Location:
Search - hook injection
Search list
Description: 这是一个Hook windowsAPI 的例子。
本DLL是HOOK windows的messagobox函数
并将应用程序中调用messagebox函数弹出的对话框的样式修改了一下！修改后的对话框效果见源代码里的效果图！在release目录里自带一个将dll注入进程的程序！-Hook windowsAPI example. The DLL is the messagobox HOOK windows function will be called from applications messageBox Function pop-up dialog box changes the format a bit! After the revised results dialog see the source code's effectiveness map! The release directory will own a dll injection process procedures!
Platform: |
Size: 224256 |
Author: 王凯兵 |
Hits:
Description: 一、前言
前一段时间发表了一篇文章 “Hook API 工具”,没有附带主程序的源代码，这几天翻出来代码加了些注释，现在补上。不过大家还是最好看看牛的书，书上讲解很详细。
二、对代码的简单说明
总共3个工程，1个主程序，1个HookDll, 1个例子Dll。主程序负责启动进程，并将 HookDll 注入。还有一些额外的功能，比如显示 Log, 例子Dll的信息，导出函数等，HookDll 在 DllMain 启动的时候根据配置钩住指定的 API 函数
三、这种方法的缺点
这种方法是在系统 API 函数起始代码 和 自定义代码之间切换。在多线程的环境下，如果正在切换的过程，其它线程调用这个函数，会出现异常，同时，如果已经切换回系统代码，其它线程对这个API 的调用将抓不到。解决方法就是不要切换，这点应该是可以做到的。
四、结束语
在例子Dll 中，模仿了 ws_32.dll 的输出函数，但是不全，而且 Log 信息也不足，感兴趣的朋友如果有比较全的版本别忘了发给我一份 :)
程序大家可以随意修改，保留那个林月如的 Icon 就行了 ^_^
-one, the preamble some time ago published an article entitled "Hook API tool," not incidental to the main program source code, which turned out a few days code plus some notes now fill. But we still look at the best cattle in the book, spoke on the very detailed. Two of the code simple instructions a total of three projects, a program, a HookDll, an example Dll. Main program to start the process and will HookDll injection. There are some additional features, such as Log shows examples Dll information derived function, in DllMain HookDll boot time configuration hooked designated API Function 3, the shortcomings of this method This method is the system API function code and starting from the definition of switching between code. In multithreaded environment, if the switching proces
Platform: |
Size: 146432 |
Author: ddd |
Hits:
Description: 一个记录键盘的完整程序，采用dll注入方式hook API，有完整的dll代码和注入程序的代码,及lzw压缩算法的完整代码。-a record keyboard integrity procedures used dll injected hook API, a complete dll injection procedure code and the code, and the compression algorithm 4,558,302 integrity code.
Platform: |
Size: 37888 |
Author: onlyu |
Hits:
Description:
1. 内容
2. 介绍
3. 挂钩方法
3.1 运行前挂钩
3.2 运行时挂钩
3.2.1 使用IAT挂钩本进程
3.2.2 改写入口点挂钩本进程
3.2.3 保存原始函数
3.2.4 挂钩其它进程
3.2.4.1 DLL注入
3.2.4.2 独立的代码
3.2.4.3 原始修改
4. 结束语-1. Content 2. Introduction 3. Linked to the former method of operation linked 3.1 3.2 Runtime 3.2.1 to enable linking IAT linked with the process of rewriting the point of entry 3.2.2 linked to the process of preserving the original function 3.2.3 3.2.4 linked to other DLL injection process 3.2.4.1 3.2.4.2 3.2.4.3 independent of the original code amendments changed four. Concluding remarks
Platform: |
Size: 11264 |
Author: flyfan |
Hits:
Description: QQ游戏之对对碰外挂,
功能:
1.能够自动提示能够消除的对对碰
2.能够模拟鼠标自动消除
3.可以加快速度
4.自动开始
虽然此程序仅仅是一个小外挂,但也使用到了一些技术.
1.线程的使用
2.程序窗口查找
3.dll注入技术
4.api hook 技术
5.单进程全局热建钩子
6.不通过特定颜色判断相同方格的方法
7.模拟鼠标的两种方法,mouse_event(鼠标光标会移动)和PostMessaga(鼠标光标不移动)
8.文件捆绑和分解
-QQ games plug right right touch, function: 1. Can automatically prompted to eliminate the right right touch 2. Can be used to simulate the mouse automatically eliminate 3. Can accelerate the speed of 4. Automatically start this procedure although only a small plug-in, but also used to a number of technical .1. the use of 2 threads. 3.dll Find window injection technique 4.api hook technology 5. single process overall heat build hook 6. do not pass a specific color to judge the same way to the box 7. simulation of the two mouse methods, mouse_event (mouse cursor will move) and PostMessaga (mouse cursor does not move) 8. paper bound and decomposition
Platform: |
Size: 150528 |
Author: 明 |
Hits:
Description: | |
| 实现原理： |
| 锁定 Ctrl+Alt+Del 使用远程线程、代码注入及子类化技术 |
| 其它键盘消息使用普通钩子技术 |
| |
| 本模块向 VB 程序员展示远程线程、代码注入等似乎被列入 |
| 只有Delphi、VC程序员才可能使用的技术，同时目前诸多木马 |
| 也同样大量使用这些技术。注入的方式比 Dll 钩入更加隐蔽。 |
| 注入后无进程、无文件
-| | | Principle: | | lock Ctrl+ Alt+ Del the use of remote threads, code injection and sub-class technology | | other information using an ordinary keyboard hook technology | | | | of the module to the VB programmer to display the remote thread, code seem to be included into the | | only Delphi, VC programmers could use the technology, while at present many Trojan | | is also large-scale use of these technologies. Dll injection than hook into the more hidden. | | Inject no process, no file
Platform: |
Size: 14336 |
Author: kidy |
Hits:
Description: 本文分析了API Hook 系统的实现结构和系统涉及的DLL 注入和API 拦截两项关键技术的多种实现途径，并结合
应用给出了编程实现的方法。-This paper analyzes the API Hook System structures and systems involved in DLL injection and API to intercept the two key technologies to achieve a variety of channels, combined with the application of given programming approach.
Platform: |
Size: 94208 |
Author: 王志军 |
Hits:
Description: 注入技术简述：
本实例其实是一个查看工具。完成以下的几个功能：
1、查看系统当前的运行进程；
2、查看系统当前的运行线程；
3、查看系统中运行某个进程中包含的DLL列表；
4、通过创建远程线程的方法将DLL注入到目标进程中：
5、通过Hook方法将DLL注入到目标进程中：
-A brief injection technique: This example is actually a view tool. Completion of the following functions: 1, view the system is currently running process 2, Show system is currently running thread 3, view the system is running a process that contains a list of the DLL 4, by creating a remote thread method the DLL is injected into the target process: 5, through Hook Methods DLL into the target process:
Platform: |
Size: 12288 |
Author: 赵积元 |
Hits:
Description: 演示三种代码注入的方式。hook 注入，远程注入，dll注入。对研究病毒和外挂的人很有帮助-Demonstration of three types of code injection approach. hook into the remote injection, dll injection. The study of virus and the people very helpful plug-ins
Platform: |
Size: 79872 |
Author: 公鸡 |
Hits:
Description: 利用usp10.dll 达到 注入及 HOOK 的目的-Usp10.dll use to achieve the purpose of injection and HOOK
Platform: |
Size: 1839104 |
Author: 周募 |
Hits:
Description: VC++写的APIHook实例源代码，大致翻了一下，只挂引入表的函数，注入有SetWindowHookEx和CreateRemoteThread两种方式，进程枚举也区分了不同系统下使用的psai和toolhelp，另外为了获得Process的创建消息，做了一个驱动来注册回调函数，总的来说，在注入部分做得相当棒，如果想挂各种函数，可以结合detour使用。-VC++ to write the source code examples APIHook generally turned a bit, only linked to the introduction of the function table, there SetWindowHookEx and CreateRemoteThread into two ways, the process of enumeration to distinguish between the different systems are used psai and toolhelp, the other in order to obtain Process the creation of news, so a drive to register a callback function, in general, has done quite a part in the injection rod, if you want to hang a variety of functions can be combined with the use of detour.
Platform: |
Size: 71680 |
Author: Massachusetts |
Hits:
Description: Hook在系统进程插入线程的改进版本,进程的注入hook，加入Dll控制，消息控制，功能强大。-Hook the process to insert the thread in the system to improve the version of the injection process hook, adding Dll control, information control and powerful.
Platform: |
Size: 22528 |
Author: siliemor |
Hits:
Description: 进程注入API的连接
标题：进程注入/ API的挂接
描述：这表明你2接口连接的技术。内隐联系测验连接和功能调整，还如何在您的代码注入到另一个VB的过程和钩子函数遥。由于离子离子亚历克约内斯库他注射演示。重要的是，你读了读的“注入”目录。
此文件来自星球源Code.com ...家庭数百万行的源代码
您可以查看关于此代码/和或投票在： http://www.Planet-Source-Code.com/vb/scripts/ShowCode.asp?txtCodeId=62338&lngWId=1
作者可能有某些保留版权此代码...请遵守它们的要求和法律的审查所有版权条件在上述乌拉圭回-The process of heading into the API connection: the process of injection/API articulated Description: This indicates that the 2 interface to connect your technology. IAT connections and functions of the adjustment, but also how to inject your code to another VB function of the process and hook away. As a result of ion-ion injection Alex Ionescu his presentation. Importantly, the time you read the " injection" directory. This document is the source from the planet Code.com ... the family millions of lines of source code you can see on this code/and or vote in: http://www.Planet-Source-Code.com/vb/scripts/ShowCode . asp? txtCodeId = 62338 & lngWId = 1 the author may have some reservations about the copyright of this code ... please observe their request and review all copyright laws in the above-mentioned conditions of the Uruguay Round
Platform: |
Size: 17408 |
Author: fangxiaowang |
Hits:
Description: 本程序是基于Windows API与Hook技术以及注入DLL的方式写的网络防火墙程序，可以拦截网络数据。-This program is based on the Windows API and DLL injection Hook technology, and a way to write a network firewall program that can intercept network data.
Platform: |
Size: 105472 |
Author: 张杨 |
Hits:
Description: 一个拦截并修改输入法的注入技术（注入DLL是做全局钩子或者拦截类软件都有可能用到的技术）、给出了完整的示例代码希望对大家有所帮助。-An intercept and modify the input method of the injection technology (global hook into the DLL are doing, or are likely to be used to intercept class software technology), gives a complete sample code you want to help.
Platform: |
Size: 1387520 |
Author: 西南 |
Hits:
Description: 控制银证直通车键盘热键的说明格式为Delphi远程线程注入系统进程-Control of Silver Certificate Note Express format of the keyboard hotkey remote thread injection system for the Delphi process
Platform: |
Size: 1695744 |
Author: joe |
Hits:
Description: hook技术，用于注入pe拦掉网络封包，有利于网络游戏的分析-hook technology for network packet injection pe block away, is conducive to the analysis of online games
Platform: |
Size: 1787904 |
Author: 钟小春 |
Hits:
Description: 一个用全局钩子实现DLL的注入及热键呼出的例子,可供参考.-To achieve a global hook DLL with the injection and the hot breath of the examples is available for reference
Platform: |
Size: 5724160 |
Author: 雷迪嘎嘎 |
Hits:
Description: 实现HOOK的成功注入，可以在win7上实现注入-The success achieved HOOK injection, injection can achieve win7
Platform: |
Size: 3133440 |
Author: 孙贺 |
Hits:
Description: HOOK注入框架（DLL源码）和EXE 注入源码及框架(Hook injection framework (DLL source code) and exe injection source code and framework)
Platform: |
Size: 236544 |
Author: 玖凉 |
Hits: