搜索资源列表
Hook-Driver－by
- windows ndis钩子程序，用于防火墙、vpn、nat、网络驱动等软件的开发。-hook procedures for firewall, VPN, nat, network drives, such as software development.
ZtsFw
- 使用Firewall Hook Driver技术进行端口过滤的一个简单防火墙的代码。-use Firewall Hook Driver technology port of a simple filtering firewall code.
driver
- 用DDDK编写驱动,修改SSDT表HOOK NTDebugActiveProcess函数 钩子函数中可以判断PID号,决定是否放行,放行则在钩子函数中调用原来的NTDebugActiveProcess函数.否则直接返回False.HOOK成功后所有调用DebugActiveProcess的程序将会失效.当然可以按照你的需要HOOK更多的系统服务函数.同一服务函数的服务号在每个操作系统版本中是不同的.下面附件中编译完成的驱动请在WinXP SP2的环境下测试.否则可能会导致直接重启
2kHookDriver
- windows hook driver的范例程序。对于开发基于hook的windows平台网络驱动程序有很大借鉴作用，可直接修改使用。
FwHookDrv_src
- An Adventure How to implement a Firewall-Hook Driver
c_api_hook.zip
- NT下的用驱动程序写的截获api函数调用的程序,Under NT driver written using api function call intercepted procedures
basic_1.zip
- windows hook 的好例子，Windows内核的安全防护,windows hook driver
HookPPC.rar
- Windows Mobile下的键盘钩子的源代码，适用于PocketPC上,Windows Mobile keyboard hook under the source code, apply on PocketPC
RkU_102_source.rar
- Rootkit detector to find system hook and user code hooks, hidden driver, hidden files, hidden proccess.,Rootkit detector to find system hook and user code hooks, hidden driver, hidden files, hidden proccess.
hook
- 驱动挂钩，拦截指定函数调用。 -Driver linked to intercept the specified function call. Driver linked to intercept the specified function call.
SSDT-hook
- Windows内核态SSDT-hook实现进程隐藏和文件隐藏，代码很规整，学习内核编程的好例子 -a good example of studying kernel programing or driver developing, SSDT hook
wm6-touch-driver
- TouchPanel driver which encapsulate real driver. This driver helps to hook by user application touchscreen(TouchPanel) events before windows process this events.
antihook_src
- 创建一个内核驱动，伪造一个ssdt表，使得ssdt钩子失效。-Create a kernel driver, forged a ssdt table, making failure ssdt hook.
Firewall
- VC++6.0实现的利用IP过滤钩子驱动创建的一个Windows防火工具，支持TCP,UDP,ICMP协议,基本呈现了Windows防火墙开发的过程-VC++6.0 to achieve the use of IP filter hook driver to create a Windows fire prevention tools, support for TCP, UDP, ICMP protocol, the basic Windows firewall shows the proces
hook
- 驱动级的隐藏进程代码，在驱动层通过替换ssdt地址表中的函数来隐藏进程-Drive-level code to hide the process, in the driver layer ssdt address by replacing the function table to hide the process of
SimplePacketFilterFirewall
- Simple Packet - Filter Firewall A simple packet filtering based open source Firewall. It uses Filter hook driver for its basic working-Simple Packet- Filter Firewall A simple packet filtering based open source Firewall. It uses Filter hook driver
FileGuard-safe-hook
- 文件过滤驱动，File filter driver intercepts file functions include copy, move, Read, Write, and get the file information, and so on. -File system driver.-File filter driver intercepts file functions include copy, move, Read, Write, and get the file informat
SSDT-Hook-Driver-and-mfc-interface
- HOOK SSDT中SetInformation 函数的 驱动程序 配有mfc的用户模式界面 实现了Createfile readfile writefile IOCTL 这几个分发函数 在IOCTL中实现了对SetInformation函数的HOOK-SSDT Hook Driver test with mfc interface
HOOK-API
- 一个寒江老师的课件，单独出来发的目的是，让初级入门的驱动程序员们，很快的了解驱动如何对SSDT挂钩以及Windows应用程序如何简单的调用驱动接口的流程。 代码非原创，但是是我看到的最简单和最清楚的流程之一，非常适合刚入门驱动员们的口味，需要的就赶快下载吧。(It`s hanjiang teacher courseware, the purpose is to separate out, let the driver programmer entry-level, quickly unders
HOOK graphics driver_
- hook d3d显卡驱动源码,内核驱动hook(hook D3D graphics driver source code, kernel driven hook)