Search - HOOK API

Search - HOOK API - List

[Software Engineering] HideDLL DL : 0: 木马运行关键是隐藏,神不知鬼不觉才是王道.要隐藏,先要隐藏进程,Windows操作系统中程序以进程的方式运行,大多数操作系统也是如此.任务管理器就可以看到当前运行的进程,所以有人HOOK相关枚举进程的函数,让任务管理器不显示木马进程,也有人把自己的木马注册成服务运行,"任务管理器"不显示服务的.这样做只是障眼法,进程还是存在的,最好的方法是让进程不存在,让木马作为其他进程的一个线程来运行.Windows操作系统提出了DLL的概念,其系统API都是通过DLL的形式出现的,应用程序动态链接到DLL来调用API,DLL在内存中只存在一个副本就可以满足不同应用程序的调用了,因此可以把木马写成DLL文件,让他作为进程的一部分运行,最好是系统进程的一部分,一般人很难看到一个进程加载了哪些DLL,也就很难发现这种木马(用 IceSword可以看到进程的DLL模块).-err
Date : 2025-12-20 Size : 3kb User : 008
[Software Engineering] a DL : 0: ：网络游戏逐渐商业化，恶性外挂使游戏失去了公平性，带来了很多危害。目前游戏外挂的水平和技术含量都有很大的提高，除了最初的键盘鼠标模拟和变速齿轮技术外，拦截Sock 技术、拦截API 技术、Hook 技术、直接修改程序内存等高端技术也被广泛应用。外挂逃避检测的手段很丰富，还没有值得推广的外挂检测技术，面对现状，深入分析外挂原理，针对性地提出检测外挂的综合对策，达到更好的检测效果，并最终查杀封禁恶性外挂，是网络游戏健康发展的必然要求。-: Online Game gradual commercialization of plug-ins so that the game has lost a vicious fairness has brought a lot of harm. The current level of the game and the technical content of plug-ins have greatly improved, in addition to the original keyboard and mouse simulation and change gear technology, interception Sock Technology, intercepting API technology, Hook technology, directly modify the program memory, such as high-end technology is also widely used . Plug-in means to evade detection is very rich, there are no worthy of promotion of plug-in detection technology, the face of the status quo, in-depth analysis plug-in principle, focus on putting forward an integrated approach to detection of plug-in to achieve better test results, and ultimately killing the vicious plug-in sealed of the network necessary requirement for the healthy development of the game.
Date : 2025-12-20 Size : 57kb User : 李志勇
[Software Engineering] API_HOOK_Sound DL : 0: 基于远程线程导入API HOOK获取音频数据的原理和实现-Principle and the realization of access to audio data import API HOOK remote thread
Date : 2025-12-20 Size : 25kb User : Mr 张
[Software Engineering] HookDBConn DL : 0: speial hook api dll which can be used to hook api
Date : 2025-12-20 Size : 4kb User : inet