Location:
Search - hookdll.dll
Search list
Description: 1. 发卡服务端：Server
项目文件：autojet.prj
2. 计费客户端：Client
项目文件：internet.prj
Explorer.prj
先启动Explorer.exe, 再启动internet.exe
3. 数据库脚本 INIT（原版）.SQL 和 New init.sql（新版），数据库名 NetBar
4. 动态连接库： NETBAR.dll hookdll.dll
5. 大学生公寓城System ID为5046
其余程序说明全在程序内的文本文件中说明-1. round card service end: Server project document: Autojet.prj
2. costs the customer end: Client project document:
Internet.prj Explorer.prj
First starts Explorer.exe, then starts internet.exe
3. databases scripts INIT (first edition) SQL and New init.sql
(new edition), database NetBar
4. dynamic connections storehouses: NETBAR.dll hookdll.dll
5. university students lodgings city System ID is 5,046 other
procedures explained all explained in the procedure text documents
Platform: |
Size: 2729632 |
Author: 陈万通 |
Hits:
Description: 一、前言
前一段时间发表了一篇文章 “Hook API 工具”,没有附带主程序的源代码，这几天翻出来代码加了些注释，现在补上。不过大家还是最好看看牛的书，书上讲解很详细。
二、对代码的简单说明
总共3个工程，1个主程序，1个HookDll, 1个例子Dll。主程序负责启动进程，并将 HookDll 注入。还有一些额外的功能，比如显示 Log, 例子Dll的信息，导出函数等，HookDll 在 DllMain 启动的时候根据配置钩住指定的 API 函数
三、这种方法的缺点
这种方法是在系统 API 函数起始代码 和 自定义代码之间切换。在多线程的环境下，如果正在切换的过程，其它线程调用这个函数，会出现异常，同时，如果已经切换回系统代码，其它线程对这个API 的调用将抓不到。解决方法就是不要切换，这点应该是可以做到的。
四、结束语
在例子Dll 中，模仿了 ws_32.dll 的输出函数，但是不全，而且 Log 信息也不足，感兴趣的朋友如果有比较全的版本别忘了发给我一份 :)
程序大家可以随意修改，保留那个林月如的 Icon 就行了 ^_^
-one, the preamble some time ago published an article entitled "Hook API tool," not incidental to the main program source code, which turned out a few days code plus some notes now fill. But we still look at the best cattle in the book, spoke on the very detailed. Two of the code simple instructions a total of three projects, a program, a HookDll, an example Dll. Main program to start the process and will HookDll injection. There are some additional features, such as Log shows examples Dll information derived function, in DllMain HookDll boot time configuration hooked designated API Function 3, the shortcomings of this method This method is the system API function code and starting from the definition of switching between code. In multithreaded environment, if the switching proces
Platform: |
Size: 147036 |
Author: ddd |
Hits:
Description: windows自带的画笔程序的hook的例子。dll为hookdll的工程，project1为app的工程。运行时，先运行画笔程序，在画笔程序中按F10，就会自动画画。
Platform: |
Size: 1003231 |
Author: xuwei |
Hits:
Description: PE文件是windows(95/98/NT)目前采用的可执行文件格式。流行的CIH病毒就是通过改变PE文件的内容，并且保持文件大小不变，从而实现自己的功能。本程序通过分析PE文件格式，将可执行文件的文件定位表重新定位，指向用户编写的DLL，然后指令指针返回正常调用位置。在DLL中通过系统挂钩，实现了后台各种级别密码的截获功能。
Platform: |
Size: 59927 |
Author: sujun |
Hits:
Description: 一个WH_SHELL的钩子程序，具体功能是管理应用程序的使用。在使用应用程序之前可以控制其启动和关闭。包含三个文件夹，HookDLL文件夹是全局钩子dll,HookServer文件夹是一个应用程序控制程序，ProgamControl文件夹是delphi编写的应用程序编辑器。
Platform: |
Size: 563384 |
Author: cool wen zi |
Hits:
Description: 1. 发卡服务端：Server
项目文件：autojet.prj
2. 计费客户端：Client
项目文件：internet.prj
Explorer.prj
先启动Explorer.exe, 再启动internet.exe
3. 数据库脚本 INIT（原版）.SQL 和 New init.sql（新版），数据库名 NetBar
4. 动态连接库： NETBAR.dll hookdll.dll
5. 大学生公寓城System ID为5046
其余程序说明全在程序内的文本文件中说明-1. round card service end: Server project document: Autojet.prj
2. costs the customer end: Client project document:
Internet.prj Explorer.prj
First starts Explorer.exe, then starts internet.exe
3. databases scripts INIT (first edition) SQL and New init.sql
(new edition), database NetBar
4. dynamic connections storehouses: NETBAR.dll hookdll.dll
5. university students lodgings city System ID is 5,046 other
procedures explained all explained in the procedure text documents
Platform: |
Size: 2728960 |
Author: 陈万通 |
Hits:
Description: 一、前言
前一段时间发表了一篇文章 “Hook API 工具”,没有附带主程序的源代码，这几天翻出来代码加了些注释，现在补上。不过大家还是最好看看牛的书，书上讲解很详细。
二、对代码的简单说明
总共3个工程，1个主程序，1个HookDll, 1个例子Dll。主程序负责启动进程，并将 HookDll 注入。还有一些额外的功能，比如显示 Log, 例子Dll的信息，导出函数等，HookDll 在 DllMain 启动的时候根据配置钩住指定的 API 函数
三、这种方法的缺点
这种方法是在系统 API 函数起始代码 和 自定义代码之间切换。在多线程的环境下，如果正在切换的过程，其它线程调用这个函数，会出现异常，同时，如果已经切换回系统代码，其它线程对这个API 的调用将抓不到。解决方法就是不要切换，这点应该是可以做到的。
四、结束语
在例子Dll 中，模仿了 ws_32.dll 的输出函数，但是不全，而且 Log 信息也不足，感兴趣的朋友如果有比较全的版本别忘了发给我一份 :)
程序大家可以随意修改，保留那个林月如的 Icon 就行了 ^_^
-one, the preamble some time ago published an article entitled "Hook API tool," not incidental to the main program source code, which turned out a few days code plus some notes now fill. But we still look at the best cattle in the book, spoke on the very detailed. Two of the code simple instructions a total of three projects, a program, a HookDll, an example Dll. Main program to start the process and will HookDll injection. There are some additional features, such as Log shows examples Dll information derived function, in DllMain HookDll boot time configuration hooked designated API Function 3, the shortcomings of this method This method is the system API function code and starting from the definition of switching between code. In multithreaded environment, if the switching proces
Platform: |
Size: 146432 |
Author: ddd |
Hits:
Description: 中文键盘钩子．
欢迎下载！-Chinese keyboard hook. welcome to download!
Platform: |
Size: 1585152 |
Author: LILI |
Hits:
Description: 与inject.rar程序配套的，注入到第三方进程中的程序，用来实现hook第三方指定API的功能-Matching procedures and inject.rar injected into third-party process procedures, used to hook a third party to achieve the specified API function
Platform: |
Size: 2417664 |
Author: 安丙春 |
Hits:
Description: PE文件是windows(95/98/NT)目前采用的可执行文件格式。流行的CIH病毒就是通过改变PE文件的内容，并且保持文件大小不变，从而实现自己的功能。本程序通过分析PE文件格式，将可执行文件的文件定位表重新定位，指向用户编写的DLL，然后指令指针返回正常调用位置。在DLL中通过系统挂钩，实现了后台各种级别密码的截获功能。 -PE file is windows (95/98/NT) is currently used in the executable file format. CIH virus is prevalent PE by changing the contents of the file, and keep the file size unchanged, and thus realize their functions. This procedure by analyzing the PE file format, the executable file to re-positioning table positioning, pointing users to the preparation of the DLL, and then return to normal call instruction pointer location. Adopted in the DLL system linking all levels realize the background of the intercepted password function.
Platform: |
Size: 64512 |
Author: sujun |
Hits:
Description: 键盘钩子程序，EVC工程源码，是一个动态库，用来捕获键盘消息，在键盘消息发给OS前处理一下，是黑客程序或者高级编程人员必备的技能，非常难得的好资料，贡献出来与兄弟们共享。-Keyboard hook procedure, EVC source project, is a dynamic library, used to capture keyboard news, information distributed at the keyboard before the OS handle what is a hacker program or personnel necessary for high-level programming skills, very rare good information, contribute to out with the brothers shared.
Platform: |
Size: 2458624 |
Author: 余爱军 |
Hits:
Description: 钩子dll，学习汇编的时候做的，用易语言调用成功-Hook dll, learning when to do the compilation, using easy language to call the success of
Platform: |
Size: 3072 |
Author: 王全 |
Hits:
Description: 1. 发卡服务端：Server 项目文件：autojet.prj 2. 计费客户端：Client 项目文件：internet.prj Explorer.prj 先启动Explorer.exe, 再启动internet.exe 3. 数据库脚本 INIT（原版）.SQL 和 New init.sql（新版），数据库名 NetBar 4. 动态连接库： NETBAR.dll hookdll.dll 5. 大学生公寓城System ID为5046 其余程序说明全在程序内的文本文件中说明-1. round card service end: Server project document: Autojet.prj 2. costs the customer end: Client project document: Internet.prj Explorer.prj First starts Explorer.exe, then starts internet.exe 3. databases scripts INIT (first edition) SQL and New init.sql (new edition), database NetBar 4. dynamic connections storehouses: NETBAR.dll hookdll.dll 5. university students lodgings city System ID is 5,046 other procedures explained all explained in the procedure text documents -1. Issuing server: Server project documents: autojet.prj 2. Recosting Client: Client project files: internet.prj Explorer.prj first start Explorer.exe, and then start internet.exe 3. Database script INIT (the original). SQL and New init.sql (new version), database name NetBar 4. Dynamic Link Library: NETBAR.dll hookdll.dll 5. college apartments City System ID for the 5046 remaining description of the procedures in the whole procedure described in the text file-1. round card service end: Server project document: Autojet.prj 2. costs the customer end: Client project document: Internet.prj Explorer.prj First starts Explorer.exe, then starts internet.exe 3. databases scripts INIT (first edition) SQL and New init.sql (new edition), database NetBar 4. dynamic connections storehouses: NETBAR.dll hookdll.dll 5. university students lodgings city System ID is 5046 other procedures explained all explained in the procedure text documents
Platform: |
Size: 2756608 |
Author: 但雪忠 |
Hits:
Description: 一个全局钩子，可以截获系统的所有消息
主要完成鼠标和键盘的消息截获-A global hook, you can intercept all the information systems major to complete the mouse and keyboard messages intercepted
Platform: |
Size: 826368 |
Author: 郑万伟 |
Hits:
Description: 一個用delphi hook住 ntopenprocess 的dll
示列-Delphi hook with a live show ntopenprocess out of the dll
Platform: |
Size: 7168 |
Author: 火車 |
Hits:
Description: dll键盘记录源码-minimization procedures boot console
Platform: |
Size: 1505280 |
Author: fffffff |
Hits:
Description: 动态链接库DLL钩子源码及说明文件，详细论述了DLL钩子开发中常见的但不容易发现的严重问题及解决办法-Dynamic Link Library DLL hook source code and documentation, discusses in detail the development of the common DLL hook, but not easy to find serious problems and solutions
Platform: |
Size: 789504 |
Author: 马志强 |
Hits:
Description: DLL 注入程序 易源码
外挂或者登陆器 中用到较多!-ELANGUAGE
Platform: |
Size: 74752 |
Author: 玖玖 |
Hits:
Description: dll钩子dll hook dll hook-dll hook dll hookdll hookdll hook
Platform: |
Size: 12288 |
Author: darkqing |
Hits:
Description: // NtDeviceIoControlFile的HOOK函数
// ws2_32.dll的send , recv最终会调用到mswsock.dll内的数据发送函数
// mswsock.dll会调用NtDeviceIoControlFile向TDI Client驱动发送Send Recv指令
// 我们在这里做拦截，可以过滤所有的TCP 收发包（UDP之类亦可，不过要更改指令）
// Hook mswsock.dll导出表的Ntdll!NtDeviceIoControlFile
// 并过滤其对TDI Cilent的请求来过滤封包
// 稳定，隐蔽，RING3下最底层的包过滤~(HOOK / NtDeviceIoControlFile function
Ws2_32.dll / send, recv will call to the data transmitting function in mswsock.dll
/ / mswsock.dll will call the NtDeviceIoControlFile to the TDI Client driver sends the Send Recv command
Here we do / / intercept, can filter all receive TCP packets (like UDP but also to change the directive)
Mswsock.dll / / Hook export table Ntdll! NtDeviceIoControlFile
And the request of TDI / / Cilent filter to filter packets
/ / stability, concealment, packet filtering at the bottom of the RING3.)
Platform: |
Size: 2048 |
Author: q1356047
|
Hits: