Location:
Search - hook process
Search list
Description: hook方式实现gina定制，修改windows开机过程-hook to achieve the gina customize, modify windows boot process
Platform: |
Size: 197632 |
Author: apan |
Hits:
Description: SSDT Hook 简单示例 Hook Native Api ZwQuerySystemInformation 达到隐藏cmd.exe进程的效果，进程名没有大小写限制。(学习agony RootKit的成果)-The SSDT Hook, Native Api the ZwQuerySystemInformation native API to hide the effects of the cmd.exe process, process name is not a case limit.
Platform: |
Size: 2169856 |
Author: bug |
Hits:
Description: 进程 hook 进程的防杀-Process hook the process of anti-kill
Platform: |
Size: 245760 |
Author: 古意 |
Hits:
Description: visual c++ hook createprocess.监控进程 控制进程的运行，运用钩子技术，hook住createprocess，很适合学习。-visual c++ hook createprocess. monitor the operation of the process control process, the use of hook technology, the hook to live createprocess, very suitable for learning.
Platform: |
Size: 6144 |
Author: 古意 |
Hits:
Description: 一个VB环境下使用的自绘气泡提示，自绘的ToolTips(注解清楚)，使用到两个模块：一个是cToolTips通用气泡模块,对指定句柄生成气泡并重绘。气泡部分采用最简单的代码,重绘也只是最简单的一个背景+边框,形状做了更改，消息钩子用的是老马修改的,其实也就是加了一个返回,中间我只改了一些；另一个模块是cSubClass，通用子类化模块,拦截本进程指定句柄的消息，从CSDN里找到的,内嵌汇编技术实现单个类模块子类化...牛啊！我添加了一个事件返回,让这个类模块可以方便地实现封装。-Used in a VB environment, tips, self-painted bubble annotations clearly self-painted ToolTips (), use of two modules: a cToolTips generic bubble module, specify the handle to generate bubbles and redraw. Bubble part of the most simple code to redraw only the most simple background+ border, shape changes, the news hook is the horse to modify, in fact, that is, plus a return, in the middle I just changed Another module is the module of cSubClass common subclass to intercept the process specified handle messages from CSDN found, inline assembly to achieve a single class module subclass ... Niua I added an event back to make this module can be easily encapsulated.
Platform: |
Size: 12288 |
Author: 胡立平 |
Hits:
Description: 一个VB环境下使用的自绘气泡提示，自绘的ToolTips(注解清楚)，使用到两个模块：一个是cToolTips通用气泡模块,对指定句柄生成气泡并重绘。气泡部分采用最简单的代码,重绘也只是最简单的一个背景+边框,形状做了更改，消息钩子用的是老马修改的,其实也就是加了一个返回,中间我只改了一些；另一个模块是cSubClass，通用子类化模块,拦截本进程指定句柄的消息，从CSDN里找到的,内嵌汇编技术实现单个类模块子类化...牛啊！我添加了一个事件返回,让这个类模块可以方便地实现封装-Used in a VB environment, tips, self-painted bubble annotations clearly self-painted ToolTips (), use of two modules: a cToolTips generic bubble module, specify the handle to generate bubbles and redraw. Bubble part of the most simple code to redraw only the most simple background+ border, shape changes, the news hook is the horse to modify, in fact, that is, plus a return, in the middle I just changed Another module is the module of cSubClass common subclass to intercept the process specified handle messages from CSDN found, inline assembly to achieve a single class module subclass ... Niua I added an event back to make this module can be easily implemented package
Platform: |
Size: 12288 |
Author: |
Hits:
Description: 文件说明：
1、网关服务端
就是网关服务的源代码了，主要用来向登陆器以及游戏客户端DLL下发运行参数等工作。
2、服务端解密DLL
注入游戏服务端进程HOOK RECV对封包解密。
3、客户端加密DLL
注入游戏客户端进程HOOK SEND对游戏封包进行加密。配合服务端加密DLL完成对游戏封包的重新加解密过程。
作用原理：
通过HOOK方式拦截游戏客户端的封包发送和游戏服务端的封包接收对封包进行重加密。这样只有你自己的登陆器启动的游戏才能正常连接。
置于反外挂什么的当然你可以加到客户端DLL里来，如果这个DLL被卸载，游戏必定中断。
为什么要用HOOK不用端口转发呢，答案是显而易见，相对于端口转发HOOK的效率是相当高的几乎感觉不到任何延迟。-File Description: a gateway server side is the gateway service source code is mainly used to run parameters to the lander and the game client DLL. 2, the service end to decrypt the DLL injected into the game server-side process HOOK RECV packet decryption. 3, the client encryption DLL injected into the game client process HOOK SEND game packet is encrypted. With the server-side encryption DLL to complete the game packet re-encryption and decryption process. Of principle: the interception of the game client by HOOK packet send and packet of the game side to receive the re-encryption of the packet. So only your own lander to start the game in order to properly connect. Placed in anti-plug-in, of course you can be added to the client DLL if the DLL is unloaded, the game must be interrupted. Why use HOOK do not have port forwarding, the answer is obvious, is quite high relative to the efficiency of the port forwarding HOOK hardly feel any delay.
Platform: |
Size: 39936 |
Author: 刘振 |
Hits:
Description: Hook和数据库访问实例，VC++源码下载，此为VC++深入详解一书第20章的实例，实例中还有VB相关的Hook例子，通过这些例子让大家了解进程内钩子、全局钩子的区别，这本书将以这一种结束全书内容。-Hook and database access instances VC++ source download Detailed one instance of Chapter 20 of this for VC++ depth instance Hook examples in VB, these examples so that we understand the difference between in-process hook, global hook, which The book will be the end of this kind of book content.
Platform: |
Size: 134144 |
Author: MarkZar |
Hits:
Description: 纯汇开发的，主要拦截KERNEL32.DLL中的OpenFile、CreateFileA、CreateFileW、ReadFile、 ReadFileEx、WriteFile、WriteFileEx、、、DeviceIoControl等函数，HOOK到的数据未做过滤处理。其中MYDLL运用了skyer的HOOKAPI LIB，放出源码，主程序源码的过程是创建进程后挂起，注入MYDLL后恢复进程，拦截
-Pure exchange, the main interceptor in the OpenFile KERNEL32.DLL CreateFileA, CreateFileW the ReadFile, The ReadFileEx, the WriteFile, WriteFileEx,,, the DeviceIoControl and other functions, HOOK data without making the filter processing. Which MYDLL use the skyer the HOOKAPI the LIB release the source code, the main source of process creation process hang, injected into the recovery process after MYDLL intercept
Platform: |
Size: 2048 |
Author: 追求 |
Hits:
Description: FSD HOOK HIDE FILE 的简单历程完成-Completion of the simple process of FSD HOOK HIDE FILE
Platform: |
Size: 7168 |
Author: 李小玲 |
Hits:
Description: 介绍游戏窗口内嵌外挂窗口的实现过程
HOOK DX-Introduce plug-in window of the game window embedded implementation process
Platform: |
Size: 15360 |
Author: deepsky |
Hits:
Description: 用过卡巴斯基的朋友都知道，卡巴斯基的进程是无法杀掉的，在任务管理器中杀卡巴进程的话，会弹出一个消息框提示拒绝访问！那么这是怎么实现的呢？很简单，就是使用了HOOK API的方法。
我用delphi来写程序好了，先写个dll。-Used Kaspersky' s friends all know, the the Kaspersky process is unable to kill the, Kabbah process in the Task Manager to kill, will pop up a message box prompts denied access! So this is how to achieve it? Very simple, is to use the method of HOOK API. Delphi write programs well, the first to write a dll.
Platform: |
Size: 5120 |
Author: yjj |
Hits:
Description: VB HOOK指定进程指定DLL的代码，代码是获得SOCKET封包内容。当然可以自己改改，也可以用作其他-VB HOOK specified process to specify the DLL code, the code is obtained SOCKET packet contents. Of course, can be changed, can also be used for other
Platform: |
Size: 25600 |
Author: 白永胜 |
Hits:
Description: 一个简单的dota改建程序，利用hook勾起魔兽进程-A simple dota remodeling program, the use of hook evoke Warcraft process
Platform: |
Size: 8291328 |
Author: lixin |
Hits:
Description: vb hook 任意进程的发包收包函数。可以做个自己专用的截取封包工具。-vb hook any process of bidding closing package function. Intercepts the packet can be its own dedicated tools.
Platform: |
Size: 133120 |
Author: tom |
Hits:
Description: This a Crysis game hack written in MASM. It has some uncommon ideas, like structures for hook information. It has a process injector, that injects the hack s code into the game as if it was shellcode.-This is a Crysis game hack written in MASM. It has some uncommon ideas, like structures for hook information. It has a process injector, that injects the hack s code into the game as if it was shellcode.
Platform: |
Size: 65536 |
Author: wessie |
Hits:
Description: 功能：传真演示程序
其具体操作过程如下：
1）设置好所发（收）传真文件（可以设置从指定页开始收发文件）。（收传真还需设置存放文件路径）
2）拨号，摘机后播放提示音，选择收发传真操作。
3）开始收（发）传真。
4）操作结束，挂机。
需要注意的是如需加发文件，则需要在传真已经开始以后再加发文件。且加发文件格式应与已在发文件格式相同。如在发文件是Fax文件，则只能加发Fax文件；如在发文件是Tif文件，则只能发Tif文件。
-Features: Fax demonstration program
The specific operation process is as follows:
1) set the hair (closing) Fax file (can be set to start sending and receiving files from the specified page). (Received fax needs to set the store file path)
2) play tone dialing, off-hook, and select the send and receive fax operation.
3) to begin accepting (hair) Fax.
4) the end of the operation, hang up.
For an extra note file you need in the fax has begun coupled issuing documents. And, additional file format should be the same in the hair file format. Issued a document such as a Fax file, you can only add hair Fax file issued a document, can only be made Tif file Tif file.
Platform: |
Size: 2600960 |
Author: 沈中跃 |
Hits:
Description: ssdt hook实现隐藏进程功能的驱动代码文件-ssdt hook hidden process driver code files
Platform: |
Size: 52224 |
Author: 谢志和 |
Hits:
Description: 外挂作坊所有的注入例程，有分层注入，钩子注入,连环注入,输入法注入,网络注入,线程注入,新进程注入,注入内存DLL对于新手提高有帮助-Plug workshops injection routine, stratified injection hook into comic injected input method injection network inject threads into the new process injection, inject memory DLL for the novice to improve
Platform: |
Size: 35840 |
Author: 张俊 |
Hits:
Description: 对内核的控制，对内核的Hook。结束进程，关机，禁止创建进程-Control of the kernel, the kernel Hook.The end of the process, shutdown, prohibit create process
Platform: |
Size: 199680 |
Author: lemon |
Hits: