Description: IP Filter Driver Hook的例子程序。网络开发人员、技术支持人员使用的摇篮-Programs of examples for IP Filter Driver Hook.It
is the cradle of developer for net use and technologic surfaceman. Platform: |
Size: 3117 |
Author:吴明 |
Hits:
Description: IP Filter Driver Hook的例子程序。网络开发人员、技术支持人员使用的摇篮-Programs of examples for IP Filter Driver Hook.It
is the cradle of developer for net use and technologic surfaceman. Platform: |
Size: 3072 |
Author:吴明 |
Hits:
Description: 一个不错的USB过滤驱动加载工具，对于快速开发USB接口设备的驱动程序有着一定的帮助。-a good USB filter driver loading tools, for the rapid development of USB interface device drivers have some help. Platform: |
Size: 164864 |
Author:艾德 |
Hits:
Description: VC++6.0实现的利用IP过滤钩子驱动创建的一个Windows防火工具，支持TCP,UDP,ICMP协议,基本呈现了Windows防火墙开发的过程-VC++6.0 to achieve the use of IP filter hook driver to create a Windows fire prevention tools, support for TCP, UDP, ICMP protocol, the basic Windows firewall shows the process of development. Platform: |
Size: 2997248 |
Author:周东尧 |
Hits:
Description: Simple Packet - Filter Firewall
A simple packet filtering based open source Firewall. It uses Filter hook driver for its basic working-Simple Packet- Filter Firewall
A simple packet filtering based open source Firewall. It uses Filter hook driver for its basic working Platform: |
Size: 163840 |
Author:behrooz |
Hits:
Description: 1.进程、线程、进程模块、进程窗口、进程内存信息查看，热键信息查看，杀进程、杀线程、卸载模块等功能 2.内核驱动模块查看，支持内核驱动模块的内存拷贝 3.SSDT、Shadow SSDT、FSD、KBD、TCPIP、IDT信息查看，并能检测和恢复ssdt hook和inline hook 4.CreateProcess、CreateThread、LoadImage、CmpCallback、BugCheckCallback、Shutdown、Lego等Notify Routine信息查看，并支持对这些Notify Routine的删除 5.端口信息查看，目前不支持2000系统 6.查看消息钩子 7.内核模块的iat、eat、inline hook、patches检测和恢复 8.磁盘、卷、键盘、网络层等过滤驱动检测，并支持删除 9.注册表编辑 -1 process, thread, process modules, process window, process memory information viewing, hot information to view, kill the process, kill thread, unload the module and other functions 2 kernel driver module view, to support the kernel driver module memory copy 3.SSDT, Shadow SSDT, FSD, KBD, TCPIP, IDT information view, and can detect and recover ssdt hook and inline hook 4.CreateProcess, CreateThread, LoadImage, CmpCallback, BugCheckCallback, Shutdown, Lego, etc. Notify Routine Information check, and to support their Notify Routine Delete 5 port information view, the current system does not support 2000 6 view news hook 7 kernel module iat, eat, inline hook, patches detection and recovery 8 disk, volume, keyboard, network layer filter driver detect, and support for the deletion 9. Registry Editor Platform: |
Size: 3696640 |
Author:接收 |
Hits:
Description: Filter-Hook Driver防火墙程序设计,用vc编制对从事网络安全工作的同事有重要的帮助.-Filter-Hook Driver firewall program design, with vc the preparation work of colleagues in network security are important to help. Platform: |
Size: 2952192 |
Author:陈勇 |
Hits:
Description: 文件过滤驱动，File filter driver intercepts file functions include copy, move, Read, Write, and get the file information, and so on. -File system driver.-File filter driver intercepts file functions include copy, move, Read, Write, and get the file information, and so on.-File system driver. Platform: |
Size: 459776 |
Author:老孙 |
Hits:
Description: 可将系统允许的数据通过该防火墙，而将其他的信息过滤掉-The data can allow the system through the firewall, and other information will be filtered out Platform: |
Size: 3570688 |
Author:李平 |
Hits:
Description: 数据包监控过滤程序含驱动源码，采用IPHook驱动器程序，在内核层用钩子回调函数（IpHookFilter）勾住系统自带的IP过滤驱动器（System32\Drivers\IpFltDrv.sys），从而返回过滤驱动器传输的所有IP包数据。-Packet monitoring filter program containing driver source to using IPHook drive program the the kernel layer with a hook callback function (IpHookFilter) hooked system comes with the IP filter driver is (System32 \ the Drivers \ IpFltDrv.sys), thereby return filtration drive transmission. all of the IP packet data. Platform: |
Size: 790528 |
Author:杨景 |
Hits:
Description:
