Location:
Search - hook s
Search list
Description: use hook to block keyboard and taskmgr
and clip desktop s view
Platform: |
Size: 72786 |
Author: lt |
Hits:
Description: 金山词霸的屏幕取词技术，利用了 DLL编程，非常值得学习。-the screen get word technology of kingsoft powerword,use dll program, it s worthy of study
Platform: |
Size: 49730 |
Author: 无法激活 |
Hits:
Description: 国外游戏开发者杂志1997年第七期配套代码，包含Brian Hook自己的3d的api代码和Andre Lamothe的多线程代码--Code of game development magazine in 1997 the seventh issue, contains Brian Hook`s api code of 3d and multi-thread code of Andre Lamo
Platform: |
Size: 13312 |
Author: 站长 |
Hits:
Description: 关闭IE的弹出广告窗口的工具的源代码。使用了Hook和IE的COM扩展接口.-Close the pop-up ads IE window tool s source code. Hook and IE using the COM port expansion.
Platform: |
Size: 36864 |
Author: 段延松 |
Hits:
Description: Most good object, DirectShow Filter modify from transform filter can spy all media type by hook KSEevent .
Platform: |
Size: 46080 |
Author: Rabit |
Hits:
Description: 金山词霸的屏幕取词技术，利用了 DLL编程，非常值得学习。-the screen get word technology of kingsoft powerword,use dll program, it s worthy of study
Platform: |
Size: 53248 |
Author: 无法激活 |
Hits:
Description: 这是一个Hook windowsAPI 的例子。
本DLL是HOOK windows的messagobox函数
并将应用程序中调用messagebox函数弹出的对话框的样式修改了一下！修改后的对话框效果见源代码里的效果图！在release目录里自带一个将dll注入进程的程序！-Hook windowsAPI example. The DLL is the messagobox HOOK windows function will be called from applications messageBox Function pop-up dialog box changes the format a bit! After the revised results dialog see the source code's effectiveness map! The release directory will own a dll injection process procedures!
Platform: |
Size: 224256 |
Author: 王凯兵 |
Hits:
Description: 实现令人满意的风格统一的软件界面确实很难, 象网友提到的MessageBox、FileDialog、FontDialog、目录选择对话框等MFC内部甚至系统DLL内的对话框，要想让它变脸可不容易。有人说HOOK技术可以，HOOK技术确实可以，HOOK可以说是无孔不入，但HOOK的使用效率却是令人难以满意的，从目前大多数采HOOK技术的换肤软件使用情况来看，完全可以证明这一点。今天我们将讨论另外一技术来实现FileDialog的变脸，这种技术叫替换窗口过程法-achieve satisfactory style uniform software interface is really difficult, as mentioned in the MessageBox netizens, FileDialog, FontDialog, directories, etc. MFC dialog within the system DLL even within the dialog, if it's not easy changing face. Some say HOOK technology, the technology can really HOOK, HOOK can say is pervasive, but the efficient use HOOK is hardly satisfied with the majority from the current mining technology Eurocargo HOOK use of the software, can prove this point. Today we will discuss other technologies to achieve a FileDialog changing face of this technique called window replacement process method
Platform: |
Size: 610304 |
Author: 小小天职 |
Hits:
Description: 实现自定义gina接口，设计与winlogon.exe的交互:
开发原理：依赖Microsoft默认的gina dll:msgina.dll，在本dll中导入msgina.dll导出的接口，在本dll的导出接口中，保持大部分接口与msgina.dll操作的一致性，改变WlxLoggedOnSAS接口的响应，使系统在登陆成功的状态下，不响应Ctrl+Alt+Del-realize GINA interface definition, design and interactive winlogon.exe : Development Principle : Microsoft on the default GINA dll : msgina.dll, in this dll Introducing msgina.dll derived interface, the interface is derived dll's, most maintain msgina.dll interface with the operation of consistency, change WlxLoggedOnSAS interface response, allowing the system to the successful landing of the state, do not respond to Ctrl-Alt-Del
Platform: |
Size: 9216 |
Author: 欧滨 |
Hits:
Description:
Recently I rewatched Joanna s HITB presentation video and I noticed she said that a rootkit leveraging a single byte modification is impossible! Well I think that was a little bold to say and in my opinion it doesn t seem that infeasible that a one byte modification can be leveraged to accomplish something useful.
-Recently I rewatched present Joanna s Box ation video and I noticed she said that a rootkit leveraging a single byte modification is impos quit! Well I think that was a little bold to say a nd in my opinion it doesn t seem that infeasible t hat a one byte modification can be leveraged to a ccomplish something useful.
Platform: |
Size: 3072 |
Author: inwing |
Hits:
Description: 这篇文章是有关在OS Windows下挂钩API函数的方法。所有例子都在基于NT技术的Windows版本NT 4.0及以上有效(Windows NT 4.0, Windows 2000, Windows XP)。可能在其它Windows系统也会有效。
你应该比较熟悉Windows下的进程、汇编器、PE文件结构和一些API函数，才能明白这篇文章里的内容。
这里使用"Hooking API"这个术语表示对API的完全修改。当调用被挂钩的API时，我们的代码能立刻被执行。我将写下完全的挂钩过程。
-This article is concerned with the OS Windows API function linked to the method. All the examples are based on the NT version of Windows NT 4.0 and above effective (Windows NT 4.0, Windows 2000, Windows XP). In other Windows system will effectively. You may be familiar with the process under Windows, assembler, PE file structure and some API function, in order to understand this article's content. Here the use of "56.6 API," said the term of the complete API changes. When the call was linked to the API, the code can be executed immediately. I will write entirely linked to the process.
Platform: |
Size: 18432 |
Author: inwing |
Hits:
Description: Cheat Master 0.1 For DevHook with src, Real In-Game Search/Modify!
--------------------------------------------------------------------------------
Intro
=====
This is a prx mod written for DevHook 0.4+, which is used to search and
modify/lock data in memory while playing game.
HOWTO Install
=============
1. Copy directory CheatMaster to root of your PSP memorystick.
2. Modify /dh/2xx/flash0/kd/pspbtcnf_game.txt, which 2xx means your emulated
firmware directory (e.g. 271 for 2.71 firmware directory), add one line:
ms0:/CheatMaster/CheatMaster.prx
after the line:
ms0:/dh/kd/devhook.prx
3. Start game, press [Volume DOWN] + [Note] button to call up the menu.
2006-08-08 v0.1
[+] First public version
[+] Search, modify and lock functions
[+] Address table, with save/load functions
[+] Memory dump functions
[o] Memory searching may write results with large amount to disk, so keep at least 10MB free space on memorystick if you want to search values smaller than 256 with auto or byte modeCheat Master 0.1 For DevHook with src, Real In-Game Search/Modify!-------------------------------------------------------------------------------- Intro ===== This i prx's a mod written for DevHook 0.4, which is used to search and modify/lock data in m emory while playing game. HOWTO Install ======= ======= 1. Copy directory CheatMaster to root o f your PSP memorystick. 2. Modify/dh/2xx/flas h0/kd/pspbtcnf_game.txt. 2xx which means your emulated firmware directo ry (e.g. 271 for 2.71 firmware directory) add one line : ms0 :/CheatMaster/CheatMaster.prx after the line : ms0 :/dh/kd/devhook.prx 3. Start game, press [Volume DOWN] [Note] button to call up the menu. 2006-08-08 v0.1 [] First public version [ ] Search, modify and lock functions [] Address table. with save/-Cheat Master 0.1 For DevHook with src, Real In-Game Search/Modify!-------------------------------------------------------------------------------- Intro ===== This i prx's a mod written for DevHook 0.4, which is used to search and modify/lock data in m emory while playing game. HOWTO Install ======= ======= 1. Copy directory CheatMaster to root o f your PSP memorystick. 2. Modify/dh/2xx/flas h0/kd/pspbtcnf_game.txt. 2xx which means your emulated firmware directo ry (e.g. 271 for 2.71 firmware directory) add one line : ms0 :/CheatMaster/CheatMaster.prx after the line : ms0 :/dh/kd/devhook.prx 3. Start game, press [Volume DOWN] [Note] button to call up the menu. 2006-08-08 v0.1 [] First public version [ ] Search, modify and lock functions [] Address table. with save/
Platform: |
Size: 10240 |
Author: zb |
Hits:
Description: 国外收集的多个hook代码
Let s talk about kernel and drivers
--- --- --- --- --- -----
Author: Holy_Father <holy_father@phreaker.net>
/ When you see the shadow,
think about the light that causes it /
Version: 1.0 english
Birthday: 27.08.2005
Home: http://www.hxdef.org, http://hxdef.net.ru,
http://hxdef.czweb.org, http://rootkit.host.sk-foreign collected more than hook code Let's talk about kernel and d rivers----------------------------------- Author : Holy_Father
Platform: |
Size: 263168 |
Author: 校风 |
Hits:
Description: 微软公司的拦截api开发包:
All Detours functions are compatible with all x86 version of Windows NT,
Windows 2000, and Windows XP. However, under Windows 95, Windows 98, and
Windows ME, the DetourFunction* APIS do not work unless the program is
running under a debugger (the process was created with the DEBUG_PROCESS flag
on the call to the CreateProcess* APIs). Since most programs are not typically
run under a debugger, the DetourFunction* APIs do not work for most programs
on Win9x platforms.-Microsoft's interception api development kits : All Detours functions are compatible with all x 86 version of Windows NT, Windows 2000, and Windows XP. However, under Windows 95, Windows 98 and Windows ME,* DetourFunction the APIS do not work unless the program is running under a debugger (the proces 's was created with the flag on the DEBUG_PROCESS call to the CreateProcess* APIs). Since most pr ograms are not typically run under a debugger. the DetourFunction* APIs do not work for most pr ograms on Win9x platforms.
Platform: |
Size: 529408 |
Author: 摩尔 |
Hits:
Description: 这个是孙鑫老师的课程20——《Lesson20HOOK和数据库访问》这章的内容-Xin Sun is the teacher's curriculum 20-- "Lesson20HOOK and database access," this chapter The content
Platform: |
Size: 175104 |
Author: 化十 |
Hits:
Description: A new method of propagation for computer viruses is here
presented, Automated File Transfer Infection (AFTI). This
method is specific for the Microsoft® Windows®
NT/2000/XP/Server 2003 platforms, albeit it may be extended to
the 95/98/ME systems as well, and even other Operating
Systems. It is based upon WinSock 2 hooking with the Service
Provider Interface (SPI).-A new method of propagation for computer vi ruses is here presented. Automated File Transfer Infection (AFTI). Thi 's method is specific for the Microsoft
Platform: |
Size: 14336 |
Author: ws07 |
Hits:
Description: use hook to block keyboard and taskmgr
and clip desktop s view
Platform: |
Size: 72704 |
Author: lt |
Hits:
Description: C#钩子程序，主要是统计一天中鼠标总的移动距离和键盘总的敲击次数。程序中直接使用了Georgi的UserActivityHook 类。-C# hook procedures, mainly statistical day, the total movement distance of the mouse and keyboard tapping the total number of times. Program directly using the Georgi' s UserActivityHook class.
Platform: |
Size: 152576 |
Author: 259 |
Hits:
Description: SYSENETER是一条汇编指令，它是在Pentium® II 处理器及以上处理器中提供的，是快速系统调用的一部分。SYSENTER/SYSEXIT这对指令专门
用于实现快速调用。在这之前是采用INT 0x2E来实现的。INT 0x2E在系统调用的时候，需要进行栈切换的工作。由于Interrupt/Exception Handler的
调用都是通过 call/trap/task这一类的gate来实现的，这种方式会进行栈切换，并且系统栈的地址等信息由TSS提供。这种方式可能会引起多次内存访
问（来获取这些切换信息），因此，从PentiumII开始，IA-32引入了新指令：SYSENTER/SYSEXIT。有了这两条指令，
从用户级到特权级的堆栈以及指令指针的转换，可以通过这一条指令来实现，并且，需要切换到的新堆栈的地址，以及相应过程的第一条指令的位
置，都有一组特殊寄存器来实现，这类特殊寄存器在IA-32中称为MSR(Model Specific Register)。这里牵涉到3个特殊寄存器-SYSENETER is a compilation of instructions, it is in the Pentium ® II processor or above processor provided as part of a fast system calls. SYSENTER/SYSEXIT This specialized instruction
For fast calls. Before this is achieved using INT 0x2E. INT 0x2E in the system call when the work required to switch the stack. The Interrupt/Exception Handler s
Calls through call/trap/task to implement this type of gate, and in this way would be to switch the stack and system stack address and other information provided by the TSS. This approach may lead to memory access times
Q (to obtain the switching information), therefore, start from the PentiumII, IA-32 introduces a new command: SYSENTER/SYSEXIT. With these two instructions,
From the user level to privilege level of the stack and instruction pointer conversion, achieved through the instructions, and the need to switch to the new stack address, and the corresponding bits in the first instruction of the process
Home, there is a spec
Platform: |
Size: 30720 |
Author: wu |
Hits:
Description: 使用钩子截取串口数据的入门程序，使用dll注入方氏。-Use hook intercepts the serial data entry procedures, the use of dll' s into the side.
Platform: |
Size: 348160 |
Author: 阿龙 |
Hits: