搜索资源列表
expxv.5
- 这是一个编辑/查看PE文件导出表的工具。利用它可以方便的对PE文件的导出表进行增、删、改的操作，现在它还可以用于给没有导出表的文件添加导出函数。 这个工具除了PE diy外，通过为导出函数添加Forward信息等方法还可以实现函数hook，dll注入等功能。
PE
- 基本的驱动编程和客户端，客户端分析PE文件，重定位后，传给驱动，恢复被360 Hook的KifastCallEntry函数，同时，该源码还能实现对大多数安全软件进行强杀，如卡巴，360，瑞星，等等。仅限XP系统。-Basic programming and client-driven, client-side analysis PE file, re-positioning, passing drivers, restore 360 Hook' s KifastCallEntry func
PEHOOK
- 可以实现PE HOOK。这种方法对于拦截、分析其他内核驱动的函数调用来说用的比较多。原理是根据替换 PE 格式导出表中的相应函数来实现的。 -Can achieve PE HOOK. This method for the interception, analysis of other core-driven function call is used more. The principle is based on PE format to export table to replace t
hook
- hook技术，用于注入pe拦掉网络封包，有利于网络游戏的分析-hook technology for network packet injection pe block away, is conducive to the analysis of online games
HOOK
- HOOK API,对于一个没有接触过人而言，时个神秘地带，真有那么神秘码？微软提供了这方面的开发包DETOUES,很简单，不需要其他工作就可以实现了，不需要跳转指令，不需要修改PE头，更不需要枚举当前所有进程和即将启动的进程-HOOK API, no contact for a man is concerned, when a mysterious area code really so mysterious? Microsoft provided an SDK DETOUES, very si
hook
- VBAPIHooker - API拦截类（这是主角，它需要用到以下三个类） VBMemoryAllocator - 内存分配管理类 VBPEFnLocator - PE文件导入/导出函数定位类 VBMiniWindow - 迷你消息窗口类-VBAPIHooker- API interception type (which is the main character, it needs to use the following three categories) VB
kernel.txt.tar
- Sometimes, we run into a situation when we badly need to hook some kernel function, but are unable to do it via conventional PE-based hooking. This article explains how kernel functions can be directly hooked. As a sample project, we are going to pre
ImportView_SRC_s
- ImportView 输入表view工具的源代码，很好学习PE结构的输入表结构，应用于IAT HOOK-ImportView input tools, source code for the table view, very good to learn the structure of PE input table structure, used in IAT HOOK
pe-file
- 对pe文件详细介绍 学HOOK API 时能用上-an intrudution to pe file in detail is useful to hook api
api-pe-Hook
- api hook ,windows下pe挂钩的, 拦截 改写驱动安装api 的例子 +++++分-api hook ,windows下pe挂钩的, 拦截 改写驱动安装api 的例子+++++分
Other-Iniect
- 别类的的注入方法实现 （解析PE结构写入目标DLL）-othe inject HOOK
e_lagwage_PE_control
- 易语言PE操作源码,各种PE操作,里面附带各种hook,钩子-PE operation easy language source code, all kinds of PE operations, which included a variety of hook, hook
ImportTableInject
- 导出表钩子的实例代码，导出表是pe的一个重要结构-import table hook
HOOK-IAT
- 通过分析PE文件格式，修改函数入口点，实现IAT HOOK-By analyzing PE file format, modify the function entry points, for IAT HOOK
DelphiApiHook
- APIHOOK,通过遍历PE文件修改导出函数表进行HOOK-APIHOOK, by traversing the PE file to modify the derived function table HOOK