基于WFP模型的网络防火墙设计实现
WFP（Windows Filter Platform）是为网络过滤应用开发平台提供支持的API和系统服务的集合。WFP允许开发者编写代码和操作系统的网络协议栈
交互。网络数据可以在到达目的地之前被过滤和修改。通过提供简单的开发平台，WFP被用于取代以前的TDI过滤，NDIS过滤，以及LSP（Winsock
Layered Service ）。在Visita及以后的系统火墙钩子，过滤钩子驱动将不再适用。
-Model-based network firewall designed to achieve WFP WFP (Windows Filter Platform) is a collection that provides support for network filtering application development platform API and system services. WFP allows developers to write interactive network protocol stack and operating system code. Network data can be filtered and modified before reaching the destination. By providing a simple development platform, WFP is used to replace the previous TDI filter, NDIS filter, and LSP (Winsock Layered Service). Visita systems in and beyond the firewall hook, the filter hook driver will no longer apply. Platform: |
Size: 350208 |
Author:注册会员 |
Hits:
Description: IP Filter Driver Hook的例子程序,网络开发人员,技术支持人员使用的摇篮,-Examples of IP Filter Driver Hook procedures, web developers, technical support staff to use the cradle, Platform: |
Size: 2048 |
Author:tqcjon |
Hits:
Description: Examples of IP Filter Driver Hook procedures, web developers, technical support staff to use the cradle, Platform: |
Size: 2048 |
Author:Hynter |
Hits:
Description: IP Filter Driver Hook的例子程序,网络开发人员,技术支持人员使用的摇篮,-Examples of IP Filter Driver Hook procedures, web developers, technical support staff to use the cradle, Platform: |
Size: 2048 |
Author:kaulcmie |
Hits:
Description: IP Filter Driver Hook的例子程序,网络开发人员,技术支持人员使用的摇篮,(Examples of IP Filter Driver Hook procedures, web developers, technical support staff to use the cradle,) Platform: |
Size: 2048 |
Author:tkkb@41666
|
Hits:
Description: 1.进程、线程、进程模块、进程窗口、进程内存信息查看，杀进程、杀线程、卸载模块等功能
2.内核驱动模块查看，支持内核驱动模块的内存拷贝
3.SSDT、Shadow SSDT、FSD、KBD、TCPIP、Classpnp、Atapi、Acpi、SCSI、IDT、GDT信息查看，并能检测和恢复ssdt hook和inline hook
4.CreateProcess、CreateThread、LoadImage、CmpCallback、BugCheckCallback、Shutdown、Lego等Notify Routine信息查看，并支持对这些Notify Routine的删除
5.端口信息查看，目前不支持2000系统
6.查看消息钩子
7.内核模块的iat、eat、inline hook、patches检测和恢复
8.磁盘、卷、键盘、网络层等过滤驱动检测，并支持删除(1. process, thread, process module, process window, process memory information view, kill process, kill thread, unload module and so on
2. kernel driver module view, support the memory module of the kernel driver module
3.SSDT, Shadow, SSDT, FSD, KBD, TCPIP, Classpnp, Atapi, Acpi, SCSI, IDT, GDT, information view, and can detect and restore SSDT, hook and inline hook
4.CreateProcess, CreateThread, LoadImage, CmpCallback, BugCheckCallback, Shutdown, Lego and other Notify Routine information view, and support for the deletion of these Notify Routine
5. port information, currently 2000 systems are not supported
6. view message hook
7. kernel module of IAT, eat, inline, hook, patches detection and recovery
8. disk, volume, keyboard, network layer filter driver detection, and support deletion) Platform: |
Size: 6559744 |
Author:aa77ss55dd
|
Hits:
Description: // NtDeviceIoControlFile的HOOK函数
// ws2_32.dll的send , recv最终会调用到mswsock.dll内的数据发送函数
// mswsock.dll会调用NtDeviceIoControlFile向TDI Client驱动发送Send Recv指令
// 我们在这里做拦截，可以过滤所有的TCP 收发包（UDP之类亦可，不过要更改指令）
// Hook mswsock.dll导出表的Ntdll!NtDeviceIoControlFile
// 并过滤其对TDI Cilent的请求来过滤封包
// 稳定，隐蔽，RING3下最底层的包过滤~(HOOK / NtDeviceIoControlFile function
Ws2_32.dll / send, recv will call to the data transmitting function in mswsock.dll
/ / mswsock.dll will call the NtDeviceIoControlFile to the TDI Client driver sends the Send Recv command
Here we do / / intercept, can filter all receive TCP packets (like UDP but also to change the directive)
Mswsock.dll / / Hook export table Ntdll! NtDeviceIoControlFile
And the request of TDI / / Cilent filter to filter packets
/ / stability, concealment, packet filtering at the bottom of the RING3.) Platform: |
Size: 2048 |
Author:q1356047
|
Hits:
Search - filter hook driver