Location:
Search - hook api
Search list
Description: Windows核心编程随书代码,
Windows核心编程一书介绍有高级Dll技术,API Hook, 以及VC异常处理(__try-__finally)等等, 是学习Windows系统编程的很好的资料-core Windows programming code with books, core Programming Windows book about a senior Dll technology, API Hook, Exception Handling and VC (__try- __finally), etc., learning Windows Programming good information
Platform: |
Size: 230400 |
Author: 白海 |
Hits:
Description: DLL内存映射HOOK示例代码v1.0.rar-DLL memory mapping HOOK sample code v1.0.rar
Platform: |
Size: 81920 |
Author: guweijie |
Hits:
Description: 这个是本人上传的EXE所须的DLL，他是一个全局的钩子监视指定的API，捎做修改就是一个进程主入的东西-this is the upload EXE required DLL, He is a common hook surveillance designated API, because we do is a process of change into the main things
Platform: |
Size: 7168 |
Author: 于军亮 |
Hits:
Description: api钩子
好像比较好用
具体没有看懂
代码还是比较完整的-api hook seems quite handy not understand the specific code or relatively complete
Platform: |
Size: 23552 |
Author: |
Hits:
Description: 文件监测钩子
注入DLL使用的是 CreateRemoteThread 跨进程建立对DLL 的加载-document monitoring hook into DLL using the inter-process CreateRemoteThread establish the right DLL loading
Platform: |
Size: 31744 |
Author: zhouyan |
Hits:
Description: 详细讲解windows api的挂接和hook技术，文章由 kanxue斑竹北极星提供，内有详细说明和源码，源码是vc的-elaborate on the windows api articulated and hook technology, The article illustrated by kanxue Polaris provided, with detailed descriptions and source code, the source code is vc
Platform: |
Size: 310272 |
Author: |
Hits:
Description: 我在XP下用过detour,也是用钩子将dll注入到其他进程进行API拦截，当时拦截的是 ShowWindow以及文件操作的一些API，感觉没什么问题阿.你可以先用Detour拦截一下其他的API试试，比如 CreateProcess,这个API我拦截过，Detour能拦截的
-I used the XP detour. also used to hook dll injected into other processes API interception, then intercept the ShowWindow and some file manipulation API, A feeling no problems. You can use Detour to intercept a few other API try. For example CreateProcess, I intercept the API that can intercept the Detour
Platform: |
Size: 2048 |
Author: byron |
Hits:
Description: "process wide":
some demos about hooking APIs/code in your own process
OS independent
"system wide":
several demos about system wide API hooking (using hook dlls)
OS independent
"system wide - win9x only":
one demo which shows a special system wide hooking method
win9x only
-"wide process" : some demos about hooking APIs/code in your own p rocess OS independent "system wide" : several demos about system wide API hooking (us ing hook dlls) OS independent "system wide-win 9x only ": one demo which shows a special system wide hooki Vi only method win9x
Platform: |
Size: 1070080 |
Author: 万俟雅言 |
Hits:
Description: 自己写的API－Hook。hook的函数是CreateProcessA和CreateProcessW。就是说可以检测进程创建。还有2处不完善。一个是创建程序的路径没能很好的显示。另一个退出时有点系统异常。-himself wrote the API- Hook. The hook function is CreateProcessA and CreateProcessW. Say can detect the creation process. There are two imperfect. One is to establish procedures for the path failed to show good. Another system to pull out a bit unusual.
Platform: |
Size: 142336 |
Author: 林风 |
Hits:
Description: 微软公司的拦截api开发包:
All Detours functions are compatible with all x86 version of Windows NT,
Windows 2000, and Windows XP. However, under Windows 95, Windows 98, and
Windows ME, the DetourFunction* APIS do not work unless the program is
running under a debugger (the process was created with the DEBUG_PROCESS flag
on the call to the CreateProcess* APIs). Since most programs are not typically
run under a debugger, the DetourFunction* APIs do not work for most programs
on Win9x platforms.-Microsoft's interception api development kits : All Detours functions are compatible with all x 86 version of Windows NT, Windows 2000, and Windows XP. However, under Windows 95, Windows 98 and Windows ME,* DetourFunction the APIS do not work unless the program is running under a debugger (the proces 's was created with the flag on the DEBUG_PROCESS call to the CreateProcess* APIs). Since most pr ograms are not typically run under a debugger. the DetourFunction* APIs do not work for most pr ograms on Win9x platforms.
Platform: |
Size: 529408 |
Author: 摩尔 |
Hits:
Description: Win32 Kernel Rootkits modify the behaviour of the system by Kernel Native API hooking. This technique is typically implemented by modifying the ServiceTable entries in the Service Descriptor Table (SDT). 有关钩子-Win32 Kernel Rootkits modify the behaviou r of the system by Native Kernel API hooking. Thi 's technique is typically implemented by modify ing the ServiceTable entries in the Service Des criptor Table (SDT). on the hook
Platform: |
Size: 9216 |
Author: wind |
Hits:
Description: 用VC++ Hook技术实现屏幕取词.它是利用调试技术编写成的API钩子。比起16位下传统的入口代码改写技术，它是没有多线程问题的，而且能够拦截LoadLibrary/GetProcAddress完成的API显式调用。-VC Hook Capture Characters from Screen Technology. It is testing the use of technology into the preparation of the API hook. Compared to the traditional 16 under the entrance to rewrite code technology, it is not multithreaded problems. and can intercept LoadLibrary/GetProcAddress completed API Explicit call.
Platform: |
Size: 371712 |
Author: tanglongsh |
Hits:
Description: 目录监视，当目录修改时可以通知用户，通过对文件系统api hook实现-directory surveillance, directory can be modified to notify the user through the file system to achieve api hook
Platform: |
Size: 18432 |
Author: kair |
Hits:
Description: api refence book.very helpful
Platform: |
Size: 903168 |
Author: |
Hits:
Description: 完整的API HOOK技术演示完整源代码包！-API HOOK complete integrity of the source code technology demonstration package!
Platform: |
Size: 79872 |
Author: wqwqwq |
Hits:
Description: api hook process的教程，需要的可以下载看看，非常简单-api hook process guidelines can be downloaded in need to see, very simple
Platform: |
Size: 21504 |
Author: yiler |
Hits:
Description: windows API书中的一些例子实现-windows API to achieve some examples of the book
Platform: |
Size: 6600704 |
Author: 林立才 |
Hits:
Description: Defeating Kernel Native API Hookers内核层的强力书籍。大家可以学习学习。pure english的哦-Defeating Kernel Native API Hookers books strong inner nuclear layer. Everyone can learn. Oh the pure english
Platform: |
Size: 280576 |
Author: jason |
Hits:
Description: APIhook,可以利用API函数进行MESSAGEBOX的拦截-APIhook, can use the API function interception MESSAGEBOX
Platform: |
Size: 642048 |
Author: znbright |
Hits:
Description: 这是一个非常好的内核级HOOK API的例子，想看看效果里面的bin文件夹可以有编译好的程序，其中内核监视没有实现，进程和注册表监视已经完成。这个代码绝对可以成功编译，因为hookzwcreateprocess里的代码是驱动设备程序的，所以编译环境的设置比较复杂，所以在这个压缩包里也包含了一个小教程，教你去搭建vc 6.0中开发驱动设备程序的环境，并且带了个样本。声明：这个程序运行XP下，在2000下会造成蓝屏-This is a very good kernel-level HOOK API examples, I would like to look at the effects inside the bin folder can be compiled procedures, which did not materialize to monitor the kernel, processes and registry monitoring has been completed. This code is absolutely able to successfully compile, because the code is hookzwcreateprocess in process-driven equipment, so the compiler set up the environment more complex, so in this compression bag also contains a small tutorial to teach you to build in vc 6.0 device driver development program environment, and带了个samples. Statement: This program runs under XP, in 2000 will cause a blue screen
Platform: |
Size: 81920 |
Author: zhenbiao |
Hits:
«
1
2
3
4
5
67
8
9
10
11
...
40
»