搜索资源列表
Hook-Driver－by
- windows ndis钩子程序，用于防火墙、vpn、nat、网络驱动等软件的开发。-hook procedures for firewall, VPN, nat, network drives, such as software development.
dcwlsjbphjs
- 摘要：无论是实现防火墙, NAT 还是VPN, 首要的任务就是获得网络上传输的数据包，在此基础上才能进行下一步 的工作。通过分析Windows 的网络数据传输机制，可以定位出不同的处理关键点，从而在不同的层次上实现数据包的 捕获功能，以满足不同的需要。 关键词：关键点 服务提供者接口 网络设备接口规范 中间层驱动程序 钩子驱动程序-Abstract : Whether the purpose is to achieve a firewall, VPN or NAT. One of t
driver
- 用DDDK编写驱动,修改SSDT表HOOK NTDebugActiveProcess函数 钩子函数中可以判断PID号,决定是否放行,放行则在钩子函数中调用原来的NTDebugActiveProcess函数.否则直接返回False.HOOK成功后所有调用DebugActiveProcess的程序将会失效.当然可以按照你的需要HOOK更多的系统服务函数.同一服务函数的服务号在每个操作系统版本中是不同的.下面附件中编译完成的驱动请在WinXP SP2的环境下测试.否则可能会导致直接重启
2003061708205882
- IP Filter Driver Hook的例子程序。网络开发人员、技术支持人员使用的摇篮-Programs of examples for IP Filter Driver Hook.It is the cradle of developer for net use and technologic surfaceman.
c_api_hook.zip
- NT下的用驱动程序写的截获api函数调用的程序,Under NT driver written using api function call intercepted procedures
basic_1.zip
- windows hook 的好例子，Windows内核的安全防护,windows hook driver
HookPPC.rar
- Windows Mobile下的键盘钩子的源代码，适用于PocketPC上,Windows Mobile keyboard hook under the source code, apply on PocketPC
RkU_102_source.rar
- Rootkit detector to find system hook and user code hooks, hidden driver, hidden files, hidden proccess.,Rootkit detector to find system hook and user code hooks, hidden driver, hidden files, hidden proccess.
hook
- 驱动挂钩，拦截指定函数调用。 -Driver linked to intercept the specified function call. Driver linked to intercept the specified function call.
SSDT-hook
- Windows内核态SSDT-hook实现进程隐藏和文件隐藏，代码很规整，学习内核编程的好例子 -a good example of studying kernel programing or driver developing, SSDT hook
NtQuerySystemInformation
- 这是介绍如何在Windows驱动层 HOOK NtQuerySystemInformation内核 函数的文章。 这篇文章超级详细的介绍了这个函数的每一个参数以及用法。-This is how the Windows kernel function driver layer HOOK NtQuerySystemInformation article. This article describes the super-detailed each parameter of this function
wm6-touch-driver
- TouchPanel driver which encapsulate real driver. This driver helps to hook by user application touchscreen(TouchPanel) events before windows process this events.
ZwCreateFile
- HOOK ZwCreateFile 配合 ZwDeleteFile 实现监视不许指定文件创建-HOOK ZwCreateFile with monitoring the realization of ZwDeleteFile not create the specified file
hook
- 驱动级的隐藏进程代码，在驱动层通过替换ssdt地址表中的函数来隐藏进程-Drive-level code to hide the process, in the driver layer ssdt address by replacing the function table to hide the process of
FileGuard-safe-hook
- 文件过滤驱动，File filter driver intercepts file functions include copy, move, Read, Write, and get the file information, and so on. -File system driver.-File filter driver intercepts file functions include copy, move, Read, Write, and get the file informat
VCPP-driver-Hook-kernel-system-call
- VC++ 驱动层Hook系统内核调用 VC++ driver Hook kernel system call VC++ driver Hook kernel system ca-VC++ driver Hook kernel system call
Driver Loader/Unloader Example Source Code
- self explantator winddk needed
HOOK-API
- 一个寒江老师的课件，单独出来发的目的是，让初级入门的驱动程序员们，很快的了解驱动如何对SSDT挂钩以及Windows应用程序如何简单的调用驱动接口的流程。 代码非原创，但是是我看到的最简单和最清楚的流程之一，非常适合刚入门驱动员们的口味，需要的就赶快下载吧。(It`s hanjiang teacher courseware, the purpose is to separate out, let the driver programmer entry-level, quickly unders
Source
- 用于对指定设备驱动的信息分发调用序列的记录。(Driver's Dispatch Routines Hooking The driver allows you to log dispatch routines calls (and their relative sequence) for given device object(s).)
HOOK graphics driver_
- hook d3d显卡驱动源码,内核驱动hook(hook D3D graphics driver source code, kernel driven hook)