Location:
Search - hookDll
Search list
Description: 与inject.rar程序配套的，注入到第三方进程中的程序，用来实现hook第三方指定API的功能
Platform: |
Size: 2417808 |
Author: 安丙春 |
Hits:
Description: 常简单的键盘钩子程序，对初学者应有较强的帮助
Platform: |
Size: 21708 |
Author: 刘卫华 |
Hits:
Description: PE文件是windows(95/98/NT)目前采用的可执行文件格式。流行的CIH病毒就是通过改变PE文件的内容，并且保持文件大小不变，从而实现自己的功能。本程序通过分析PE文件格式，将可执行文件的文件定位表重新定位，指向用户编写的DLL，然后指令指针返回正常调用位置。在DLL中通过系统挂钩，实现了后台各种级别密码的截获功能。
Platform: |
Size: 59927 |
Author: sujun |
Hits:
Description: 键盘钩子程序，EVC工程源码，是一个动态库，用来捕获键盘消息，在键盘消息发给OS前处理一下，是黑客程序或者高级编程人员必备的技能，非常难得的好资料，贡献出来与兄弟们共享。
Platform: |
Size: 2458952 |
Author: 余爱军 |
Hits:
Description: 改进利用Hook在系统进程插入线程，改进利用Hook在系统进程插入线程
Platform: |
Size: 31840 |
Author: Aree |
Hits:
Description: 一个WH_SHELL的钩子程序，具体功能是管理应用程序的使用。在使用应用程序之前可以控制其启动和关闭。包含三个文件夹，HookDLL文件夹是全局钩子dll,HookServer文件夹是一个应用程序控制程序，ProgamControl文件夹是delphi编写的应用程序编辑器。
Platform: |
Size: 563384 |
Author: cool wen zi |
Hits:
Description: 这是一个activex控件.实现安装一个鼠标钩子的功能.-This is an activeX control. Installation of the mouse achieve a hook function.
Platform: |
Size: 41352 |
Author: buyi |
Hits:
Description: keyboard hook test, exaple is includedl
Platform: |
Size: 46705 |
Author: 无余 |
Hits:
Description: 这是一个activex控件.实现安装一个鼠标钩子的功能.-This is an activeX control. Installation of the mouse achieve a hook function.
Platform: |
Size: 40960 |
Author: buyi |
Hits:
Description: keyboard hook test, exaple is includedl
Platform: |
Size: 46080 |
Author: 无余 |
Hits:
Description: 1. 发卡服务端：Server
项目文件：autojet.prj
2. 计费客户端：Client
项目文件：internet.prj
Explorer.prj
先启动Explorer.exe, 再启动internet.exe
3. 数据库脚本 INIT（原版）.SQL 和 New init.sql（新版），数据库名 NetBar
4. 动态连接库： NETBAR.dll hookdll.dll
5. 大学生公寓城System ID为5046
其余程序说明全在程序内的文本文件中说明-1. round card service end: Server project document: Autojet.prj
2. costs the customer end: Client project document:
Internet.prj Explorer.prj
First starts Explorer.exe, then starts internet.exe
3. databases scripts INIT (first edition) SQL and New init.sql
(new edition), database NetBar
4. dynamic connections storehouses: NETBAR.dll hookdll.dll
5. university students lodgings city System ID is 5,046 other
procedures explained all explained in the procedure text documents
Platform: |
Size: 2728960 |
Author: 陈万通 |
Hits:
Description: 一、前言
前一段时间发表了一篇文章 “Hook API 工具”,没有附带主程序的源代码，这几天翻出来代码加了些注释，现在补上。不过大家还是最好看看牛的书，书上讲解很详细。
二、对代码的简单说明
总共3个工程，1个主程序，1个HookDll, 1个例子Dll。主程序负责启动进程，并将 HookDll 注入。还有一些额外的功能，比如显示 Log, 例子Dll的信息，导出函数等，HookDll 在 DllMain 启动的时候根据配置钩住指定的 API 函数
三、这种方法的缺点
这种方法是在系统 API 函数起始代码 和 自定义代码之间切换。在多线程的环境下，如果正在切换的过程，其它线程调用这个函数，会出现异常，同时，如果已经切换回系统代码，其它线程对这个API 的调用将抓不到。解决方法就是不要切换，这点应该是可以做到的。
四、结束语
在例子Dll 中，模仿了 ws_32.dll 的输出函数，但是不全，而且 Log 信息也不足，感兴趣的朋友如果有比较全的版本别忘了发给我一份 :)
程序大家可以随意修改，保留那个林月如的 Icon 就行了 ^_^
-one, the preamble some time ago published an article entitled "Hook API tool," not incidental to the main program source code, which turned out a few days code plus some notes now fill. But we still look at the best cattle in the book, spoke on the very detailed. Two of the code simple instructions a total of three projects, a program, a HookDll, an example Dll. Main program to start the process and will HookDll injection. There are some additional features, such as Log shows examples Dll information derived function, in DllMain HookDll boot time configuration hooked designated API Function 3, the shortcomings of this method This method is the system API function code and starting from the definition of switching between code. In multithreaded environment, if the switching proces
Platform: |
Size: 146432 |
Author: ddd |
Hits:
Description: windows自带的画笔程序的hook的例子。dll为hookdll的工程，project1为app的工程。运行时，先运行画笔程序，在画笔程序中按F10，就会自动画画。-windows built-in brush hook procedure example. dll for hookdll works, project1 for the app works. Run-time, first run the brush procedures, procedures in the brush by F10, it will automatically draw.
