资源列表
vc消息捕捉
- 这是一个用vc实现的有关消息捕捉的程序,可一得到鼠标的位置及键盘的按下情况-This is a realization of the vc used the news of the capture, may be a position of the mouse and keyboard of the press
在2000下屏蔽Ctrl-Alt-Del例程
- 在WINDOWS2000下屏蔽Ctrl-Alt-Del例程源代码-in Windows2000 under shielding Ctrl-Alt-Del source code routines
PE文件格式
- PE文件是windows(9598NT)目前采用的可执行文件格式。流行的CIH病毒就是通过改变PE文件的内容，并且保持文件大小不变，从而实现自己的功能。本程序通过分析PE文件格式，将可执行文件的文件定位表重新定位，指向用户编写的DLL，然后指令指针返回正常调用位置。在DLL中通过系统挂钩，实现了后台各种级别密码的截获功能-PE document windows (9598NT) of the executable file format. Popular CIH virus is through
mirager_1
- 它是利用调试技术编写成的API钩子。比起16位下传统的入口代码改写技术，它是没有多线程问题的，而且能够拦截LoadLibrary/GetProcAddress完成的API显式调用。当然，如果您告诉它一些类型信息，Mirager可以在拦截到调用时获取上下文，即参数和返回值-it is the use of technologies developed into debugging API hook. Compared to the traditional 16 under the entrance
2005Keyboard
- 小程序,主要可以利用来检查按键的状态,记录下机子按过的键-small program, can be used to check the status button, the machine recorded by the bond off
wordover
- 这个程序可以返回鼠标捕捉的词，用VB编的，你也可以哦-this procedure can return to the mouse to capture the words, VB series, you can oh
在Windows 2003中HOOK ZwCreateProcessEx
- 工作需要，想控制进程的创建，于是HOOK了ZwCreateProcess，后来发现xp和2003中创建进程的都用NtCreateProcessEx-work needs to control the process of creation, then the ZwCreateProcess HOOK, later found xp 2003 and the process of creating both NtCreateProcessEx
QQSend
- 这是用VC开发的一个QQ工具，可以在QQ界面之外向QQ的窗口中输入信息并自动发送。-This is a development of the VC tool QQ, QQ interface in addition to the window QQ input and automatically send information.
SASHook_D6
- 在win2000下屏蔽系统三键的控件，只要将Enable属性设置成True就可以了-shielding system under the three key controls, as long as the property is set to Enable True% on the
QQllkSrc
- 一个用delphi写的QQ连连看*，窗体全用API实现，怎个程序只有110K。-with a written QQ 1000 block of Terry Avenue, external forms throughout the API, how programs only 110K.
APIHookingRevisited_src
- There are numerous codes in the www to explain how to hook API functions inside a remote process. So, why creating another one ? This article is the first (I) part of a tool I m working on. This tools won t be too complex, so there is no need for a h
APIHookingPart3_src
- This the third, fourth (and last) part for building a thread deadlock detector. Please see the first and second article to understand wait is going on : A (working) implementation of API hooking (Part II)