资源列表
GameCreak
- 一个截获游戏网络封包的源码，写外挂的必修课啊-intercepted a game of the source of network packets, write external compulsory ah
regedit_fxfilthook
- 手工修改注册表比较困难 注册fxfilthook驱动程序-the ability to modify the registry more difficult registered fxfilthook Driver
KeyLogger_src
- Keyboard spy, a simple key logger implementation and suggest ways of defeating it.
KeyHook_demo
- Keyboard Hook, This example shows how to write global hooks .This program captures all the Keyboard events and save the keys to a text file-Keyboard Hook, This example shows how to write global hooks .This program captures all the Keyboard events
littleHook
- 一个简单的钩子程序，希望对初学者有个启发。-hook a simple procedure, and I hope to have a beginners inspiration.
MHKASS
- 屏蔽热键和调整分辨率,利用hook技术,底层编程例子-shielding hotkey and adjust resolution, the use of hook technology, the underlying programming examples
IATroot
- IATroot为一款以Hook IAT表中的输入函数为基础的一款RootKit，功能比较完整，其中自带一个Native API的开发库及源代码。-IATroot Hook to one to table the IAT input function-based one RootK it, more functional integrity, which own a Native API development libraries and source code.
Hooker2.5
- 一个记录键盘的完整程序，采用dll注入方式hook API，有完整的dll代码和注入程序的代码,及lzw压缩算法的完整代码。-a record keyboard integrity procedures used dll injected hook API, a complete dll injection procedure code and the code, and the compression algorithm 4,558,302 integrity code.
SSDT_hook
- SSDT hook example (hiding processes) correction -SSDT hook example (hiding processes) Corr ection
Detection_of_the_hidden_processes
- Many users have got used that Windows NT Task Manager shows all processes, and many consider that i s impossible to hide a process from Task Manager. Actually, process hiding is incredibly simple. There are lots of methods available for such a purpos
Single_Byte_Hooks
- Recently I rewatched Joanna s HITB presentation video and I noticed she said that a rootkit leveraging a single byte modification is impossible! Well I think that was a little bold to say and in my opinion it doesn t seem that infeasible that a on
Hook_Windows_API
- 这篇文章是有关在OS Windows下挂钩API函数的方法。所有例子都在基于NT技术的Windows版本NT 4.0及以上有效(Windows NT 4.0, Windows 2000, Windows XP)。可能在其它Windows系统也会有效。 你应该比较熟悉Windows下的进程、汇编器、PE文件结构和一些API函数，才能明白这篇文章里的内容。 这里使用\"Hooking API\"这个术语表示对API的完全修改。当调用被挂钩的API时，我们的代码能立刻被执行。我将写下完全