Platform: |
Size: 1003520 |
Author: xuwei |
Hits:
Description: 常简单的键盘钩子程序，对初学者应有较强的帮助-Often simple keyboard hook procedures should be strong to help beginners
Platform: |
Size: 2069504 |
Author: 刘卫华 |
Hits:
Description: PE文件是windows(95/98/NT)目前采用的可执行文件格式。流行的CIH病毒就是通过改变PE文件的内容，并且保持文件大小不变，从而实现自己的功能。本程序通过分析PE文件格式，将可执行文件的文件定位表重新定位，指向用户编写的DLL，然后指令指针返回正常调用位置。在DLL中通过系统挂钩，实现了后台各种级别密码的截获功能。 -PE file is windows (95/98/NT) is currently used in the executable file format. CIH virus is prevalent PE by changing the contents of the file, and keep the file size unchanged, and thus realize their functions. This procedure by analyzing the PE file format, the executable file to re-positioning table positioning, pointing users to the preparation of the DLL, and then return to normal call instruction pointer location. Adopted in the DLL system linking all levels realize the background of the intercepted password function.
Platform: |
Size: 64512 |
Author: sujun |
Hits:
Description: 改进利用Hook在系统进程插入线程，改进利用Hook在系统进程插入线程-Improved utilization Hook threaded insert in the system process to improve the use of Hook inserted in the system process thread
Platform: |
Size: 31744 |
Author: Aree |
Hits:
Description: 一个WH_SHELL的钩子程序，具体功能是管理应用程序的使用。在使用应用程序之前可以控制其启动和关闭。包含三个文件夹，HookDLL文件夹是全局钩子dll,HookServer文件夹是一个应用程序控制程序，ProgamControl文件夹是delphi编写的应用程序编辑器。-A WH_SHELL the hook procedure, the specific function is to use management application. In the use of applications can be controlled prior to its start-up and shut down. Contains three folders, HookDLL folder is a global hook dll, HookServer folder is an application process control procedures, ProgamControl folder is prepared applications delphi editor.
Platform: |
Size: 6224896 |
Author: cool wen zi |
Hits:
Description: 1. 发卡服务端：Server 项目文件：autojet.prj 2. 计费客户端：Client 项目文件：internet.prj Explorer.prj 先启动Explorer.exe, 再启动internet.exe 3. 数据库脚本 INIT（原版）.SQL 和 New init.sql（新版），数据库名 NetBar 4. 动态连接库： NETBAR.dll hookdll.dll 5. 大学生公寓城System ID为5046 其余程序说明全在程序内的文本文件中说明-1. round card service end: Server project document: Autojet.prj 2. costs the customer end: Client project document: Internet.prj Explorer.prj First starts Explorer.exe, then starts internet.exe 3. databases scripts INIT (first edition) SQL and New init.sql (new edition), database NetBar 4. dynamic connections storehouses: NETBAR.dll hookdll.dll 5. university students lodgings city System ID is 5,046 other procedures explained all explained in the procedure text documents -1. Issuing server: Server project documents: autojet.prj 2. Recosting Client: Client project files: internet.prj Explorer.prj first start Explorer.exe, and then start internet.exe 3. Database script INIT (the original). SQL and New init.sql (new version), database name NetBar 4. Dynamic Link Library: NETBAR.dll hookdll.dll 5. college apartments City System ID for the 5046 remaining description of the procedures in the whole procedure described in the text file-1. round card service end: Server project document: Autojet.prj 2. costs the customer end: Client project document: Internet.prj Explorer.prj First starts Explorer.exe, then starts internet.exe 3. databases scripts INIT (first edition) SQL and New init.sql (new edition), database NetBar 4. dynamic connections storehouses: NETBAR.dll hookdll.dll 5. university students lodgings city System ID is 5046 other procedures explained all explained in the procedure text documents
Platform: |
Size: 2756608 |
Author: 但雪忠 |
Hits:
Description: delphi 下使用hook的说明，学习原理使用，具体使用时需要改进，挂钩d-delphi Note the use of hook and learn the principle of the use of, the specific use needs to be improved, linked to d
Platform: |
Size: 1024 |
Author: |
Hits:
Description: 键盘记录程序通过钩子现实全局钩子非常好用
Platform: |
Size: 13312 |
Author: mTian |
Hits: