搜索资源列表
antihooks001
- this is anti hook code -this is anti hook code
phunter_source_code
- PHunter的源代码,便于学习各种Hook和Anti-Hook的方法
anti-ssdt
- Windows XP是通过sysenter调用KiFastCallEntry将ntdll.dll的调用切换到内核的。KiFastCallEntry的原理是通过在SSDT中查找函数地址跳转。所以只要伪造一张原始SSDT,就可以使得SSDT-HOOK无效了。-Windows XP by calling KiFastCallEntry sysenter ntdll.dll call will switch to the kernel. KiFastCallEntry SSDT principle i
psd
- 一个加强的密码框控件,防HOOK,防键盘记录,防字典攻击-An enhanced password box control, anti-HOOK, anti-keyloggers, anti-dictionary attack
ring0
- Ring0钩子防网页挂马的一个代码,不错。-Anti-hook Ring0 pages linked to the horse a code, yes.
nohook
- 检测自己不被Hook,这在反黑、反病毒应用中是很重要的-Detection of their own not to be Hook, in the anti-, anti-virus applications is very important
antikeylog
- 基于软件的键盘记录工具记录通过键盘输入的信息,对用户隐私和计算机安全造成严重威胁。Windows钩子是一种开发键盘记录工具的主要技术。我们设计了一个反键盘记录工具来检测已知和未知的基于Windows钩子的键盘记录工具,它通过检测可疑模块和拦截键盘相关钩子来实现,可保护我们免受几乎所有的基于Windows钩子的键盘记录工具的威胁。-Software-based tool to record keyboard record information through the keyboard input
anti-hook-ssdt
- ssdt钩子检测,利用查找ntkrnlpa.exe中导出的ssdt的起始地址和大小,比较实际的ssdt地址表中的内容,找出钩子-ssdt hook detection, the use of export ntkrnlpa.exe Find ssdt the start address and size, a more realistic ssdt address the contents of the table to find out hook
SESYS
- 取page段地址的代码 大概包括了ssdt, idt, msr钩子,3种notify,还有从文件读取偏移抗猥琐的代码. 支持这个编程板块-Get page segment address code probably includes ssdt, idt, msr hook, three kinds of notify, also read from the file offset anti-insignificant code. To support the programming plate
NoKill
- VC写的一个DLL.主要用来提供给C#调用,因为C#不支持全局钩子..自定义方法实现简单进程防杀.(Hook原理)-VC to write a DLL. Is mainly used to C# to call, because C# does not support global hooks .. Since the simple process of definition of methods to achieve anti-killing. (Hook Principle)
antinpinline
- anti np inline hook,可以过游戏保护np的inline hook,目前还是可以使用,asm源码-anti np inline hook, can lead the game to protect np the inline hook, or you can use the current, asm source
UTM4XP
- 一个简单ARK源码。包括进线程操作,隐藏进程检测,SSDT,SHADOW SSDT hook查看-An anti-rookit tool
ProtectFile
- 本程序功能为防止文件删除,其中包含三个部分,分别为:FSD INLINE HOOK初级防删,HOOK IoCreateFile中级防删,HOOK IoCheckShareAccess高级防删。-The program features to prevent file deletion, which consists of three parts, namely: FSD INLINE HOOK primary anti deleted, HOOK IoCreateFile intermediat
AntiHookExec
- Anti Hook from ring3
NoKilledProcess
- 原创的进程防杀最终版 Hook OpenProcess 支持xp,server2003,不支持NT2-Original anti-death process, the final version of Hook OpenProcess support xp, server2003, does not support NT2000
DEP_hook
- 易语言编写的dll,使用API-hook守护程序进程,达到防杀的目的-Written in easy language dll, using the API-hook daemon process to achieve the purpose of anti-kill
anti ssdt
- 过大多数网游反外挂代码 恢复各种SSDT inline hook-anti SSDT inline hook
[6-2]Ring3InlineHookAntiHook
- RING3 环境下的INLINE HOOK和反 Hook-INLINE HOOK and anti Hook RING3 Environment
anti-hook
- anti hook for win7 delphi
delphi-hook-library
- wr960204武稀松.2012.2 主页 http://www.raysoftware.cn 通用Hook库. 支持X86和X64. Get 使用了开源的BeaEngine反汇编引擎.BeaEngine的好处是可以用BCB编译成OMF格式的Obj, 被链接进Delphi的DCU和目标文件中.不需要额外带DLL. BeaEngin引擎 http://www.beaengine.org/ 限制: 1.不能Hook代码大小小于