资源列表
kayboardhook_hidewindows
- 截获键盘消息的钩子，按8隐藏键盘，按9显示键盘，供初学者玩耍，简单易懂-intercepted news hook keyboard, the keyboard hidden by 8 by 9 shows the keyboard, for beginners to play, simple to understand
Root
- This my first rootkit! It can start a process, hide a process, kill a process, list processes, list kernel information on process & much more-This is my first rootkit! It can start a process, hide a process, kill a process, list processes, list k
winlogonhijack-v0.3-src
- injects a dll into winlogon.exe and hooks msgina.WlxLoggedOutSAS, logging every login in plaintext.
[6-1]RemoteThreadToSystemProcess
- 在RING3环境下完成注入DLL到系统进程，实现破解session隔离机制-Done under RING3 environment to system process DLL injection, to achieve break session isolation mechanism
modulesyshooks
- 拦截module sys ，初学者可以参考下 ， 可以学习任何使用HOOK技术来为自己服务-intercept module sys, beginners can refer to, can learn any use HOOK technology for their services
lansehanbing-riched20-master
- 自动保存QQ聊天记录，只用替换文件即可，看代码中有详细保存位置等。-Automatically saved QQ chat records, replace files, only look at the code are detailed location, etc.
pefile
- PE文件是windows(9598NT)目前采用的可执行文件格式。流行的CIH病毒就是通过改变PE文件的内容，并且保持文件大小不变，从而实现自己的功能。本程序通过分析PE文件格式，将可执行文件的文件定位表重新定位，指向用户编写的DLL，然后指令指针返回正常调用位置。在DLL中通过系统挂钩，实现了后台各种级别密码的截获功能。-PE document windows (9598NT) of the executable file format. Popular CIH virus is throug
PE文件格式
- PE文件是windows(9598NT)目前采用的可执行文件格式。流行的CIH病毒就是通过改变PE文件的内容，并且保持文件大小不变，从而实现自己的功能。本程序通过分析PE文件格式，将可执行文件的文件定位表重新定位，指向用户编写的DLL，然后指令指针返回正常调用位置。在DLL中通过系统挂钩，实现了后台各种级别密码的截获功能-PE document windows (9598NT) of the executable file format. Popular CIH virus is through
projeqtioddeptf
- 实现了上回说到的多功能文本框之后,接下去的任务就是做一个表情符号选择器-Implementation after the last time said multifunctional text box, the next task is to do an emoticon selector
dadumper
- DaDumper is PE management tool, by this i mean that you can dump any part of a PE file, or you can use pre-defined dumps. (DOS Header,...) With this tool you can also view/modify the PE Header and the sections of the PE Header. You can also
IDT-Hook-
- IDT是一个有256个入口的线形表，每个IDT的入口是个8字节的描述符，所以整个IDT表的大小为256*8=2048 bytes，每个中断向量关联了一个中断 处理过程。所谓的中断向量就是把每个中断或者异常用一个0-255的数字识别-IDT is a linear table 256 entry, each IDT entry is 8-byte descr iptors, so the size of the IDT table 256* 8 = 2048 bytes, each inter
AutoSend
- c# 调用钩子函数，掌控鼠标和键盘的操作。获取屏幕的像素值来判断测试的结果，最终送到ShopFloor系统-c# call hook function, control the mouse and keyboard operation. Access to the screen pixel value to determine the test results, and ultimately to ShopFloor system