搜索资源列表
Delphi-hide-porcess
- Delphi下真正隐藏进程的代码，由VC的代码转成D的，不是采用hook的方法实现的，真正从物理内存中去隐藏，绝大部分进程查看器找不着，效果不错-Delphi genuine process of hidden code, the code by VC D conversion. instead of using the hook method, and from physical memory to conceal most of the process viewer could not fi
HookSrc
- API calls interception is the task that allows you to get access to some parts of others programs. Lots of programmers spend time developing and describing various methods that allow that access. Such methods are used in many anti-virus and anti-spyw
RootKit
- 检测进程的代码,可以查出当前Rootkit进程。推荐!(使用挂钩线程调度链表) -detection process code, we find the current Rootkit process. Recommended! (Using thread scheduling chain link)
zhuru.dll注入的源代码
- 一个dll注入的源代码，通过找窗口句柄，HOOK，热键呼出封装在dll中的窗体,A dll into the source code through to find window handle, HOOK, exhaled hotkey is packaged in a form in dll
HOOKexamples-winspy
- 网上找到的。学习HOOK的好资料，可参考-Find online. HOOK learning good information, refer to
DLL_LPK
- DLL劫持技术当一个可执行文件运行时，Windows加载器将可执行模块映射到进程的地址空间中，加载器分析可执行模块的输入表，并设法找出任何需要的DLL，并将它们映射到进程的地址空间中。-DLL hijacking as an executable file is run, Windows loader maps the executable module to the process' s address space, executable module loader of the inp
delphi-hook-readwrite
- delphi hook内存读写,可以拦截其他程序的读写操作以及读写数据,比如有些*可以用此工具找出他对游戏的具体操作,从而自己可以写一个功能和他一样的*出来-delphi hook memory read and write, can intercept and read and write operations of other programs to read and write data, for example, some plug-in can use this tool to f
HookDll
- 动态链接库DLL钩子源码及说明文件，详细论述了DLL钩子开发中常见的但不容易发现的严重问题及解决办法-Dynamic Link Library DLL hook source code and documentation, discusses in detail the development of the common DLL hook, but not easy to find serious problems and solutions
notebookHook(run_notebook_first)
- 一个简单的示例，供学习钩子的人参考，首先运行记事本，然后运行本程序以后，可以发现记事本的输入已经改变了-A simple example of reference for the study of people hook, first run Notepad, and then run the program later, you can find Notepad input has changed
anti-ssdt
- Windows XP是通过sysenter调用KiFastCallEntry将ntdll.dll的调用切换到内核的。KiFastCallEntry的原理是通过在SSDT中查找函数地址跳转。所以只要伪造一张原始SSDT，就可以使得SSDT-HOOK无效了。-Windows XP by calling KiFastCallEntry sysenter ntdll.dll call will switch to the kernel. KiFastCallEntry SSDT principle i
MSNHook
- 通过钩子捕捉MSN的密码。通过Findwindow找到MSN的窗体，然后通过FindWindowEX找到自窗体的输入框接着捕捉按键。-Through the hook to capture MSN password. FindWindow found through the MSN form, and then through the FindWindowEx to find form since the input box and then capture button.
vice
- 能够找出给种类型的系统Hook,包括IAT表，SSDT表等相关的钩子-VICE is a tool to find hooks. Features include: 1. Looks for people hooking IAT s. 2. Looks for people hooking functions in-line aka detouring. 3. Looks for hooks in the System Call Table. Thanks to Tan perh
anti-hook-ssdt
- ssdt钩子检测，利用查找ntkrnlpa.exe中导出的ssdt的起始地址和大小，比较实际的ssdt地址表中的内容，找出钩子-ssdt hook detection, the use of export ntkrnlpa.exe Find ssdt the start address and size, a more realistic ssdt address the contents of the table to find out hook
BossHook
- 在.Net2.0环境上开发WinForm程序，当在多线程中修改界面控件的状态，会抛出一个异常：Cross-thread operation not valid:Control textBox1 accessed from a thread other than the thread it was created on .后查询知道这是因为.net 2.0以后加强了安全机制，不允许在winform中直接跨线程访问控件的属性。到网上Google下，找到的解决方案有三种，现将这三种解决方案整理如下：
GamePlugin
- 星际108B单机刷钱刷气 初学，所以功能很弱 （随便找个DLL注入的东西注到星际进程，然后就自动每100毫秒+10钱和气）-Interstellar gas-108B single Shuaqian brush beginner, it functions very weak (easily find what DLL injection into the interplanetary injection process, and then automatically every 100
API
- 制作API钩子,截获API的源码 网上找的，不能下东西，只能先传个上去-Production of API hook, intercepted API source online to find and can not be the next thing, one must first pass up
NetHookApi
- 在网上找到的。对于研究对战平台的朋友来说应该有用，要的下载-Find online. Battle for the Study of the platform of my friends should be useful to download
HOOK_CreateFile
- 使用微软件的detours的LIB库WinAPI函数监控,-AppWizard has created this DetourDll DLL for you. This file contains a summary of what you will find in each of the files that make up your DetourDll application.
Ucontrol
- 能用自己的程序去控制U盘的关与开，这是一个源代码哟，本人研究了好久，查阅了大量的WINDOWS api资料。-The source code can control your U Driver,P S ,the file is a source,I find many windows api document and study long times.
object-hook
- 信息隐藏亮点之一： 将rootkit作为资源隐藏于用户模式程序之中 亮点之二： 将这个用户程序代码作为生成密钥的引子，可以有效地防止逆向后，隐藏信息被纰漏，因为只有逆向后生成的 代码，跟原作者的代码丝毫不差，将来才能打开其隐藏至深的下载者链接及代码。 亮点之三：用一个固定的KEY，通过某种运算，产生出1024个密钥组成的数组。 然后用这个密钥组与用户代码进行运算，最终生成一个4字节的解码KEY。 利用解码KEY，在从加载到内存的驱动中，找出隐藏在其资源中的那份肮脏的 下载