搜索资源列表
SEH_APIHook
- 罗聪作品。利用SEH 技术 达到HOOK 同进程 API 的技术。-Luo cong works. SEH use the same technology to process HOOK API technology.
spy&hook
- 可截获windows下各进程的各类消息，可作消息查看之用-windows can be intercepted under the process of the various news sources for use View
在Windows 2003中HOOK ZwCreateProcessEx
- 工作需要，想控制进程的创建，于是HOOK了ZwCreateProcess，后来发现xp和2003中创建进程的都用NtCreateProcessEx-work needs to control the process of creation, then the ZwCreateProcess HOOK, later found xp 2003 and the process of creating both NtCreateProcessEx
Api Hook和封包拦截技术
- const WM_UNSUBCLASS = WM_USER + 2001 //卸载子类化消息 WM_SENDDATA = WM_USER + 2003 //收到要发送新数据包的消息 type PMyDLLVar = ^TMyDLLVar //用来共享的内存数据结构 TMyDLLVar = record SubClass: Boolean //是否已经子类化 HookWindow, SpyWindow: LongWORD //要安装HOOK的窗口及用于接收消息的窗口 hHook: LongWORD
HideProcess.rar
- Hook Hidden Process. Using ZwQuerySystemInfomation Api.,Hook Hidden Process. Using ZwQuerySystemInfomation Api.
HookSSDT.rar
- HOOK NtOpenProcess 保护指定进程,HOOK NtOpenProcess the protection of designated process
hook-process
- hook openprocess免杀 保护进程-hook openprocess
HookCreateProcess.rar
- API Hook，实现了对CreateProcess的挂钩，可以监视进程的创建。,API Hook, to achieve the linking of CreateProcess, you can create a monitoring process.
DetourHook
- detour的api hook方法， 实现了进程hook，消息hook等。-detour api hook method. realize the process hook, message hook etc.
Hook-ZwQueryInformationProcess
- hook ZwQueryInformationProcess 隐藏进程-hook ZwQueryInformationProcess for hide process
HookCode
- VC++写的APIHook实例源代码，大致翻了一下，只挂引入表的函数，注入有SetWindowHookEx和CreateRemoteThread两种方式，进程枚举也区分了不同系统下使用的psai和toolhelp，另外为了获得Process的创建消息，做了一个驱动来注册回调函数，总的来说，在注入部分做得相当棒，如果想挂各种函数，可以结合detour使用。-VC++ to write the source code examples APIHook generally turned a bit,
project
- 是一个简单的跨进程的APIHOOK，目标程序是NOTEPAD.EXE很有学习意义，代码部分是网上学习，部分是自己原作。原大家一起学习，另，由于作者也是刚学习，有什么错误请指出，谢谢，邮箱dake1024@163.com-Is a simple process of cross-APIHOOK, the target procedure is very NOTEPAD.EXE learning the meaning of the code is e-learning part of their
Miss920
- Miss920程序行为监视器，运用SSDT HOOK技术，可以简单有效的监控程序行为，现在已经实现了进程监控，文件监控，注册表监控，并且可以有效快捷地进行二次开发。-Miss920 monitor program behavior, the use of SSDT HOOK technology, can be simple and effective monitoring of program behavior, the process has already been realized to
NtCreateThread
- hookNtCreateThread 可以第一时间注入到目标进程,进程创建后,然后就好调用 NtCreateThread创建主线程-hookNtCreateThread the first time can be injected into the target process, the process is created, then create the main thread is like calling NtCreateThread
hook_wininet_Source
- 一个很好的hook wininet api的示例程序。很好的演示了本进程hook技术，及关于http请求和响应数据的提取的相关技术。完整vc++工程，可直接编译运行。-a very good demo of hook wininet api，there is a good demostration of how to hook a in-process api.
ApiHook
- 通过拦截TerminateProcess和OpenProcess两个API，防止进程被结束-Two by interception TerminateProcess and OpenProcess API, to prevent the process is concluded
APIHook
- 勾了系统函数，可以修改API函数返回值以隐藏进程-Hook a system function, you can modify the return value of API functions to hide the process of
KiFastCallEntry
- 挂钩KiFastCallEntry保护进程的代码，做了自旋锁，保证了多核环境安全-Linked KiFastCallEntry protection process code, so the spin lock to ensure safety of multi-core environment
StickyApp32
- windowsNT下的通过截获OpenProcess函数来禁止终止本进程的程序-Through intercepting windowsNT under the OpenProcess function to prohibit the procedure to terminate the process
HOOK创建进程[1]
- 易语言HOOK api 实现创建进程,很不错的易语言源码，适合易语言爱好者学习。(Easy language HOOK API to achieve the creation process, very good easy language source code, suitable for easy language enthusiasts to learn)