Location:
Search - detour
Search list
Description: 前两天有个朋友想让我帮做个ApiHook的东西，公司的网较慢，只能搜国内网站，结果搜了n个没有完整原代码，极度郁闷，现转一个codeproject的原代码，以后也方便自己下载使用。
说明一下，这个代码在CodeProject有下，代码我大致翻了一下，只挂引入表的函数，注入有SetWindowHookEx和CreateRemoteThread两种方式，进程枚举也区分了不同系统下使用的psai和toolhelp，另外为了获得Process的创建消息，做了一个驱动来注册回调函数，总的来说，在注入部分做得相当棒，如果想挂各种函
数，可以结合detour使用。
-A couple of days ago a friend wanted me to help be a ApiHook things, the company' s Net slow, can only be found internally website, the results of the n-found no complete source code, an extremely depressing, it is a codeproject to the original code, after Convenience also download their own use. Explain that this code has CodeProject, the code I am generally turned a little, only linked to the introduction of the function table into SetWindowHookEx and CreateRemoteThread have two ways, the process of enumeration to distinguish between the different systems are used psai and toolhelp, the other in order to Process to create access to the message, make a drive to register a callback function, in general, has done quite a part in the injection rod, if want to hang a variety of functions, can be combined to use detour.
Platform: |
Size: 68608 |
Author: szg |
Hits:
Description: 代码我大致翻了一下，只挂引入表的函数，注入有SetWindowHookEx和CreateRemoteThread两种方式，进程枚举也区分了不同系统下使用的psai和toolhelp，另外为了获得Process的创建消息，做了一个驱动来注册回调函数，总的来说，在注入部分做得相当棒，如果想挂各种函
数，可以结合detour使用。
-Code more or less turned me a little, only linked to the introduction of the function table into SetWindowHookEx and CreateRemoteThread have two ways, the process of enumeration to distinguish between the different systems are used psai and toolhelp, the other in order to obtain the creation of Process message, make a driver to register a callback function, in general, has done quite a part in the injection rod, if want to hang a variety of functions, can be combined to use detour.
Platform: |
Size: 7168 |
Author: winj |
Hits:
Description: 能够找出给种类型的系统Hook,包括IAT表，SSDT表等相关的钩子-VICE is a tool to find hooks.
Features include:
1. Looks for people hooking IAT s.
2. Looks for people hooking functions in-line aka detouring.
3. Looks for hooks in the System Call Table. Thanks to Tan perhaps it will fix the table in the future.
4. Looks for detour hooks in the System Call Table functions themselves.
5. Looks for people hooking IRP_MJ table in drivers. This is configurable by driver.ini.
Platform: |
Size: 67584 |
Author: 袁晓辉 |
Hits:
Description: 这篇论文是对医学分割的一个综述,能避免我们走很多弯路,现和大家分享-This paper is an overview of the medical division, a lot of us can avoid the detour, it is to share
Platform: |
Size: 296960 |
Author: 周想 |
Hits:
Description: 个ApiHook的东西
这个代码在CodeProject有下，只挂引入表的函数，注入有SetWindowHookEx和CreateRemoteThread两种方式，进程枚举也区分了不同系统下使用的psai和toolhelp，另外为了获得Process的创建消息，做了一个驱动来注册回调函数，总的来说，在注入部分做得相当棒，如果想挂各种函
数，可以结合detour使用。
-This code has CodeProject, only linked to the introduction of the function table into SetWindowHookEx and CreateRemoteThread are two ways, the process of enumeration to distinguish between the different systems are used psai and toolhelp, another founder of Process in order to obtain information, so a driver to register a callback function, in general, has done quite a part in the injection rod, if you want to hang a variety of functions can be combined with the use of detour.
Platform: |
Size: 67584 |
Author: chenxq |
Hits:
Description: 找了很长时间终于找到如何获取硬盘序列号的方法，为避免同行少走了些弯路，因此将源码上传供大家参阅。-Looking for a long time finally found how to access the hard disk serial number of ways, in order to avoid taking a little less peer detour, it will upload source code for all to see.
Platform: |
Size: 39936 |
Author: margon |
Hits:
Description: 钩子实现接受所有的按键消息，运行在后台不显示出来。里面有说明文档-Hook to achieve access to all the key news, running in the background is not displayed. There is documentation
Platform: |
Size: 326656 |
Author: 方南 |
Hits:
Description: 本书是一本有关单片机学习的入门读物，主要目标是使用尽量少的篇幅，对单片机的使用进行从最简单的知识到基础应用进行一个完整的阐述，并指出进阶方法，使读者在有限的学习时间内，对单片机的完全不了解实现快速上手，为读者减少学习过程中所走的弯路，并形成一个对单片机的整体认识。
读者只需要会C语言和简单的数电、模电知识，就可以开始单片机开发的旅程了-This book is a study of the single-chip primer, the main goal is to use the space as little as possible on the use of single-chip from the simple application of knowledge to the foundation of a complete and pointed out that the advanced methods, to enable readers to learn in a limited time, the total lack of understanding of the single-chip fast start for the reader to reduce the learning process by taking a detour, and the formation of a general awareness of SCM. Readers will only need a simple C language and the number of electricity, electric mode of knowledge, you can start the journey to develop a single chip
Platform: |
Size: 2104320 |
Author: arrey |
Hits:
Description: 1、设计要求
（1）自动寻迹小车从安全区域启动。
（2）小车按指定路线运行，自动区分直线轨道和弯路轨道，在指定弯路处拐弯，实现灵活前进、转弯、倒退等功能，在轨道上划出设定的地图。
-1, the design requirements (1) Auto-tracing car security zone from the start. (2) designated route by car to run automatically distinguish between the track and made a detour straight track, turning in the designated detour Department to achieve a flexible forward, turn, back and other functions, in the orbit of the map drawing settings.
