.com] black hat seo techniques from entry to the combat tutorial, zero-based learning without the burden! The latest black hat SEO code, black hat seo techniques black hat seo training, zero-based learning black hat seo without the burden of solving the industry keywords rank no problem to meet the search engine ranking algorithms aim to achieve rapid, black hat seo techniques Pan reso
Platform: |
Size: 302080 |
Author: 黑帽 |
Hits:
Description: detours-1,5 微软提供的截取Win32 API函数的开发包和例子1,5版本-Detours- 1, 5 intercept Win32 API function provided by the Microsoft development kit and example 1, 5 version
Platform: |
Size: 598016 |
Author: eatch |
Hits:
Description: detours-1,5 微软提供的截取Win32 API函数的开发包和例子1,5版本-Detours- 1, 5 intercept Win32 API function provided by the Microsoft development kit and example 1, 5 version
Platform: |
Size: 462848 |
Author: eatch |
Hits:
Description: detours-1,5 微软提供的截取Win32 API函数的开发包和例子1,5版本()
Platform: |
Size: 461824 |
Author: rataxrpb |
Hits: