Location:
Search - hook process
Search list
Description: 这是一个Hook windowsAPI 的例子。
本DLL是HOOK windows的messagobox函数
并将应用程序中调用messagebox函数弹出的对话框的样式修改了一下！修改后的对话框效果见源代码里的效果图！在release目录里自带一个将dll注入进程的程序！-Hook windowsAPI example. The DLL is the messagobox HOOK windows function will be called from applications messageBox Function pop-up dialog box changes the format a bit! After the revised results dialog see the source code's effectiveness map! The release directory will own a dll injection process procedures!
Platform: |
Size: 224256 |
Author: 王凯兵 |
Hits:
Description: 当你在网络上抓到一些数据包，想知道这些包是哪个进程发出来的时候，
怎么办？这个小工具也许能帮一些忙。
这个工具采用的是HOOK进程的winsock API，把一些数据记录下来。-When you caught on the network data packets and would like to know which of these packages is issued to the process, how do? This small tools may be able to help some busy. This tool is used in the process of winsock HOOK API, some data is recorded.
Platform: |
Size: 58368 |
Author: 肖武 |
Hits:
Description: 实现令人满意的风格统一的软件界面确实很难, 象网友提到的MessageBox、FileDialog、FontDialog、目录选择对话框等MFC内部甚至系统DLL内的对话框，要想让它变脸可不容易。有人说HOOK技术可以，HOOK技术确实可以，HOOK可以说是无孔不入，但HOOK的使用效率却是令人难以满意的，从目前大多数采HOOK技术的换肤软件使用情况来看，完全可以证明这一点。今天我们将讨论另外一技术来实现FileDialog的变脸，这种技术叫替换窗口过程法-achieve satisfactory style uniform software interface is really difficult, as mentioned in the MessageBox netizens, FileDialog, FontDialog, directories, etc. MFC dialog within the system DLL even within the dialog, if it's not easy changing face. Some say HOOK technology, the technology can really HOOK, HOOK can say is pervasive, but the efficient use HOOK is hardly satisfied with the majority from the current mining technology Eurocargo HOOK use of the software, can prove this point. Today we will discuss other technologies to achieve a FileDialog changing face of this technique called window replacement process method
Platform: |
Size: 610304 |
Author: 小小天职 |
Hits:
Description: 经典的APIHOOK程序，封装了全部功能，包括源程序和演示程序，不可多得。-classic APIHOOK procedures, all of the features of the package, including source code and demonstration process indeed.
Platform: |
Size: 155648 |
Author: 纸飞机 |
Hits:
Description: delphi对windows高级编程的很多例子：delphi实现屏幕落雪效果，按键转汉字,模拟输入法程序，利用消息钩子屏蔽定时器，利用窗口过程钩子截获QQ账号，判断用户目前是否在操作电脑-the windows of many high-level programming examples : delphi screen snow effect keys to Chinese characters, analog input procedures, the use of news hook shielding timers, the process of using the window hook intercepted QQ account, judge whether the user to operate a computer ... .
Platform: |
Size: 3947520 |
Author: 张强 |
Hits:
Description: 按 ~ 不放的同时 按其他按键 得到对应 偏旁汉字
不是真正的输入法 只是 模拟那个过程 拦截按键转发汉字
当初只是想看看外挂式输入法怎么弄的，现在已经基本上OK了 -~ tightly by the time of the other keys to be identical to corresponding Chinese character is not the real analog input method is that the process forward button intercept Chinese originally wanted to see external input methods, how get, and now has basically OK
Platform: |
Size: 21504 |
Author: |
Hits:
Description: 动态库注入器 1.0
功能:将一个动态库文件注入到一个正在运行的进程内.
应用:通过注入功能,可以实现对一个进程的api hook,比如写一个dll,然后hook socket api,然后注入到你想监视的进程,这样就能够用于网络数据包的分析了
-DLL injector 1.0 features : a dynamic library file is injected into a running process. Applications : by injecting function can be achieved on a process api hook, such as writing a dll, then hook socket api, and then injected into you want to watch the process so it can be used for network packet analysis of the
Platform: |
Size: 50176 |
Author: 阿东 |
Hits:
Description: QQ对对碰游戏外挂
功能:
1.能够自动提示能够消除的对对碰
2.能够模拟鼠标自动消除
3.可以加快速度
4.自动开始
虽然此程序仅仅是一个小外挂,但也使用到了一些技术.
1.线程的使用
2.程序窗口查找
3.dll注入技术
4.api hook 技术
5.单进程全局热建钩子
6.不通过特定颜色判断相同方格的方法
7.模拟鼠标的两种方法,mouse_event(鼠标光标会移动)和PostMessaga(鼠标光标不移动)
8.文件捆绑和分解
...
-QQ right right touch game external functions : 1. To automatically suggest to the elimination of the two right right touch. To simulate the mouse to automatically eliminate three. 4 can increase speed. Automatically Although this procedure is just a small store, but also the use of a number of technologies. 1. The use of threads 2. Search window 3.dll implantation 4.api hook technology 5. overall thermal-process production hook 6. not through specific color box at the same judgment method 7. mouse simulation of the two methods, mouse_event (mouse cursor will be mobile) and PostMessaga ( the mouse cursor is not mobile) 8. documents bundled and decomposition ...
Platform: |
Size: 150528 |
Author: 阿东 |
Hits:
Description: Enclosed is MFC source code for a function which can be used to hook any imported function call which your application makes. Since most of the Win32 API is implemented using import functions in dlls, this means that you hook Win32 API calls. This is useful when for example you want to be called for every call to the file system (::CreateFile() & CloseHandle()) which your app makes. This example of hooking the file system calls your app makes could form the basis of code to ensure you do not have any handle leaks in your application. You could also use this code to spy on COM port activity in remote processes by injecting the DLL into the remote process. -MFC source code for a function w hich can be used to hook any imported function ca ll which makes your application. Since most of t he Win32 API is implemented using import functi ons in dlls. this means that you hook Win32 API calls. This is for example useful when you want to be called for every call to the file system (: : CreateFile ()
Platform: |
Size: 6144 |
Author: l |
Hits:
Description: 其中包含了
《Windows程序设计》PASCAL例子
《Windows高级编程指南》PASCAL例子
《Windows核心编程》PASCAL例子
ShellExecuteHook 示例
按键转汉字,模拟输入法程序
初步实现屏幕落雪效果
简单的文件分割合并工具
简单模拟所谓‘光标跟随’效果
利用Hook插入线程的改进版本
利用窗口过程钩子截获QQ账号
利用鼠标键盘钩子截获QQ账号
利用消息钩子屏蔽定时器
列举窗口及其路径简单例子
判断用户目前是否在操作电脑
区分大小写的按键记录器2个
使用系统提供的进度条控件
预览式文件选择对话框
只需一个DLL的三级跳-include "Windows Program Design" PASCAL example "Windows Advanced Programming Guide" PASCAL example "Windows core programming" PASCAL example ShellExecuteHook examples keys to Chinese characters, analog input procedures initially screen snow effect of a simple document segmentation merger simple simulation tools so-called 'cursor follow the 'Hook effect of the use of threaded insert the use of improved versions of the process window hook intercepted QQ account using a mouse and keyboard hook intercepted QQ account using timer news hook shielding window and cited examples of simple path judge whether the user to operate a computer case-sensitive keys recorders use two- Commission for the progress of the control document preview dialog only a DLL in the
Platform: |
Size: 3917824 |
Author: 叶子 |
Hits:
Description: 老妖的程序，很不错
一、客户端
程序命名为Client。监视系统的运行，如发现系统中有“记事本”进程（notepad.exe）或者“计算器”进程（calc.exe），立即杀死（kill）该进程，并将该事件写入数据库；定期进行检查，每间隔1分钟，检查数据库，将尚未上传的事件记录上传至服务器端。
程序命名为Server。监听网络，一旦有客户端上传数据，立即从中提取事件信息，并在用户界面中以列表方式加以显示。-Laojiao procedures, a very good one, the client program called Client. Surveillance systems running, such as Discovery System are "Notepad" process (notepad.exe) or "calculator" process (calc.exe), immediately killing (kill) the process and the incident into databases; Periodic inspection, each one minute interval check database would not have been the case record upload to upload server. Procedures for naming Server. Monitoring network, once the client to upload data from the incident immediately from the information, and the user interface to a list to be revealed.
Platform: |
Size: 442368 |
Author: 虚名 |
Hits:
Description: 一、前言
前一段时间发表了一篇文章 “Hook API 工具”,没有附带主程序的源代码，这几天翻出来代码加了些注释，现在补上。不过大家还是最好看看牛的书，书上讲解很详细。
二、对代码的简单说明
总共3个工程，1个主程序，1个HookDll, 1个例子Dll。主程序负责启动进程，并将 HookDll 注入。还有一些额外的功能，比如显示 Log, 例子Dll的信息，导出函数等，HookDll 在 DllMain 启动的时候根据配置钩住指定的 API 函数
三、这种方法的缺点
这种方法是在系统 API 函数起始代码 和 自定义代码之间切换。在多线程的环境下，如果正在切换的过程，其它线程调用这个函数，会出现异常，同时，如果已经切换回系统代码，其它线程对这个API 的调用将抓不到。解决方法就是不要切换，这点应该是可以做到的。
四、结束语
在例子Dll 中，模仿了 ws_32.dll 的输出函数，但是不全，而且 Log 信息也不足，感兴趣的朋友如果有比较全的版本别忘了发给我一份 :)
程序大家可以随意修改，保留那个林月如的 Icon 就行了 ^_^
-one, the preamble some time ago published an article entitled "Hook API tool," not incidental to the main program source code, which turned out a few days code plus some notes now fill. But we still look at the best cattle in the book, spoke on the very detailed. Two of the code simple instructions a total of three projects, a program, a HookDll, an example Dll. Main program to start the process and will HookDll injection. There are some additional features, such as Log shows examples Dll information derived function, in DllMain HookDll boot time configuration hooked designated API Function 3, the shortcomings of this method This method is the system API function code and starting from the definition of switching between code. In multithreaded environment, if the switching proces
Platform: |
Size: 146432 |
Author: ddd |
Hits:
Description: 通过hookapi隐藏自身.不会被进程查看软件发现从而被结束。-through hookapi hidden own. The process will not be View software has been found so close.
Platform: |
Size: 3072 |
Author: 无 |
Hits:
Description: 这篇文章是有关在OS Windows下挂钩API函数的方法。所有例子都在基于NT技术的Windows版本NT 4.0及以上有效(Windows NT 4.0, Windows 2000, Windows XP)。可能在其它Windows系统也会有效。
你应该比较熟悉Windows下的进程、汇编器、PE文件结构和一些API函数，才能明白这篇文章里的内容。
这里使用"Hooking API"这个术语表示对API的完全修改。当调用被挂钩的API时，我们的代码能立刻被执行。我将写下完全的挂钩过程。
-This article is concerned with the OS Windows API function linked to the method. All the examples are based on the NT version of Windows NT 4.0 and above effective (Windows NT 4.0, Windows 2000, Windows XP). In other Windows system will effectively. You may be familiar with the process under Windows, assembler, PE file structure and some API function, in order to understand this article's content. Here the use of "56.6 API," said the term of the complete API changes. When the call was linked to the API, the code can be executed immediately. I will write entirely linked to the process.
Platform: |
Size: 18432 |
Author: inwing |
Hits:
Description: 传奇盗号程序，全VB源码，短小精干，无解压密码-legendary zip process, and all VB source, small and lean, without extracting passwords
Platform: |
Size: 2048 |
Author: |
Hits:
Description: 在2000和xp下，隐藏进程，VC6.0测试通过
在需要隐藏进程的时候#incoude"HideProcess.h",调用HideProcess()即可。-in 2000 and xp, hidden process, VC6.0 tested in the process need to hide when# incoude "HideProcess.h" Call HideProcess () can be.
Platform: |
Size: 3072 |
Author: 力 |
Hits:
Description: 该代码为我学习winnt内核时所写，主要功能是在ring3下通过DeviceIoControl与驱动进行通信，获取内核的数据以及sdt，idt信息等。并实现了hook NtQuerySystemInformation函数来实现进程隐藏的功能-The code for the kernel, I am learning winnt wrote, Its main function is in ring3 through DeviceIoControl communication with the driver. access to the kernel and sdt data, the information loop. And the achievement of the hook function to achieve NtQuerySystemInformation implicit process possession of the function
Platform: |
Size: 55296 |
Author: 左手 |
Hits:
Description: 申明：
本软件仅供学习使用。
如用本程序做非法用途后果自负，与作者无关!!!
QQ:175111923
软件简介:
2006年7月15日
主要功能：
1.屏幕监视/控制。
2.CMD命令行
3.摄象头
4.文件管理
5.进程管理
6.键盘记录
其中键盘记录,没有使用钩子记录,为了防止一些杀毒软件阻止安装钩子
虽然没有钩子,但是对于一般的密码窗口,IE窗口也依然能准确记录(包括粘贴).
2006.8.19
由于忙于工作，忙于学习.没时间在继续开发了，把代码发给大家继续更
新
编译前把工程设置成 Unicode
VipShell 是服务端代码
VipClient 客户端代码
把纯真IP数据库 和 客户端放在一起 即可显示物理地址
有问题请联系 QQ:175111923 M
群 ：23204130
-declared : This software is for learning. If using this procedure done for illicit purposes responsible for any consequences, have nothing to do with the author! ! ! QQ : 175111923 software description : July 15, 2006 main functions : 1. screen monitor/control. 2.CMD command line 3. Placing four. Document management 5. Process management 6. Keyboard records documenting the keyboard, Hook record is not used, in order to prevent anti-virus software to prevent the installation of the hook Although no hook, But for the general password window, IE window still accurate records (including paste). 2006.8.19 as busy work, busy learning. In no time to continue to develop, code or to continue to update you before compiler works set to Unicode VipShell-generation services Codes VipClient client cod
Platform: |
Size: 549888 |
Author: |
Hits:
Description: windows应用，模拟人自动填写表单程序，采用进程监控与hook相结合-windows application, simulation automatic form filling process using process monitoring and hook combination
Platform: |
Size: 33792 |
Author: moonlight968 |
Hits:
Description: 罗聪作品。利用SEH 技术 达到HOOK 同进程 API 的技术。-Luo cong works. SEH use the same technology to process HOOK API technology.
Platform: |
Size: 4096 |
Author: xpan |
Hits:
«
1
2
34
5
6
7
8
9
10
...
26
»