搜索资源列表
ScanPass
- 探测密码的VC程序,用全局钩子编写.可以探测出各种密码,限本地使用.-VC password detection procedures used to prepare whole hook. The ability to detect all kinds of passwords, limited local use.
ApiHookCheck
- rootkit检测应用程序的是否被hook，里面包含了源码。包含应用层和驱动层代码。-rootkit detection application procedures whether the hook, which contains the source code. Includes application layer and layer-driven code.
leakfree
- 以malloc hook的方式检测内存泄漏的工具 -malloc hook to the memory leak detection tools
nohook
- 检测自己不被Hook，这在反黑、反病毒应用中是很重要的-Detection of their own not to be Hook, in the anti-, anti-virus applications is very important
anti-hook-ssdt
- ssdt钩子检测，利用查找ntkrnlpa.exe中导出的ssdt的起始地址和大小，比较实际的ssdt地址表中的内容，找出钩子-ssdt hook detection, the use of export ntkrnlpa.exe Find ssdt the start address and size, a more realistic ssdt address the contents of the table to find out hook
SMS-THROUGH-TELEPHONE
- The main objective of this system is to transmit message or text through ordinary Land Line Telephone from one end (source) to another end (designation). This is get achieved by the DTMF technology. It has two sections one for editing the text and to
netfilter
- netfilter源码。通俗的说，netfilter的架构就是在整个网络流程的若干位置放置了一些检测点（HOOK），而在每个检测点上上登记了一些处理函数进行处理（如包过滤，NAT等，甚至可以是 用户自定义的功能）。 -netfilter source. Popular to say, netfilter framework is the process in a number of locations throughout the network to place a number of det
KernelLookup
- Open Source SSDT Hook detection utility, it will scan the SSDT Entries in the kernel (ntoskrnl.exe) and find the functions that are hooked & not in the kernel base address range .
HOOK
- 基于HOOK和轮询检测机制的屏幕共享技术， 屏幕共享是一个很早就有的想法，它最初是在1968年辈ENGELBART展示出来的，用于在线会议。ENGELBART展示的屏幕共享是硬件方式实现的，在苹果公司提出图形化的用户界面(GUI)之后，出现了软件方式的屏幕共享技术。由于软件防护四屏幕共享的成本较低，使其得到了迅速的发展，在远程控制、远程教学、视频会议和股票分析系统中都存在着屏幕共享的需要。 目前主流的屏幕共享原理是先检测屏幕图像的变化，根据变化区域截取图像，再压缩传输给客户端。本文把检测
botdigger
- 基于api hook技术的未知病毒检测工具，可以用来学习。使用api hook工具获取刻意进程的api 序列，以api短序为特征输入svm进行识别。-Api hook technique based on the unknown virus detection tool to learn. Tools for use api hook api deliberate process sequence to a short sequence featuring api import svm for
windows_kernel_tool
- 一：SSDT表的hook检测和恢复 二：IDT表的hook检测和恢复 三：系统加载驱动模块的检测 四：进程的列举和进程所加载的dll检测 -1: SSDT table hook detection and recovery 2: IDT table hook detection and recovery 3: System load driver module test 4: the process list and the process of loading the dll
arktool
- 1、息钩子监视：列举系统上的消息钩子。 2、块加载监视：列举系统上加载的所有内核模块 3、SSDT监视：通过得到原始的SSDT地址来得到被恶意程序HOOK的API以及恢复SSDT 4、注册表保护：对一些重要的注册表项进行保护，防止恶意程序对其进行修改。 5、隐藏进程检测：检测出系统中隐藏的进程。 6、隐藏端口检测：检测出系统中隐藏的端口。 7、进程强杀：能够杀死系统中的对自身保护的恶意进程。-1, the interest rate hook monitor
password
- 探测密码 全局动态库钩子，学习系统编程的好材料-Password global dynamic library hook detection, good material for learning system programming
cyssms
- The main objective of this system is to transmit message or text through ordinary Land Line Telephone from one end (source) to another end (designation). This is get achieved by the DTMF technology. It has two sections one for editing the text and to
XueTr
- 1.进程、线程、进程模块、进程窗口、进程内存信息查看，热键信息查看，杀进程、杀线程、卸载模块等功能 2.内核驱动模块查看，支持内核驱动模块的内存拷贝 3.SSDT、Shadow SSDT、FSD、KBD、TCPIP、IDT信息查看，并能检测和恢复ssdt hook和inline hook 4.CreateProcess、CreateThread、LoadImage、CmpCallback、BugCheckCallback、Shutdown、Lego等Notify Routine信息查
tongxinwang
- 通信网试验基础实验代码，包括时间表调度实验、摘挂机检测实验、脉冲计数实验、位间隔识别实验、软件送音实验、驱动交换网络实验-Communication network based experimental test code, including the timetable scheduling experiment, hook detection experiments, pulse-counting experiments, the bit interval identification ex
Hidden-process-detection
- 进程隐藏与检测，在驱动中通过hook ssdt表来实现进程隐藏的目的！-Hidden process detection process hidden in the drive through the hook ssdt table!
tongxinwang
- 通信网试验基础实验代码，包括时间表调度实验、摘挂机检测实验、脉冲计数实验、位间隔识别实验、软件送音实验、驱动交换网络实验-Communication network based experimental test code, including the timetable scheduling experiment, hook detection experiments, pulse-counting experiments, the bit interval identification ex
HookScout-Proactive-Binary-Centric-Hook-Detection
- HookScout Proactive Binary-Centric Hook Detection
z
- 易语言桌面图标随意动源码例程程序调用API函数获取创面句柄，并设置桌面钩子检测桌面图标。在确保桌面->右键->排列图标 的按组排列、自动排列、对齐到网格都没有被选中的情况下，点击图标，图标会再桌面随意移动。 -Easy language desktop icons arbitrary source routines call the API function to get the handle, and set the desktop hook detection desktop