Location:
Search - delphi api hook
Search list
Description: 制作API钩子,截获API的源码-production API hook to intercept the source API
Platform: |
Size: 176128 |
Author: 何心 |
Hits:
Description: 截获socket的api hook-intercepted socket api hook
Platform: |
Size: 395264 |
Author: 陈大 |
Hits:
Description: const WM_UNSUBCLASS = WM_USER + 2001 //卸载子类化消息 WM_SENDDATA = WM_USER + 2003 //收到要发送新数据包的消息 type PMyDLLVar = ^TMyDLLVar //用来共享的内存数据结构 TMyDLLVar = record SubClass: Boolean //是否已经子类化 HookWindow, SpyWindow: LongWORD //要安装HOOK的窗口及用于接收消息的窗口 hHook: LongWORD //HOOK句柄 OldWndProc: pointer //旧的窗口过程 end-const WM_UNSUBCLASS = WM_USER 2001// Uninstall subclass of news WM_SENDDATA = WM_USER 2003// received new data to be sent information packets type PMyDLLVar = ^ TMyDLLVar// used to share memory data structure TMyDLLVar = record SubClass : Boolean// if the child class of HookWindow, SpyWindow : LongWORD// HOOK to install a window for receiving news and the window hHook : LongWORD// handle OldWndProc HOOK : pointer// old process end window
Platform: |
Size: 198656 |
Author: 黄春标 |
Hits:
Description: delphi对windows高级编程的很多例子：delphi实现屏幕落雪效果，按键转汉字,模拟输入法程序，利用消息钩子屏蔽定时器，利用窗口过程钩子截获QQ账号，判断用户目前是否在操作电脑-the windows of many high-level programming examples : delphi screen snow effect keys to Chinese characters, analog input procedures, the use of news hook shielding timers, the process of using the window hook intercepted QQ account, judge whether the user to operate a computer ... .
Platform: |
Size: 3947520 |
Author: 张强 |
Hits:
Description: api钩子 截货了send还有recv函数-api hook cut also send a cargo recv function
Platform: |
Size: 342016 |
Author: |
Hits:
Description: Hook send and rev,查看send and recive内容，进而控制邮件发送。-Hook send and rev, send and recive View, and then the spammers.
Platform: |
Size: 254976 |
Author: |
Hits:
Description: "process wide":
some demos about hooking APIs/code in your own process
OS independent
"system wide":
several demos about system wide API hooking (using hook dlls)
OS independent
"system wide - win9x only":
one demo which shows a special system wide hooking method
win9x only
-"wide process" : some demos about hooking APIs/code in your own p rocess OS independent "system wide" : several demos about system wide API hooking (us ing hook dlls) OS independent "system wide-win 9x only ": one demo which shows a special system wide hooki Vi only method win9x
Platform: |
Size: 1070080 |
Author: 万俟雅言 |
Hits:
Description: 通过api和键盘钩子彻底屏蔽任务栏和开始菜单.txt/?ü齛pi和键盘钩子彻底屏蔽任务栏和开始菜单.txt/通过api和键盘钩子彻底屏蔽任务栏和开始菜单.txt-through api and keyboard hook completely shielding the task bar and start menu. Txt/api and through keyboard hook son completely shielding the task bar and start menu. txt/api and through keyboard hook completely shielding the task bar and start menu . txt/api and through keyboard hook completely shielding the task bar and start menu. txt
Platform: |
Size: 1024 |
Author: lin |
Hits:
Description: HOOK API单元文件源码。-HOOK API module source file.
Platform: |
Size: 2048 |
Author: |
Hits:
Description: delphi使用HOOK随心监视Windows-delphi using HOOK heart monitor Windows
Platform: |
Size: 6144 |
Author: linhuamao |
Hits:
Description: API HOOK实现进程保护 钩住进程API函数.在IS下可以结束进程！-API HOOK hook to protect the process of realization of the process of API functions. In the IS may be the end of the process!
Platform: |
Size: 41984 |
Author: 377826 |
Hits:
Description: 系统钩子与API截获,拦截NoCtrl+Alt+Del方法2-Hook and API interception, interception NoCtrl+ Alt+ Del Method 2
Platform: |
Size: 197632 |
Author: Hou |
Hits:
Description: 开始，运行输入 sigverif
通过检查数字签名就知道是不是ms的了。
主要使用Win32API实现验证应用或驱动程
WinVerifyTrust API。如果该API被Hook有没有其他方法验证应用或驱动程序是否通过微软签名？如果仅仅是被挂钩了IAT，那么可以直接通过函数指针调用。
如果是像Detours那样用jmp改写了函数头，可以通过读取WinTrust.dll中WinVerifyTrust的实现位置，恢复函数头的机器码。
不知道使用CryptoAPI，再使用指定的Microsoft证书
是不是更好一点，不容易被欺骗
怕调api被hook的话，自己将验证的代码写出来，用openssl应该容易点。-Start, Run enter sigverif by checking the digital signature is not on the know of the ms. Win32API realize the main use of the application or driver to verify WinVerifyTrust API. If the API was Hook has no other way to verify whether the application or driver through Microsoft Signed? If merely being linked to the IAT, you can call directly through the function pointer. If it is used as the Detours as to alter the function jmp head, can be read in WinVerifyTrust Wintrust.dll realize the location, the restoration of function of the binary header. Do not know the use of CryptoAPI, and then use the specified certificate is not Microsoft a little better, not easy to be deceived by fear api tune hook, then he would write the code to verify, using openssl should be easy points.
Platform: |
Size: 200704 |
Author: 齐欢乐 |
Hits:
Description: Hook Api Library 0.2 [Ring0&3] By Anskya
Email:Anskya@Gmail.com
ring3 inline hook For Api
Thank:
前29A高手也一直都是我的偶像...z0mbie大牛...这里膜拜一下
使用的LDE32引擎是翻译他老人家的...C->Delphi...
说明:
1.利用堆栈跳转
没有使用传统的jmp xxxx 长跳转,使用容易理解的push xxxx+ret
仔细看代码容易理解...封装完好.
2.内存补丁结构:
补丁1:|push xxx--钩子处理过程|ret|
补丁2:|保存原始补丁地址|保存原始地址代码长度|原始地址的代码|push xxxxxx|ret|
更新说明:
0.2:
支持Ring0 Inline Hook
0.1:
Ring3 Inline Hook
-Hook Api Library 0.2 [Ring0
Platform: |
Size: 6144 |
Author: david |
Hits:
Description: VC实现32位Windows 9x 陷阱式API Hook-VC realize 32-bit Windows 9x trap-style API Hook
Platform: |
Size: 183296 |
Author: qsn |
Hits:
Description: delphi 下使用hook的说明，学习原理使用，具体使用时需要改进-delphi Note the use of hook and learn the principle of the use of, the specific use needs to be improved
Platform: |
Size: 4096 |
Author: |
Hits:
Description: delphi 实现 API HOOK 的源码，可以获取socket网络数据，代码十分效率-delphi source code to achieve API HOOK, you can obtain the socket network data, the code is very efficient
Platform: |
Size: 2048 |
Author: Zcd |
Hits:
Description: Remote Adimin tool(Hook+API)-Remote Adimin tool(Hook+API)!!!!!
Platform: |
Size: 205824 |
Author: botrox |
Hits:
Description: api函数HOOK.
多个完整例子.
HOOK学习的好资料.-apihook.
very easy~
Platform: |
Size: 15360 |
Author: 正浩 |
Hits:
Description: Delphi IAT Hook API(沒使用到Dll，我打算用CreateRemoteThread來實現Hook，可以說還沒完成)-Delphi IAT Hook API
Platform: |
Size: 357376 |
Author: asd |
Hits: