Location:
Search - delphi hook com
Search list
Description: Hook Api Library 0.2 [Ring0&3] By Anskya
Email:Anskya@Gmail.com
ring3 inline hook For Api
Thank:
前29A高手也一直都是我的偶像...z0mbie大牛...这里膜拜一下
使用的LDE32引擎是翻译他老人家的...C->Delphi...
说明:
1.利用堆栈跳转
没有使用传统的jmp xxxx 长跳转,使用容易理解的push xxxx+ret
仔细看代码容易理解...封装完好.
2.内存补丁结构:
补丁1:|push xxx--钩子处理过程|ret|
补丁2:|保存原始补丁地址|保存原始地址代码长度|原始地址的代码|push xxxxxx|ret|
更新说明:
0.2:
支持Ring0 Inline Hook
0.1:
Ring3 Inline Hook
Platform: |
Size: 6347 |
Author: david |
Hits:
Description: 该程序可以防止网站主页被篡改，主体是使用ddk编写的驱动，由sysinternals.com上的filemon修改而来，是一个毕业设计。-procedures can prevent the website home page had been tampered with, the main use is the driving ddk prepared, sysinternals.com by the filemon amend the bill, a graduate design.
Platform: |
Size: 251904 |
Author: 林风 |
Hits:
Description:
MIR.DAT窗体结构关键部分:
legend of mir2 , TFrmMain
|
------>> xxxx , TEdit (密宝编辑框)
|
------>> xxxx , TEdit (密码编辑框)
|
------>> xxxx , TEdit (帐号编辑框)
|
------>> xxxx , TDXDraw (DX绘图控件)
MIR.EXE窗体结构关键部分:
传奇客户端 , TfrmMain
|
------>> xxxx , TComboBox (区域下拉框)
刘麻子 http://liumazi.efile.com.cn
QQ:71892967 MSN : Liu_mazi@126.com -MIR.DAT form a key part of the structure: legend of mir2, TFrmMain |------>> xxxx, TEdit (Mi Bao edit box) |------>> xxxx, TEdit (password edit box) |------>> xxxx, TEdit (Account edit box) |------>> xxxx, TDXDraw (DX graphics controls) MIR.EXE form a key part of the structure: The Legend of the client, TfrmMain |------>> xxxx, TComboBox (regional drop-down box)刘麻子http://liumazi.efile.com.cnQQ:71892967 MSN: Liu_mazi@126.com
Platform: |
Size: 22528 |
Author: 小宝 |
Hits:
Description: Hook Api Library 0.2 [Ring0&3] By Anskya
Email:Anskya@Gmail.com
ring3 inline hook For Api
Thank:
前29A高手也一直都是我的偶像...z0mbie大牛...这里膜拜一下
使用的LDE32引擎是翻译他老人家的...C->Delphi...
说明:
1.利用堆栈跳转
没有使用传统的jmp xxxx 长跳转,使用容易理解的push xxxx+ret
仔细看代码容易理解...封装完好.
2.内存补丁结构:
补丁1:|push xxx--钩子处理过程|ret|
补丁2:|保存原始补丁地址|保存原始地址代码长度|原始地址的代码|push xxxxxx|ret|
更新说明:
0.2:
支持Ring0 Inline Hook
0.1:
Ring3 Inline Hook
-Hook Api Library 0.2 [Ring0
Platform: |
Size: 6144 |
Author: david |
Hits:
Description: 一个利用全局钩子注入DNF修改技能的例子！-A hook into the use of DNF to amend the overall skills of the examples!
Platform: |
Size: 343040 |
Author: 解寒瑜 |
Hits:
Description: hook com as api do windows muito bom
Platform: |
Size: 166912 |
Author: RMOP |
Hits:
Description: [Delphi] LoadDriver SSDT Hook.
Compile it with Meerkat 1.1
Use DbgView to catch informations.
Only for Windows XP.
Meerkat 1.1 link :
http://www.mediafire.com/?hbhjorv8797k2-[Delphi] LoadDriver SSDT Hook.
Compile it with Meerkat 1.1
Use DbgView to catch informations.
Only for Windows XP.
Meerkat 1.1 link :
http://www.mediafire.com/?hbhjorv8797k2ee
Platform: |
Size: 1024 |
Author: STRELiTZIA |
Hits:
Description: ZwOpenProcess SSDT Hook test to catch open process information.
Compile it with Meerkat Advanced kernel mode driver GUI for KmdKit4D.
Link: http://www.mediafire.com/?hbhjorv8797k2-ZwOpenProcess SSDT Hook test to catch open process information.
Compile it with Meerkat Advanced kernel mode driver GUI for KmdKit4D.
Link: http://www.mediafire.com/?hbhjorv8797k2ee
Platform: |
Size: 2048 |
Author: STRELiTZIA |
Hits:
Description: Delphi Source Code:
=== === === === === === === ====
Magic Api Hook Engine v1.0 - Date: 2006.04.24
this is a simple all around process api hooker
UserMode(Ring3) just for WinNT family
By: Magic_h2001 - magic_h2001@yahoo.com
Home: http://magic.shabgard.org
==============================================
-Delphi Source Code:
==============================================
Magic Api Hook Engine v1.0 - Date: 2006.04.24
this is a simple all around process api hooker
UserMode(Ring3) just for WinNT family
By: Magic_h2001 - magic_h2001@yahoo.com
Home: http://magic.shabgard.org
==============================================
Platform: |
Size: 18432 |
Author: Weder |
Hits:
Description: wr960204武稀松.2012.2
主页 http://www.raysoftware.cn
通用Hook库.
支持X86和X64. Get
使用了开源的BeaEngine反汇编引擎.BeaEngine的好处是可以用BCB编译成OMF格式的Obj,
被链接进Delphi的DCU和目标文件中.不需要额外带DLL.
BeaEngin引擎
http://www.beaengine.org/
限制:
1.不能Hook代码大小小于5个字节的函数.
2.不能Hook前五个字节中有跳转指令的函数.
希望使用的朋友们自己也具有一定的汇编或者逆向知识.
Hook函数前请确定该函数不属于上面两种情况.
另外钩COM对象有一个技巧,如果你想在最早时机勾住某个COM对象,
可以在你要钩的COM对象创建前自己先创建一个该对象,Hook住,然后释放你自己的对象.
这样这个函数已经被下钩子了,而且是钩在这个COM对象创建前的.-Wr960204 Wu not.2012.2
Home http://www.raysoftware.cn
General Hook library.
Support X86 and Get X64.
The use of open source BeaEngine anti compilation engine.BeaEngine the benefits of BCB can be compiled into OMF format Obj,
Be linked into DCU s Delphi and target files. No extra tape DLL.
BeaEngin engine
Http://www.beaengine.org/
Limited:
1 can not Hook code size is less than 5 bytes of function.
2 can t Hook the first five bytes in a jump instruction function.
Friends who want to use their own also has a certain assembly or reverse knowledge.
Hook function before you determine that the function does not belong to the above two cases.
In addition to hook COM object has a skill, if you want to hook in the first time a COM object,
You can create a COM object that you want to hook before you create an object, Hook live, and then release your own objects.
This function has been under the hook, and the hook in the COM object before the creation of the.
Platform: |
Size: 929792 |
Author: YyQ |
Hits: