搜索资源列表
Hook 系统服务隐藏端口
- 适用于 Windows 2000, Windows XP, Windows Server 2003 这个小例子将隐藏 TCP 端口 139 运行 \\bin 目录下的 \"JiurlPortHide Loder.exe\"，按照程序提示完成端口隐藏，和解除端口隐藏-applies to Windows 2000, Windows XP, Windows Server 2003 this small example of hidden running TCP port 139 \
Mouse.exe
- 鼠标钩子编程源代码 本程序能实现显示鼠标所在位置内容 见主程序Mouse.exe，源代码已给出 请斑竹审核 -mouse hook programming source code procedures to achieve the mouse shows the location of the main program elements Mouse.e xe, the source code has been given 62-audit requested
Su1xDriver 该驱动通过hook ssdt ZwOpenProcess
- 该驱动通过hook ssdt ZwOpenProcess，来保护保护suserice.exe。 只是练练手，含金量不高。 锐捷客户端Su1xDriver.sys逆向，附源码-The drive through the hook ssdt ZwOpenProcess, to protect the protection suserice.exe. Just practice your hand, gold is not high. Ruijie client Su1xDriver.s
CeApiSpy
- 这是一个运行在Windows CE上的API监测工具，可以HOOK系统API，当前Hook了CreateFile, CreateProcess, Loadlibary函数，用户可以很方便的添加自己希望Hook德函数-This is a run on Windows CE on the API monitoring tool, you can HOOK system API, the current Hook the CreateFile, CreateProcess, Loadlibary fu
project
- 是一个简单的跨进程的APIHOOK，目标程序是NOTEPAD.EXE很有学习意义，代码部分是网上学习，部分是自己原作。原大家一起学习，另，由于作者也是刚学习，有什么错误请指出，谢谢，邮箱dake1024@163.com-Is a simple process of cross-APIHOOK, the target procedure is very NOTEPAD.EXE learning the meaning of the code is e-learning part of their
HOOK
- Visual c++ 编写的 Hook例子,exe和Dll源文件-Visual c++ Prepared Hook example, exe and Dll source file
deny_rename_exe
- HOOK API的例子,可以禁止改名 扩展名为EXE的文件.-HOOK API example, could prohibit the extension renamed EXE file.
anti-hook-ssdt
- ssdt钩子检测，利用查找ntkrnlpa.exe中导出的ssdt的起始地址和大小，比较实际的ssdt地址表中的内容，找出钩子-ssdt hook detection, the use of export ntkrnlpa.exe Find ssdt the start address and size, a more realistic ssdt address the contents of the table to find out hook
antihook_src
- 创建一个内核驱动，伪造一个ssdt表，使得ssdt钩子失效。-Create a kernel driver, forged a ssdt table, making failure ssdt hook.
guajisuo
- 绿色，不写注册表，单独文件(仅78KB) 可屏蔽一切系统热键包括Ctrl+Alt+Del/Win/Sleep/Power/屏保 支持时间密码 (管理员专用) 可自制logo和锁屏背景 替换logo将300*70名为logo.jpg的图片放到相同目录下即可 添加锁屏背景名为bg.jpg的图片放到相同目录下即可 支持命令方式运行,参数如下 /p 密码 /t 告示语句 /m 定时 如在服务器上让客机锁屏30分钟，可通过计费服务器远程命令执行 \\server\sof
GetKey
- 键盘钩子~~ 运行后所有输入的键会被记录到c:\windows\system32\key.exe(用记事本打开）程序的进程会自动隐藏-Keyboard hook ~ ~ running all the input keys will be recorded to the c: \ windows \ system32 \ key.exe (use Notepad to open) the program' s process will be automatically hidden
SASHook
- SAS Hook,使用远程进程注入的方法注入winlogon.exe屏蔽Ctrl+Alt+Del键，本人几年前的老作品了，对Vista及以上系统无效。-SAS Hook, use the method of injection into the remote process winlogon.exe Shield Ctrl+ Alt+ Del keys, I have a few years ago the old works, and on Vista and above systems is
inline_hooks_ntquerydirectoryfile
- Purpose: - Implement remote code injection - Usermode hook (Ntdll->NtQueryDirectoryFile) Note: This is only POC that will hide file explorer.exe Hidding file via usermode code injection to explorer.exe You can restart explorer.exe to un
KernelLookup
- Open Source SSDT Hook detection utility, it will scan the SSDT Entries in the kernel (ntoskrnl.exe) and find the functions that are hooked & not in the kernel base address range .
Winsocks_hook
- Hook winsocks and redirect calls to where you want them to go..i am going to use this to make ypager.exe login to my own proxy to make clone of ytunnel..with out using the proxy settings built into meseger ..this is a powerfull tool..and hard to find
Hook
- 进程注入，可以查找只定exe文件，回调执行自己函数-Into the process, you can find only be exe file, the callback function performs its own
hook
- 钩子...可以通过改写程序屏蔽大部分程序-hooks ... everything can be shielded by rewriting the program EXE
delphi-keyboard-hook-source
- delphi歪瓜钩子注入例子键盘钩子delphi7源码。包含dll和exe部分。-delphi crooked melon hook into the keyboard hook example delphi7 source. Dll and exe contains part.
hook
- 这个程序的目的是抓取一些从键盘输入的魔术数字-The purpose of program is catching some "magic" numbers entered from keyboard and displaying them with toggled words in popup window. To see how it works just compile both projects and run hook.exe with parameter which is the f
HOOK注入框架（DLL源码）
- HOOK注入框架（DLL源码）和EXE 注入源码及框架(Hook injection framework (DLL source code) and exe injection source code and framework)