搜索资源列表
ScanPass
- 探测密码的VC程序,用全局钩子编写.可以探测出各种密码,限本地使用.-VC password detection procedures used to prepare whole hook. The ability to detect all kinds of passwords, limited local use.
ApiHookCheck
- rootkit检测应用程序的是否被hook，里面包含了源码。包含应用层和驱动层代码。-rootkit detection application procedures whether the hook, which contains the source code. Includes application layer and layer-driven code.
MemoryHooks_src
- 能够检测系统内各个运行进程的内存泄露情况.-detection system can be run within the process of memory leaks.
myusbgina
- 该源码能替换win2000下的msgina.dll，实现自己的开机登录，并检测usb盘的插入。-the source can be replaced under the msgina.dll WIN2000, realize their boot logged, and the detection of usb disk inserted.
RootKit
- 检测进程的代码,可以查出当前Rootkit进程。推荐!(使用挂钩线程调度链表) -detection process code, we find the current Rootkit process. Recommended! (Using thread scheduling chain link)
leakfree
- 以malloc hook的方式检测内存泄漏的工具 -malloc hook to the memory leak detection tools
TestHook
- 检测系统键盘钩子程序，用于检测系统键盘的行为，并将键盘行为记录到文件中保存-detection system keyboard hook procedures for the detection system keyboard, the keyboard will record that document preservation
nohook
- 检测自己不被Hook，这在反黑、反病毒应用中是很重要的-Detection of their own not to be Hook, in the anti-, anti-virus applications is very important
anti-hook-ssdt
- ssdt钩子检测，利用查找ntkrnlpa.exe中导出的ssdt的起始地址和大小，比较实际的ssdt地址表中的内容，找出钩子-ssdt hook detection, the use of export ntkrnlpa.exe Find ssdt the start address and size, a more realistic ssdt address the contents of the table to find out hook
KeyboardDetection
- 检测键盘,按键信号,可以用作键盘检测程序设计参考-Detection of a keyboard button signal
09APISpy
- 用户模式下侦测Win32 API的例子，学习Windows动态链接库和钩子相关知识-User mode Win32 API example of detection, learning Windows dynamic link libraries and knowledge of hook
KernelRootkitsImplementandDetection
- 基于内核的ROOTKITS的实现以及检测,学习安全的程序员可以参考-Kernel-based ROOTKITS the realization and detection, to study the safety of programmers can refer to the
HOOK
- 基于HOOK和轮询检测机制的屏幕共享技术， 屏幕共享是一个很早就有的想法，它最初是在1968年辈ENGELBART展示出来的，用于在线会议。ENGELBART展示的屏幕共享是硬件方式实现的，在苹果公司提出图形化的用户界面(GUI)之后，出现了软件方式的屏幕共享技术。由于软件防护四屏幕共享的成本较低，使其得到了迅速的发展，在远程控制、远程教学、视频会议和股票分析系统中都存在着屏幕共享的需要。 目前主流的屏幕共享原理是先检测屏幕图像的变化，根据变化区域截取图像，再压缩传输给客户端。本文把检测
botdigger
- 基于api hook技术的未知病毒检测工具，可以用来学习。使用api hook工具获取刻意进程的api 序列，以api短序为特征输入svm进行识别。-Api hook technique based on the unknown virus detection tool to learn. Tools for use api hook api deliberate process sequence to a short sequence featuring api import svm for
windows_kernel_tool
- 一：SSDT表的hook检测和恢复 二：IDT表的hook检测和恢复 三：系统加载驱动模块的检测 四：进程的列举和进程所加载的dll检测 -1: SSDT table hook detection and recovery 2: IDT table hook detection and recovery 3: System load driver module test 4: the process list and the process of loading the dll
arktool
- 1、息钩子监视：列举系统上的消息钩子。 2、块加载监视：列举系统上加载的所有内核模块 3、SSDT监视：通过得到原始的SSDT地址来得到被恶意程序HOOK的API以及恢复SSDT 4、注册表保护：对一些重要的注册表项进行保护，防止恶意程序对其进行修改。 5、隐藏进程检测：检测出系统中隐藏的进程。 6、隐藏端口检测：检测出系统中隐藏的端口。 7、进程强杀：能够杀死系统中的对自身保护的恶意进程。-1, the interest rate hook monitor
password
- 探测密码 全局动态库钩子，学习系统编程的好材料-Password global dynamic library hook detection, good material for learning system programming
PDF
- Collection of PDF - Windows Rootkits, Rootkit detection, Api Hooks, Code Obfuscation Et-Collection of PDF - Windows Rootkits, Rootkit detection, Api Hooks, Code Obfuscation Etcc..
hive-detection
- 基于注册表Hive文件的恶意程序隐藏检测方法- Based on the research on the current developing trends of malicious programs, comparing systematically the various technologies and methodologies with respect to the hiding and detection of registry.
HookScout-Proactive-Binary-Centric-Hook-Detection
- HookScout Proactive Binary-Centric Hook Detection