Platform: |
Size: 140288 |
Author: 闫石 |
Hits:
Description: CrippleHS 為 Bypass HS CRC 的重點 -Bypass HS CRC for CrippleHS focus!!
Platform: |
Size: 2159616 |
Author: Yttuir |
Hits:
Description: 利用微软提供的Detour开发库，拦截DLL~-intercept dll through the development kit provided by microsoft
Platform: |
Size: 1480704 |
Author: 若欣 |
Hits:
Description: 这个代码在CodeProject有下，代码我大致翻了一下，只挂引入表的函数，注入有SetWindowHookEx和CreateRemoteThread两种方式，进程枚举也区分了不同系统下使用的psai和toolhelp，另外为了获得Process的创建消息，做了一个驱动来注册回调函数，总的来说，在注入部分做得相当棒，如果想挂各种函
数，可以结合detour使用。-Under this code in CodeProject with the code I generally turned a bit, only the introduction of the table hung a function of injection there SetWindowHookEx and CreateRemoteThread in two ways, the process of enumeration is also a distinction between different systems using the psai and toolhelp, another Process in order to obtain the create a message, made a drive to register a callback function, in general, at some done quite into the stick, if you want to hang a variety of letter
Number, can combine to use detour.
Platform: |
Size: 68608 |
Author: 望里 |
Hits:
Description: 学习poi技术的一些总结，Word文档，供初学者一些参考，想了解更多的绕行！-Some of the technology to learn poi summary, Word documents, some reference for beginners, want to learn more detour!
Platform: |
Size: 167936 |
Author: 张三 |
Hits:
Description: 最近自己写的一个基于事件的winsock封装类, 适用于想了解socket编程的新手(有经验的牛人们请绕路,哈哈)-Recent himself wrote an event-based winsock wrapper classes for the novice would like to know socket programming (and experienced cattle people would ask detour, ha ha)
Platform: |
Size: 5120 |
Author: zack |
Hits:
Description: 微软hook 库 sdk 开发包 64位版本，微软hook 库 sdk 开发包 64位版本-Microsoft hook library sdk development kit 64-bit version of Microsoft hook library sdk development kit 64-bit version of the
Platform: |
Size: 114688 |
Author: 水月 |
Hits:
Description: GPRS 开发指导手册
这是我在实际的对GPRS开发应用过程中，积累的一些经验和笔记。算是非常实用的，相信会给你一下参考价值，让你少走一些我走个的弯路。-"GPRS Developer guide\r\nThis is my actual development and application of the GPRS process, the accumulated some experience and notes. Be very useful, and I believe will give you what reference value, so you take something I take a little detour."
Platform: |
Size: 195584 |
Author: shentu |
Hits:
Description: 微软研究院Detour开发包之API拦截技术，一个详细的分析文档！-Detour Development Kit for Microsoft Research API interception technology, a detailed analysis of the document!
Platform: |
Size: 268288 |
Author: diy20500 |
Hits:
Description: 利用微软Detour学习HOOK任务管理其，是进程不能被任务管理器结束，主要HOOK的是CreatePrcess，很好的一个模板，大家HOOK其它函数时候直接套用就OK了-HOOK learning tasks using Microsoft manage its Detour is a process that can not be the end of Task Manager, the main HOOK is CreatePrcess, a good template, you HOOK directly applied to other functions OK when the
Platform: |
Size: 82944 |
Author: batcom |
Hits:
Description: 我自己写的QQ和MSN语音聊天窃听器，可以把语音聊天内容录下来，可以保存成PCM, MP3,WAV等格式。
用到了API HOOK知识还有Detour库，值得一看哦。
用VC6.0开发-I wrote it myself QQ and MSN voice chat listening devices, voice chat can be recorded, you can save as PCM, MP3, WAV and other formats. Also used the API HOOK Detour library of knowledge, worth, oh. Development with VC6.0
Platform: |
Size: 131072 |
Author: 挑灯看剑 |
Hits:
Description: Visual DuxDebugger is a debugger disassembler for Windows 64-bit. Main features: Fully support 64-bit native processes, Fully support 64-bit .NET processes, Full code analysis, Full memory analysis, Code edition, Memory edition, Module export formats (EXE/DLL/CSV), Debug multiple processes, Debug multiple child processes, Detour exported functions (thread-safe), Detour COM methods (thread-safe)
Platform: |
Size: 2101248 |
Author: shaka |
Hits: