Location:
Search - hook process
Search list
Description: 使用VC编写的可以记录键盘信息的程序工程源码。主要是使用了系统钩子，拦截了键盘消息，从而截获用户的键盘记录-Prepared by the VC can be recorded using the keyboard information process engineering source. Mainly use the system hook to intercept keyboard messages to intercept the user' s keyboard record
Platform: |
Size: 1409024 |
Author: 基野 |
Hits:
Description: IT HOOK AND PROTECT PROCESS FOR YOU WB
Platform: |
Size: 9216 |
Author: diego |
Hits:
Description: Hook SSDT shadow 示例，首先找到csrss进程然后attach，最后修改ssdt shadow table-Hook SSDT shadow sample, first find the csrss process then attach, last modified ssdt shadow table
Platform: |
Size: 17408 |
Author: 顺口溜 |
Hits:
Description: qq2009协议分析工具，注入qq进程hook socket然后解密协议，是一个帮助学习qq协议的好工具。-qq2009 protocol analysis tools into the qq process hook socket and then decrypt the agreement is a protocol to help a good tool for learning qq.
Platform: |
Size: 33792 |
Author: 顺口溜 |
Hits:
Description: HOOK技术的Ring0级进程保护组件设计与实现-HOOK technology Ring0 protection component level design and implementation process
Platform: |
Size: 655360 |
Author: 蒙得快 |
Hits:
Description: HOOK API防进程被关闭,XP下VC6调试通过-HOOK API to protect process.
Platform: |
Size: 335872 |
Author: guoyingsiluck |
Hits:
Description: 一些与Windows相关的VC++小程序源码，比如如何打开我的电脑和我的文档、如何注销、关闭、重启系统、如何执行屏幕保护程序、如何在应用程序中启动其他程序、如何使用多媒体定时器、如何使用定时器、如何使应用程序只运行一个实例、如何实现系统托盘、如何实现钩子、如何设置桌面墙纸、如何枚举系统当前进程、如何将应用程序已运行的实例调至前台、如何获得系统显示元素的颜色、如何获得系统时间、如何获得系统的度量信息、如何获得和设置NetBIOS计算机名-Some Windows-related VC++ applet source code , such as how to open my computer and my documents, how to log off , shut down , reboot the system , how to perform a screen saver , how in the application to start other programs , how to use the multimedia timer , how to use the timer , how to make an application to run only one instance , how the system tray , how to hook , how to set the desktop wallpaper, how to enumerate the current process , how to run an instance of the application has been transferred to the foreground , how to get the system display elements of color, how to get the system time , how to get a measure of system information, how to get and set the NetBIOS computer name ...
Platform: |
Size: 306176 |
Author: liu |
Hits:
Description: 投递分拣分发系统，物流投递过程中经常遇到因为搬迁或拆迁等问题需要重复更改地址的问题，分拣分发系统能对这类地址进行自动勾核分拣-Delivery sorting distribution system, logistics delivery are often encountered in the process because the removal or demolition of such problems requires repeated changes to address the problem, sorting and distribution system for this kind of address automatic hook nuclear sorting
Platform: |
Size: 2811904 |
Author: 陈真 |
Hits:
Description: 计算机游戏防沉迷系统通过动态链接库安装一个全局钩子，在允许青少年在适度游戏的情况下，严格限制游戏的时间，当游戏时间超过预定值时，系统提示游戏者时间已到，然后屏蔽除存盘之外的其他操作。系统提供了对监控游戏的添加和删除的基本操作，查询某个游戏一定时间内的运行时间，用坐标轴绘制出某个游戏运行时间的变化趋势，系统提供监控者调整监控时间的功能，方便对游戏进行更有效的管理。同时，系统提供严格的权限控制，在退出系统或修改游戏信息时，需要用户登录，并提供用户的信息管理等功能。系统编写了一个额外的驱动文件，通过HOOK系统底层函数的方法，实现进程保护，在游戏运行前加载这个驱动文件，来解决从任务管理器强制关闭进程的问题。- Computer game fatigue system is installed by a global dynamic link library hook, allowing young people to moderate the game in the case of strictly limited game time, when the game is longer than a predetermined value, the system prompts the player time is up, and then shielded operations except Save. The system provides the basic operations monitoring the game including adding and removing and that querying running time of a game within a certain time and that drawing out the running time trends of a game with the axis. System provides functions to tune the monitoring time to facilitate more effective management of the game. Meanwhile, the system provides strict access control that when exiting the system or modifying the game in information, requiring users to log in and provide the user s information management. System prepared an additional driver files to achieve process protection by the underlying functions of HOOK system. Loading the driver files before running the game to sol
Platform: |
Size: 15119360 |
Author: Peng Jin |
Hits:
Description: 进程保护, 通过Hook系统的OpenProc, 达到保护进程的方法-Process protection, through Hook system OpenProc, to protect the process approach
Platform: |
Size: 326656 |
Author: Yofoo |
Hits:
Description: 隐私监视器。其中挂钩比较简单，进程通信稍有难度。里面挂钩了CreateFile。-Privacy Monitor. Which the hook is relatively simple, the process of communication a little more difficult. The inside hook CreateFile.
Platform: |
Size: 252928 |
Author: 赵虹权 |
Hits:
Description: 纯VB全局 Hook 测试，进程防火墙，拦截进程,很不错的VB源码，适合VB爱好者学习研究。-Pure VB global Hook testing, process firewall, intercept process, very good VB source code, suitable for VB lovers study.
Platform: |
Size: 31744 |
Author: truck61 |
Hits:
Description: 在调试过程中多处使用串行口返回信息（由于没有源码级仿真器）；
在空闲任务中的HOOK函数打印输出串口信息，并且闪烁LED；
在各个任务中打印输出串口信息，并且闪烁单个LED；
对于Os_cpu_a核心部分TimeTick函数另作详细说明；-Many places in the process of debugging using the serial port to return the information (the absence of source-level simulation)
HOOK function of the idle task, print the output serial port, and blinking the LED
Printout serial information in various tasks, and blinking a single LED
For Os_cpu_a core the part TimeTick function separate detail
Platform: |
Size: 390144 |
Author: panhaiyan |
Hits:
Description: 驱动DLL注入源码，学习驱动很好的代码.应用层和驱动层都有源代码-Here you can find source codes. Note: to compile NtProcDrv you need NTDDK to be installed on your computer.
To run compiled sample, place tunew20.dll in any folder that is specified in PATH variable (windows/system32 for example). Then run HookDemo.exe. After it is has been started all process creation routines will be intercepted. Press "Enter" key and hook will be uninstalled. Note: you should have an administrator rights for properly running application.
To verify if it works fine try to start any application after HookDemo has been run. You should see message box "Before starting process." on process startup and "Before ending." right before process will be ended.
Platform: |
Size: 77824 |
Author: tunshizhe |
Hits:
Description: 通过修改ssdt表 hook掉ZwTerminateProcessZwLoadDriver以及ZwSetSystemInformation
是一份比较简单易读的驱动程序入门源码
是zmpi软件的进程防护拦截模块-By modifying the SSDT hook ZwTerminateProcess
ZwLoadDriver and ZwSetSystemInformation
Is a relatively simple driver entry source.
Is the zmpi software process protection interception module
Platform: |
Size: 6144 |
Author: 张皓秋 |
Hits:
Description: Hook方式获取指定进程的网络封包，经过本人修改，功能十分强大， 可以获取任意程序封包-Hook obtain the specified process network packets
Platform: |
Size: 34816 |
Author: chel |
Hits:
Description: 对IE进行HOOK， 通过读取IE进程内存方式修改改写内存方式 修改数据包或者地址，某公司病毒式推广曾采取这种方式-IE HOOK, IE read through the process of memory overwrite memory modify modify data packets or address, a viral promotion has taken this way
Platform: |
Size: 3964928 |
Author: zhp21 |
Hits:
Description: 此包是一个很简单的外挂输入法,学习过程中编制的,其中使用键盘勾子,会报有木马,请自己编译后使用.-This package is a very simple plug-in input methods, the preparation of the learning process, use the keyboard hook, will be reported trojan, please use to compile.
Platform: |
Size: 1511424 |
Author: 秦永久 |
Hits:
Description: API钩子系统一般框架
通常，我们把拦截API的调用的这个过程称为是安装一个API钩子（API Hook）。一个API钩子基本是由两个模块组成：一个是钩子服务器（Hook Server）模块，一般为EXE的形式；一个是钩子驱动器（Hook Driver）模块，一般为DLL的形式。
钩子服务器主要负责向目标进程注入钩子驱动器，使得钩子驱动器运行在目标进程的地址空间中，这是关键的第一步，而钩子驱动器则负责实际的API拦截处理工作，以便在我们所关心的API函数调用的之前或之后能做一些我们所希望的工作。一个比较常见的API钩子的例子就是一些实时翻译软件（像金山词霸）中必备的的功能：屏幕抓词。它主要是对一些Win32 API中的GDI函数进行了拦截，获取它们的输入参数中的字符串，然后在自己的窗口中显示出来。
针对上述关于API钩子的两个部分，有以下两点需要我们重点考虑的： 选用何种DLL注入技术，以及采用何种API拦截机制。
本篇文章来源于 黑基网-中国最大的网络安全站点 原文链接：file:///C:/Documents 20and 20Settings/jingtianzi/桌面/最新资料/黑客编程：hook系统函数-学院-黑基网.mht-General framework for API hook system
Usually, we called this process intercept API calls is to install an API hook (API Hook,). An API hooks basically consists of two modules: one is the hook server (Hook, Server) module, generally in the form of EXE a hook drive (Hook Driver) module, generally in the form of a DLL.
Hook server is mainly responsible to the target process inject hook driver device, hook-driven devices running on the target process address space, a critical first step, while the hook-driven device is responsible for the actual API to intercept processing so that in we are concerned with API functions before or after the call to do something we want. Example of a common API hook is some real-time translation software (such as necessary.) Function: screen grab word. It is mainly to intercept some of the Win32 API GDI functions to obtain the string in the input parameters, and then displayed in its own window.
For the two parts of the API hook, the following two ke
Platform: |
Size: 555008 |
Author: 刘永 |
Hits:
Description: 这个项目创建了两个钩子一个过程钩子，一个是调试钩子，打开调试钩子可以避免窗口被过程钩子修改过程函数。刚刚学习钩子可以拿来-The project to create a process hooks of the two hooks, a debug hook, open the debugging hooks can be avoided window process hook to modify the process function. Just to learn the hook can be used to look at
Platform: |
Size: 2961408 |
Author: 刘智民 |
Hits: