Location:
Search - hooking api
Search list
Description: 这篇文章是有关在OS Windows下挂钩API函数的方法。所有例子都在基于NT技术的Windows版本NT 4.0及以上有效(Windows NT 4.0, Windows 2000, Windows XP)。可能在其它Windows系统也会有效。
你应该比较熟悉Windows下的进程、汇编器、PE文件结构和一些API函数，才能明白这篇文章里的内容。
这里使用\"Hooking API\"这个术语表示对API的完全修改。当调用被挂钩的API时，我们的代码能立刻被执行。我将写下完全的挂钩过程。
-This article is concerned with the OS Windows API function linked to the method. All the examples are based on the NT version of Windows NT 4.0 and above effective (Windows NT 4.0, Windows 2000, Windows XP). In other Windows system will effectively. You may be familiar with the process under Windows, assembler, PE file structure and some API function, in order to understand this article's content. Here the use of "56.6 API," said the term of the complete API changes. When the call was linked to the API, the code can be executed immediately. I will write entirely linked to the process.
Platform: |
Size: 19127 |
Author: inwing |
Hits:
Description: api hook 程序，可以用于挂钩windows系统下的api 函数，进行改造后功能将会更强大。-api hook procedures can be used to link the windows api system function, after transforming function will be more powerful.
Platform: |
Size: 263235 |
Author: sanlwg |
Hits:
Description: hook api hook api
Platform: |
Size: 265703 |
Author: 不知道 |
Hits:
Description: API Hooking Revealed
by Ivo Ivanov
Platform: |
Size: 311011 |
Author: qin lu |
Hits:
Description: 微软提供的截取Win32 API函数的开发包和例子1.5版本-SDK and example in 1.5 version of hooking Win32 API which are provided by Microsoft
Platform: |
Size: 605184 |
Author: 站长 |
Hits:
Description: This the third, fourth (and last) part for building a thread deadlock detector. Please see the first and second article to understand wait is going on : A (working) implementation of API hooking (Part II)
Platform: |
Size: 300032 |
Author: |
Hits:
Description: Enclosed is MFC source code for a function which can be used to hook any imported function call which your application makes. Since most of the Win32 API is implemented using import functions in dlls, this means that you hook Win32 API calls. This is useful when for example you want to be called for every call to the file system (::CreateFile() & CloseHandle()) which your app makes. This example of hooking the file system calls your app makes could form the basis of code to ensure you do not have any handle leaks in your application. You could also use this code to spy on COM port activity in remote processes by injecting the DLL into the remote process. -MFC source code for a function w hich can be used to hook any imported function ca ll which makes your application. Since most of t he Win32 API is implemented using import functi ons in dlls. this means that you hook Win32 API calls. This is for example useful when you want to be called for every call to the file system (: : CreateFile ()
Platform: |
Size: 6144 |
Author: l |
Hits:
Description: 这篇文章是有关在OS Windows下挂钩API函数的方法。所有例子都在基于NT技术的Windows版本NT 4.0及以上有效(Windows NT 4.0, Windows 2000, Windows XP)。可能在其它Windows系统也会有效。
你应该比较熟悉Windows下的进程、汇编器、PE文件结构和一些API函数，才能明白这篇文章里的内容。
这里使用"Hooking API"这个术语表示对API的完全修改。当调用被挂钩的API时，我们的代码能立刻被执行。我将写下完全的挂钩过程。
-This article is concerned with the OS Windows API function linked to the method. All the examples are based on the NT version of Windows NT 4.0 and above effective (Windows NT 4.0, Windows 2000, Windows XP). In other Windows system will effectively. You may be familiar with the process under Windows, assembler, PE file structure and some API function, in order to understand this article's content. Here the use of "56.6 API," said the term of the complete API changes. When the call was linked to the API, the code can be executed immediately. I will write entirely linked to the process.
Platform: |
Size: 18432 |
Author: inwing |
Hits:
Description: "process wide":
some demos about hooking APIs/code in your own process
OS independent
"system wide":
several demos about system wide API hooking (using hook dlls)
OS independent
"system wide - win9x only":
one demo which shows a special system wide hooking method
win9x only
-"wide process" : some demos about hooking APIs/code in your own p rocess OS independent "system wide" : several demos about system wide API hooking (us ing hook dlls) OS independent "system wide-win 9x only ": one demo which shows a special system wide hooki Vi only method win9x
Platform: |
Size: 1070080 |
Author: 万俟雅言 |
Hits:
Description: Win32 Kernel Rootkits modify the behaviour of the system by Kernel Native API hooking. This technique is typically implemented by modifying the ServiceTable entries in the Service Descriptor Table (SDT). 有关钩子-Win32 Kernel Rootkits modify the behaviou r of the system by Native Kernel API hooking. Thi 's technique is typically implemented by modify ing the ServiceTable entries in the Service Des criptor Table (SDT). on the hook
Platform: |
Size: 9216 |
Author: wind |
Hits:
Description: hook api hook api -hook api hook api hook api
Platform: |
Size: 265216 |
Author: |
Hits:
Description: API Hooking Revealed
by Ivo Ivanov
Platform: |
Size: 311296 |
Author: qin lu |
Hits:
Description: Small sample in vbasic
Thanks to ebartsoft and Rm_code
Platform: |
Size: 25600 |
Author: ntaryl |
Hits:
Description: Hooking function MessageBox
Platform: |
Size: 37888 |
Author: Don Nguyen |
Hits:
Description: EasyHook_2.6_Binaries Continuing Detours: the reinvention of Windows API Hooking
Platform: |
Size: 491520 |
Author: freecom |
Hits:
Description: API Hooking Part 1-API Hooking Part 1...
Platform: |
Size: 119808 |
Author: vanphong |
Hits:
Description: API Hooking part 2-API Hooking part 2..
Platform: |
Size: 66560 |
Author: vanphong |
Hits:
Description: x86_64 Linux系统下的API钩子示例-A demo for API hooking under Linux (x86_64)
Platform: |
Size: 29696 |
Author: K |
Hits:
Description: This text is about hooking API functions on OS Windows. All examples here completely works on Windows systems
based on NT technology version NT 4.0 and higher (Windows NT 4.0, Windows 2000, Windows XP). Probably
will also work on others Windows systems.You should be familiar with processes on Windows, assembler, PE files
structure and some API functions to understand whole text. When using term ”Hooking API” here, I mean the
full change of API. So, when calling hooked API, our code is run immediately. I do not deal with cases of API
monitoring only. I will write about complete hooking.
Platform: |
Size: 63488 |
Author: Alex |
Hits:
Description: Inline Patching Protected Applications (Hooking API Functions)
Platform: |
Size: 608256 |
Author: AuraFawkes |
Hits: