搜索资源列表
Hook-Driver－by
- windows ndis钩子程序，用于防火墙、vpn、nat、网络驱动等软件的开发。-hook procedures for firewall, VPN, nat, network drives, such as software development.
regedit_fxfilthook
- 手工修改注册表比较困难 注册fxfilthook驱动程序-the ability to modify the registry more difficult registered fxfilthook Driver
MPUSBAPI
- MicroChip的USB 芯片的驱动API函数库,编译以后成为MCHPFUSB.d-MicroChip the USB Driver API functions, After compiling become MCHPFUSB.d
SystemModulesSee
- 获得所有windows加载的内核模块信息。 一个不错的学习windows驱动程序和windows内核的代码。-access to all windows kernel module loading information. A good learning windows driver and windows kernel code.
driver
- 用DDDK编写驱动,修改SSDT表HOOK NTDebugActiveProcess函数 钩子函数中可以判断PID号,决定是否放行,放行则在钩子函数中调用原来的NTDebugActiveProcess函数.否则直接返回False.HOOK成功后所有调用DebugActiveProcess的程序将会失效.当然可以按照你的需要HOOK更多的系统服务函数.同一服务函数的服务号在每个操作系统版本中是不同的.下面附件中编译完成的驱动请在WinXP SP2的环境下测试.否则可能会导致直接重启
内核模式的apihook
- 内核模式的apihook例子，使用了驱动程序。-apihook example, the use of a driver.
c_api_hook.zip
- NT下的用驱动程序写的截获api函数调用的程序,Under NT driver written using api function call intercepted procedures
hook
- 驱动挂钩，拦截指定函数调用。 -Driver linked to intercept the specified function call. Driver linked to intercept the specified function call.
Winio.rar
- Winio做的键盘记录(硬件记录)。有时候调用windows的API不能起效。这个是驱动级别的。能成功完成任务。,Keyloggers do Winio (hardware records). Sometimes windows of the API calls can not take effect. This is a driver level. To the successful completion of the task.
winIO2
- 驱动级模拟使用winio模拟键盘和鼠标的例子-Driver-level simulations using the keyboard and mouse winio simulation examples
Filemon_src
- 本资源两部分：1、Windows文件系统过滤驱动开发教程(第二版)，中文PDF文件。2、文件监控FileMon源码，C++/C代码-The resources of two parts: 1, Windows File System Filter Driver Development Guide (Second Edition), Chinese PDF files. 2, file monitoring FileMon source, C++/C code
Hook_ZwQueryInformationProcess_VC
- hook ssdt的驱动的实现，隐藏进程。-hook driver
explorer
- 文件监控驱动，里面包含了多种HOOK，很值得参考-Monitor driver file, which contains a variety HOOK, is worth considering
antihook_src
- 创建一个内核驱动，伪造一个ssdt表，使得ssdt钩子失效。-Create a kernel driver, forged a ssdt table, making failure ssdt hook.
HookKey
- IRP Hook 键盘Logger源代码 键盘Logger是Hook 键盘类驱动Kbdclass的分发函数，在类驱动的下面是端口驱动。用DeviceTree 可以看到PS/2键盘的端口驱动是i8042prt,USB键盘的端口驱动是Kbdhid。无论是PS/2 键盘还是USB键盘，在端口驱动处理完IRP之后都会调用上层处理的回调函数，即KbdClass 处理输入数据的函数。Hook 这个回调函数，不但可以实现兼容PS/2 键盘和USB 键盘的Logger,而且比分层驱动的方法更加隐蔽。-
windows_kernel_tool
- 一：SSDT表的hook检测和恢复 二：IDT表的hook检测和恢复 三：系统加载驱动模块的检测 四：进程的列举和进程所加载的dll检测 -1: SSDT table hook detection and recovery 2: IDT table hook detection and recovery 3: System load driver module test 4: the process list and the process of loading the dll
APIHook
- API拦截pdf的手册，里面讲解了Injection\IAT HOOK，以及实现的代码，还讲解了驱动层的HOOK部分-API interception pdf manual, which explains Injection \ IAT HOOK, and the realization of the code, but also explain part of the driver layer HOOK
DLL
- 驱动级DLL注入源码。包含有系统兼容性检测、驱动DLL注入技术、API HOOK技术，并且提供应用层测试。-Driver stage DLL into the source code. Contains system compatibility testing, driving the DLL implantation technology, technology, and provide the HOOK API application layer test.
FileGuard-safe-hook
- 文件过滤驱动，File filter driver intercepts file functions include copy, move, Read, Write, and get the file information, and so on. -File system driver.-File filter driver intercepts file functions include copy, move, Read, Write, and get the file informat
PLX9x5x-PCI-Driver
- 本软件演示如何编写PLX 9X5X 的windows驱动程序-This sample demonstrates how to write driver for a generic PCI device using Windows Driver Framework.