资源列表
HookSys_code
- 披露API Hook的相关技术。讲述如何监控API函数、查看操作系统内部以及如何扩充原函数的功能-Intercepting Win32 API calls has always been a challenging subject among most of the Windows developers and I have to admit, it s been one of my favorite topics. The term Hooking represents a fundament
winspy_package
- 提供三种方法实现DLL注入。 包括:Windows Hooks、The CreateRemoteThread & LoadLibrary Technique、 The CreateRemoteThread & WriteProcessMemory Technique-Provides three ways to achieve DLL injection. Including: Windows Hooks, The CreateRemoteThread & LoadLibrary T
FITER
- 基于Filter—Hook Drive设计个人防火墙-Based on Filter-Hook Drive Design of Personal Firewall
YAPMv2.3.0
- 一个功能强大的进程监视软件。这是与著名的Process Monitor并行的另一个进程监视软件。它可以实现远程监控。-et Another (remote) Process Monitor (YAPM) is a powerful application that allows to view and manage your running tasks, processes, threads, modules...etc. and your services on a local or on a
HookMouse
- 一个简单的鼠标钩子程序 Windows系统是建立在事件驱动的机制上的,说穿了就是整个系统都是通过消息的传递来实现的。而钩子是Windows系统中非常重要的系统接口,用它可以截获并处理送给其他应用程序的消息,来完成普通应用程序难以实现的功能。钩子的种类很多,每种钩子可以截获并处理相应的消息,如键盘钩子可以截获键盘消息,外壳钩子可以截取、启动和关闭应用程序的消息等。本文在VC6编程环境下实现了一个简单的鼠标钩子程序,并对Win32全局钩子的运行机制、Win32 DLL的特点、VC6环境下的MF
HookStDn
- hook拦截关机消息,包括测试例子,对初学者非常有用-shutdown hook to intercept the message, including test cases, is very useful for beginners
dasfvdvsdvsd
- 截取封包的操作~~~~~~~~~~~~~~~~~~~~`好象还行的源码-Packet interception operation ~~~~~~~~~~~~~~~~~~~~` if the source code is also OK
keyboardlogger
- inline hook 可以实现兼容PS/2键盘和USB键盘的Logge 源代码 键盘Logger是Hook 键盘类驱动Kbdclass的分发函数,在类驱动的下面是端口驱动。用DeviceTree 可以看到PS/2键盘的端口驱动是i8042prt,USB键盘的端口驱动是Kbdhid。无论是PS/2 键盘还是USB键盘,在端口驱动处理完IRP之后都会调用上层处理的回调函数,即KbdClass 处理输入数据的函数。Hook 这个回调函数,不但可以实现兼容PS/2 键盘和USB 键盘的Log
hook
- 提权代码 一般当用户权限不够时可以使用其提升程序权限-To mention the right of the code in general is not enough when a user permission to use their upgrade programs can access
DLL
- DLL注入一例,将DLL注入任一程序的运行空间。-DLL Injection 1 cases, the DLL into either a program running space.
APIFunctionReferenceManual
- API函数参考 里面含有所有的windows的API函数-Function Reference Manual
apishutdown
- 用VB写的一个简单的获取系统权限来注销 关机的程序代码 可用作参考-To use VB to write a simple access to the system permission to write-off to shut down the program code can be used as reference to