Location:
Search - asm hook
Search list
Description: windows汇编语言写的一个钩子函数示范（鼠标钩子），初学win asm者可以-windows of the assembly language to write a hook function model (mouse hook), when a win could see asm
Platform: |
Size: 4894 |
Author: 黄顾 |
Hits:
Description: 使用Firewall Hook Driver技术进行端口过滤的一个简单防火墙的代码。-use Firewall Hook Driver technology port of a simple filtering firewall code.
Platform: |
Size: 12288 |
Author: |
Hits:
Description: 采用远程线程查看星号密码，支持查看某些采用了 anti 技术的编辑框。大部分网游就是因为这样所以用传统的键盘HOOK技术取不到密码。这份代码提供了完整的解决方案。用处嘛？还用多说？-distance threads View asterisk password used to support the view of some anti technical editor box. Most online games is the reason why the traditional keyboard HOOK fail to obtain passwords. This code provides a complete solution. Useful incorrect? Also used to say?
Platform: |
Size: 6144 |
Author: |
Hits:
Description: windows汇编语言写的一个钩子函数示范（鼠标钩子），初学win asm者可以-windows of the assembly language to write a hook function model (mouse hook), when a win could see asm
Platform: |
Size: 5120 |
Author: 黄顾 |
Hits:
Description: ring0--hook NtContinue+source_code
ring0下面hookNtContinue 使用drx7寄存器实现的hook
this code hooks ntoskrnl!NtContinue to set dr7 to 0 (no updating of dr7)
so NtContinue called from ring3 cannot alter drX registers...
This hook will only PREVENT drX clearing from SEH (kiuser->ntcontinue)
and will not alter debugging using ring3 debuggers (olly->SetThreadContext)
mainly developed for personal reasearch and as anti-bpm...
Hook NtContinue (not exported from ntoskrnl.exe but exported in ntdll.dll with service number) to set dr7 to 0 prior to calling original NtContinue so debug registers won t be changed from seh and ring3 code =)
Its use for some targets such as armadillo... but never posted code...
by deroko-ring0- hook NtContinue+ source_codering0 use the following hookNtContinue register drx7 realize the hook this code hooks ntoskrnl! NtContinue to set dr7 to 0 (no updating of dr7) so NtContinue called from ring3 cannot alter drX registers ... This hook will only PREVENT drX clearing from SEH (kiuser-> ntcontinue) and will not alter debugging using ring3 debuggers (olly-> SetThreadContext) mainly developed for personal reasearch and as anti-bpm ... Hook NtContinue (not exported from ntoskrnl.exe but exported in ntdll. dll with service number) to set dr7 to 0 prior to calling original NtContinue so debug registers won t be changed from seh and ring3 code =) Its use for some targets such as armadillo ... but never posted code ... by deroko
Platform: |
Size: 6144 |
Author: 张京 |
Hits:
Description: 一个 记录qq登陆密码并通过esmtp发送到指定 油箱的小程序，用asm编写 利用了 日志 钩子！-Qq landing a record of the password and through esmtp sent to the designated tank of small procedures, the preparation used by asm log hook!
Platform: |
Size: 5120 |
Author: |
Hits:
Description: ASM HOOK API函数库-ASM HOOK API library
Platform: |
Size: 10240 |
Author: vilysoft |
Hits:
Description: 向BIOS中植入模块，HOOK中断向量表,HOOK NTLDR加载过程以及HOOK内核函数，SSDT hook。-Add module into bios,HOOK IVT,HOOK NTLDR loder process and hook knrnel function,just as SSDT HOOK
Platform: |
Size: 10240 |
Author: 俊豪 |
Hits:
Description: anti np inline hook，可以过游戏保护np的inline hook,目前还是可以使用，asm源码-anti np inline hook, can lead the game to protect np the inline hook, or you can use the current, asm source
Platform: |
Size: 1024 |
Author: 肖玛佳 |
Hits:
Description: 通过 HOOK PsCreateSystemThread 监控线程，入口函数特征码对比来过hs防护软件的保护，asm源码非常不错-HOOK PsCreateSystemThread through the monitoring thread, imported function signature hs been compared to the protection of protective software, asm source code is very good
Platform: |
Size: 1024 |
Author: 肖玛佳 |
Hits:
Description: HOOK NtOpenProcess 保护指定进程-HOOK NtOpenProcess the protection of designated process
Platform: |
Size: 33792 |
Author: zzage |
Hits:
Description: Inline Hook NtOpenFile 简单实现保护指定路径文件-Inline Hook NtOpenFile a simple path to achieve the protection of designated documents
Platform: |
Size: 2048 |
Author: zzage |
Hits:
Description: win32汇编 SEH实现的远程调用call。在远程进程的键盘HOOK函数中创建新的线程-win32 compilation of SEH to achieve remote call call. HOOK on the remote keyboard function in the process create a new thread
Platform: |
Size: 81920 |
Author: 王刚 |
Hits:
Description: 进程注入asm实现任意api Hook。可中断修改参数和寄存器。刚才传错了，囧-Asm into the process of achieving any api Hook. Interruptible modify the parameters and registers. Just pass wrong,囧. . .
Platform: |
Size: 55296 |
Author: HeavenSea |
Hits:
Description: 进程注入asm实现任意api Hook。可中断修改参数和寄存器。总是传错，无奈啊-Asm into the process of achieving any api Hook. Interruptible modify the parameters and registers.
Platform: |
Size: 53248 |
Author: HeavenSea |
Hits:
Description: HOOK API编程，代码实例。可以学习参考下。-HOOK API programming, code examples. Can learn to refer to the following.
Platform: |
Size: 4096 |
Author: ken |
Hits:
Description: 汇编实现的Hook Api，其中部分代码来自微软。现在共享学习。-Compilation to achieve the Hook Api, some code from Microsoft.
Platform: |
Size: 47104 |
Author: rrrfff |
Hits:
Description: 驱动挂钩，拦截指定函数调用。 -Driver linked to intercept the specified function call. Driver linked to intercept the specified function call.
Platform: |
Size: 5120 |
Author: lihui |
Hits:
Description: 用汇编实在Ring3 和 Ring0 下的Inline HooK-It Ring3 and assembly under the Inline HooK Ring0
Platform: |
Size: 14336 |
Author: 星痕 |
Hits:
Description: c++ asm hook injection
Platform: |
Size: 3072 |
Author: smk |
Hits: