Location:
Search - hook process
Search list
Description: 用钩子实现捕获键盘后发出字母声音,完整的发声程序-achieve caught with hook keyboard letters issued after the voices audible integrity of the process
Platform: |
Size: 902850 |
Author: 柳心雨 |
Hits:
Description: There are numerous codes in the www to explain how to hook API functions inside a remote process. So, why creating another one ? This article is the first (I) part of a tool I m working on. This tools won t be too complex, so there is no need for a huge class hierarchy like in almost all other code, nor a hard coded assembly code. This tool is just a technical preview of what is possible to achieve, with QUICK and DIRTY \"put your functions here\" blocks.-There are numerous codes in the www to explain how to hook API functions inside a remote process. So, why creating another one This article is the first (I) part of a tool I m working on. This tools won t be too complex, so there is no need for a huge class hierarchy like in almost all other code, nor a hard coded assembly code. This tool is just a technical preview of what is possible to achieve, with QUICK and DIRTY \"put your functions here\" blocks.
Platform: |
Size: 8588 |
Author: 海天 |
Hits:
Description: 使用vs.net,c#开发的外挂程序， 利用全局键盘钩子激活外挂， 通过进程内存读写技术，实现扫雷和连连看3的外挂功能。-use vs.net, c # development of the external procedure, and use the keyboard hook overall external activation, through the process of reading and writing memory technology, and the 1000 block of Terry Avenue mine three of the external function.
Platform: |
Size: 17032 |
Author: 稷下剑圣 |
Hits:
Description: win32抛弃了win16的全局内存的概念,每个进程有自己独立的内存空间, 并且不受其他进程影响.这样一来所有代码都只能访问局部资源,但很显然有些 应用必须是全局的,比如你的hook,所以ms必须提供一种折衷的安全的方法.好 在windows中的dll正好可以解决这个问题.-win32 was abandoned on the overall situation of the concept of memory, each process has its own memory space, and not affect other processes. This one has all the code to access only to limited resources, but obviously some applications must be across the board, such as your hook, ms must provide a the compromise security measures. Fortunately, the windows dll is able to solve this problem.
Platform: |
Size: 111090 |
Author: szh |
Hits:
Description: 以debug方式hook进程的例子-Way to hook the process of debug example
Platform: |
Size: 48128 |
Author: 站长 |
Hits:
Description: 利用键盘钩子开发的按键发音程序 -use keyboard hook pronunciation keys to the development process
Platform: |
Size: 913408 |
Author: 高屾 |
Hits:
Description: 一个钩子函数的实现过程-hook function of a process to achieve
Platform: |
Size: 49152 |
Author: erya |
Hits:
Description: 用钩子实现捕获键盘后发出字母声音,完整的发声程序-achieve caught with hook keyboard letters issued after the voices audible integrity of the process
Platform: |
Size: 902144 |
Author: 柳心雨 |
Hits:
Description: 原理 1 截取屏幕，从而取得方块数据，然后搜索算法. 2 通过鼠标键盘钩子发送消息来消去. 3 腾讯反外挂作的很牛,连连看程序在接到鼠标点击消息的同时从驱动层判断有没有 点击消息,所以把0x00403291地址的内存锁定为0x00就可以让腾讯的凡外挂系统失效。 4 在消除过程中因为烟雾等特效的影响,中途按F9键分析结果很可能错误,谁有办法 解决这个问题一定要告诉我啊! 最好能取消动画特效,直接消去. 5 因为时间仓促,利用周末匆匆写完这个程序,所以代码极不规范,还请大家谅解.-screen, thereby obtaining the data block, then search algorithm. 2 hook through a mouse and keyboard to send messages eliminated. Tencent three anti- pylon for the very cattle, in the 1000 block of Terry Avenue procedures mouse clicks received information from the driver layer judgment has to click on, and hence to 0x00403291 the site of the 0x00 memory lock on the Tencent allow any external system failure. 4 in the elimination process because of the effects of smoke and other effects, halfway by F9 key results of the analysis may mistake, who has a solution to this problem must tell me ah! The best animation effects can be canceled, direct elimination. 5 because of the limited time, finished a weekend rush this process, substituting yards were highly irregular, please understanding.
Platform: |
Size: 218112 |
Author: 地地地 |
Hits:
Description: 一、思路分析
(一) 数据包的角度 (二) 钩子角度 1. 钩子简介 2. 程序流程 ；
二、 实现过程
(一) 定义宏
(二) 枚举进程找到QQ.exe
(三) 枚举所有窗口，找属于QQ.exe的窗口
(四) 获取用户名、密码、登陆按钮的句柄
(五) 创建钩子用的DLL
(六) 安装钩子-a thinking, analysis (1) the perspective of data packets (2) a point of the hook. Hook Introduction 2. Program flow; Two, the implementation process (1) definition of Acer (2) enumeration process to find Commander (3) Enumerate all the windows, looking for belonging to Commander the window (4) access to the user name, password, landing a handle button (5) the creation of the hook of DLL (6) Installation of the hook
Platform: |
Size: 72704 |
Author: 啊东 |
Hits:
Description: 使用钩子函数+DLL共享线程实现进程调用记录.记录文件保存为*.sys-use shared DLL function hook threaded process call records of achievement. Save the file to record*. sys
Platform: |
Size: 424960 |
Author: 陈玲玲 |
Hits:
Description: NtCreateProcessEx(HookAPI)
Platform: |
Size: 977920 |
Author: Tiam |
Hits:
Description:
HanGame木马VC源代码
外面流传的很多HANGAME的木马生成器 并不能获取到玩家的身上的钱数
我发的这个源码是VC写的 喜欢VC的朋友来研究研究吧
功能：
在win98/win2k/nt/xp/2003下都无进程
能准确截取
HANGAME 玩家登陆的游戏帐号 密码 游戏房间URL 随身钱数
无进程 通过80端口传递信息
主要是想让朋友们一起学习键盘钩子 老鸟就别看拉
是很一般的作品 目前还可以使用的-HanGame Trojan source code spread outside the many faces of Trojan generator is not access to the player's possession of money I made in the source code is written by the likes of VC VC friends to studies it functions : under the win98/win2k/nt/xp/2003 process accurately without interception faces players of the game landing account password URL game rooms without money players through the process of transmission of information 80 major ports wanted friends together to learn the keyboard hook on veterans Although Rafah is a very general entries also can use the
Platform: |
Size: 1300480 |
Author: 阳广元 |
Hits:
Description: 家都知道，当今的QQ病毒，都用了钩子技术。创建一个DLL，然后使用全局钩子；或者在QQ进程里插入一个DLL，后监测键盘或者是Windows消息，判断用户是否是用QQ聊天，并且是不是已经把信息送出。无DLL的QQ尾巴-home all know that today's QQ virus, has used a hook. To create a DLL, and then use the overall hook; QQ or in the process of inserting a DLL, after monitoring the keyboard or Windows news, judge whether the user is chatting with QQ, and it is not already sent the message. No DLL's QQ tail
Platform: |
Size: 44032 |
Author: 黄先生 |
Hits:
Description: 实现令人满意的风格统一的软件界面确实很难, 象网友提到的MessageBox、FileDialog、FontDialog、目录选择对话框等MFC内部甚至系统DLL内的对话框，要想让它变脸可不容易。有人说HOOK技术可以，HOOK技术确实可以，HOOK可以说是无孔不入，但HOOK的使用效率却是令人难以满意的，从目前大多数采HOOK技术的换肤软件使用情况来看，完全可以证明这一点。今天我们将讨论另外一技术来实现FileDialog的变脸，这种技术叫替换窗口过程法（注：本人杜撰）。
窗口过程函数是大多窗口都有的，它处理窗口中(包括子窗口)的每一个事件，替换窗口过程法与HOOK技术比起来孰强誰弱是很显然的，因为同一个HOOK只能拦截一个事件，处理起来相当费时，HOOK也有它的优势，但不是本文要讨论的。这里先让大家眼见为实，请看下图：-achieve satisfactory style reunification of the software interface is difficult. As netizen's MessageBox, FileDialog, FontDialog. Contents dialog, and other internal MFC DLL system even within the dialog box, in order to allow it faces no easy thing. Some say HOOK technology, the technology can really HOOK, HOOK can be said to be all-pervasive. However, the efficient use HOOK is unsatisfactory. from the most current mining technology HOOK skinnable software situation, we can prove this point. Today, we will discuss other technologies to achieve a FileDialog of independence, This technique called window replacement process (Note : I invented). Process window function is mostly window is the window handle it (including sub-window) per one incident, window replacement process of law and t
Platform: |
Size: 759808 |
Author: 孙乾坤 |
Hits:
Description: QQ连连看外挂源码 20050609qq
连连看外挂简介
原理
1 截取屏幕，从而取得方块数据，然后搜索算法.
2 通过鼠标键盘钩子发送消息来消去.
3 腾讯反外挂作的很牛,连连看程序在接到鼠标点击消息的同时从驱动层判断有没有
点击消息,所以把0x00403291地址的内存锁定为0x00就可以让腾讯的凡外挂系统失效。
4 在消除过程中因为烟雾等特效的影响,中途按F9键分析结果很可能错误,谁有办法
解决这个问题一定要告诉我啊! 最好能取消动画特效,直接消去.
5 因为时间仓促,利用周末匆匆写完这个程序,所以代码极不规范,还请大家谅解.-QQ Lianliankan extrapolated source 20050609qq Lianliankan pylon on an interception principle screen, obtain data box, Then search algorithm. 2 mouse through the keyboard hook Send Message to eliminate. 3 Tencent anti- pylon for the very cattle, Lianliankan procedures for the receipt of information a mouse click at the same time from the driver layer judgment it is not news. Therefore 0 x00403291 address to the memory lock on the 0x00 allows Tencent Van extrapolated system failure. Four in the elimination process because of the smoke, and other effects, according to the F9 key halfway analysis it is very likely wrong. who has the solution to this problem must tell me ah! best to abolish the animation effects, direct elimination. 5 because of the time constraints, the use of hastily finishe
Platform: |
Size: 1850368 |
Author: wancb |
Hits:
Description: 利用钩子实现菜单阴影效果
有很多人对Office XP里面的菜单的阴影效果羡慕不已,它不需要在Windows XP 中就可以在菜单后面显示阴影, 当然在Windows XP中, 已经完全支持菜单阴影了。 虽然我们不一定很有必要自己来实现这个较难实现的效果。但是正如有很多人想实现那种IE风格的菜单栏一样,尽管它们并不能为我们带来更多实用的功能, 却可以使我们的程序看起来与众不同。
-use menus hook shadow effect of a lot of people inside the Office XP menu envy of the shadow effect MU performance, it does not need Windows XP on the back of the menu showed shadow, Of course, in Windows XP, which has fully supported the shadow of the menu. Although we do not own it is necessary to achieve this difficult to achieve results. But, as many people would like to achieve the kind of IE style menu bar, Although they do not bring us a more practical function, but we can make the process appear to be different.
Platform: |
Size: 205824 |
Author: xian |
Hits:
Description: 前段时间做键盘程序找的资料，一个钩子程序，程序本身没有什么，主要是用了大量的api函数值得大家参考一下。-side of the keyboard to do procedures for the information, a hook procedures, the process itself is nothing much to it. it is mainly used a lot of api function worth examined.
Platform: |
Size: 1024 |
Author: 李伟 |
Hits:
Description: 包括：cdrom控制，cpu和mouse信息，USB编程，测试cpu速度，检测键盘按键，列出进程，鼠标钩子编程，系统信息获取，注册表编程-include : cdrom control, cpu and mouse information, USB programming, cpu speed test to detect the keyboard keys, listing process, the mouse hook programming, system information access, the registry program
Platform: |
Size: 619520 |
Author: hugh |
Hits:
Description: 远程监控木马源码, 利用钩子实现, 这是课程设计, 里面有非常详细的说明文档,对与想深入学习hook 和 进程快照还有指令分析器的人来说本作品最适合,里面的代码十分复杂,建议你们想学习的话最好详细阅读课程设计的文档,这个程序是很多老师都做不出来的! -RMON Trojan source code, using the hook realize that this is the curriculum design, with a very detailed documentation. and the right to study in depth hook and there are snapshots of the process analyzers instructions of the people who work the most suitable. inside the code is very complex and suggest that you want to learn the best detailed reading curriculum design documentation, this procedure is that many teachers can not do!
Platform: |
Size: 697344 |
Author: mo |
Hits: