Location:
Search - tdi hook
Search list
Description: 使用TDI 和Filter-Hook进行网络数据拦截的两个例子, 以前外挂用过
Platform: |
Size: 163759 |
Author: Yofoo |
Hits:
Description: 使用TDI 和Filter-Hook进行网络数据拦截的两个例子, 以前外挂用过-The use of TDI and the Filter-Hook for network data to intercept the two examples previously used plug-ins
Platform: |
Size: 163840 |
Author: Yofoo |
Hits:
Description: Hook , keyboard hook example . very helpful
Platform: |
Size: 12288 |
Author: Fast |
Hits:
Description: 钩子程序，替换windows的发送和接收函数，捕获数据包-Hook procedures, to replace the windows to send and receive function, packet capture
Platform: |
Size: 884736 |
Author: aaa |
Hits:
Description: 采用VC++和Delphi两种编程工具，设计出的一个基于TDI、FireWall-Hook双层过滤的防火墙。界面基于Delphi,驱动基于VC++.-VC++ and Delphi using two kinds of programming tools, to design an on TDI, FireWall-Hook layer filtering firewall.
Platform: |
Size: 1349632 |
Author: 刘昆 |
Hits:
Description: tdi驱动网络拦截例子，包含：
1.tdi驱动防火墙
2.ndis hook框架-TDI driven network intercept examples, including:
The drive 1.tdi firewall
2.ndis hook framework
Platform: |
Size: 184320 |
Author: 孙廷刚 |
Hits:
Description:
基于WFP模型的网络防火墙设计实现
WFP（Windows Filter Platform）是为网络过滤应用开发平台提供支持的API和系统服务的集合。WFP允许开发者编写代码和操作系统的网络协议栈
交互。网络数据可以在到达目的地之前被过滤和修改。通过提供简单的开发平台，WFP被用于取代以前的TDI过滤，NDIS过滤，以及LSP（Winsock
Layered Service ）。在Visita及以后的系统火墙钩子，过滤钩子驱动将不再适用。
-Model-based network firewall designed to achieve WFP WFP (Windows Filter Platform) is a collection that provides support for network filtering application development platform API and system services. WFP allows developers to write interactive network protocol stack and operating system code. Network data can be filtered and modified before reaching the destination. By providing a simple development platform, WFP is used to replace the previous TDI filter, NDIS filter, and LSP (Winsock Layered Service). Visita systems in and beyond the firewall hook, the filter hook driver will no longer apply.
Platform: |
Size: 350208 |
Author: 注册会员 |
Hits:
Description: // NtDeviceIoControlFile的HOOK函数
// ws2_32.dll的send , recv最终会调用到mswsock.dll内的数据发送函数
// mswsock.dll会调用NtDeviceIoControlFile向TDI Client驱动发送Send Recv指令
// 我们在这里做拦截，可以过滤所有的TCP 收发包（UDP之类亦可，不过要更改指令）
// Hook mswsock.dll导出表的Ntdll!NtDeviceIoControlFile
// 并过滤其对TDI Cilent的请求来过滤封包
// 稳定，隐蔽，RING3下最底层的包过滤~(HOOK / NtDeviceIoControlFile function
Ws2_32.dll / send, recv will call to the data transmitting function in mswsock.dll
/ / mswsock.dll will call the NtDeviceIoControlFile to the TDI Client driver sends the Send Recv command
Here we do / / intercept, can filter all receive TCP packets (like UDP but also to change the directive)
Mswsock.dll / / Hook export table Ntdll! NtDeviceIoControlFile
And the request of TDI / / Cilent filter to filter packets
/ / stability, concealment, packet filtering at the bottom of the RING3.)
Platform: |
Size: 2048 |
Author: q1356047
|
Hits:
Description: 一个简单的tdi钩子防火墙原型的源代码 值得借鉴(A simple hook tdi prototype firewall source code)
Platform: |
Size: 73728 |
Author: ddaf |
Hits: