Sometimes, we run into a situation when we badly need to hook some kernel function, but are unable to do it via conventional PE-based hooking. This article explains how kernel functions can be directly hooked. As a sample project, we are going to pre

青少年卫士网络版.这是青少年卫士网络版的Rip版,版本号为2.1,基于费尔的Ndis Hook技术. 相比正式版,除了去掉了无关紧要的注册和升级,其余一字未改.-Youth Guardian Online. This is the Internet version of the young guard Rip version, the version number is 2.1, based on the Ndis Hook Fil technology. Compared to the o

国外的一个中间层NDIS Hook 源码，通过Hook中间层，实现IP ARP 包的过滤。-Abroad, a middle layer NDIS Hook source, through Hook middle layer, to achieve IP ARP packet filtering.