Location:
Search - hook dll
Search list
Description: 硬盘序列号钩子程序，可以随意设置序列号以欺骗应用程序。-hard drive serial number hook procedures can be arbitrarily set by deception serial applications.
Platform: |
Size: 27648 |
Author: szxxxx |
Hits:
Description: 实现令人满意的风格统一的软件界面确实很难, 象网友提到的MessageBox、FileDialog、FontDialog、目录选择对话框等MFC内部甚至系统DLL内的对话框，要想让它变脸可不容易。有人说HOOK技术可以，HOOK技术确实可以，HOOK可以说是无孔不入，但HOOK的使用效率却是令人难以满意的，从目前大多数采HOOK技术的换肤软件使用情况来看，完全可以证明这一点。今天我们将讨论另外一技术来实现FileDialog的变脸，这种技术叫替换窗口过程法-achieve satisfactory style reunification of the software interface is difficult. As netizen's MessageBox, FileDialog, FontDialog. Contents dialog, and other internal MFC DLL system even within the dialog box, in order to allow it faces no easy thing. Some say HOOK technology, the technology can really HOOK, HOOK can be said to be all-pervasive. However, the efficient use HOOK is unsatisfactory. from the most current mining technology HOOK skinnable software situation, we can prove this point. Today, we will discuss other technologies to achieve a FileDialog changing face of this technique is called window replacement process France
Platform: |
Size: 610304 |
Author: |
Hits:
Description: 实现适时获取当前鼠标所在窗口的标题，并将其显示在一个EDITBOX中.
Windows系统是建立在事件驱动的机制上的，说穿了就是整个系统都是通
过消息的传递来实现的。而钩子是Windows系统中非常重要的系统接口，
用它可以截获并处理送给其他应用程序的消息，来完成普通应用程序难以
实现的功能。钩子的种类很多，每种钩子可以截获并处理相应的消息，如
键盘钩子可以截获键盘消息，外壳钩子可以截取、启动和关闭应用程序的消
息等。本文在VC6编程环境下实现了一个简单的鼠标钩子程序，并对Win32
全局钩子的运行机制、Win32 DLL的特点、VC6环境下的MFC DLL以及共享数
据等相关知识进行了简单的阐述。
Platform: |
Size: 21504 |
Author: 杨秉岐 |
Hits:
Description: 破解的dll 破解的d-Dll crack crack crack dll of the d
Platform: |
Size: 53248 |
Author: |
Hits:
Description: delphi 拦截中文以VB调用
用delphi写了一个dll主要拦截汉字然后把它存放在当前目录的hytalk.bav文件里-delphi intercept Chinese call in VB using delphi write a dll to intercept the main characters and then it kept in the current directory hytalk.bav document
Platform: |
Size: 271360 |
Author: myname |
Hits:
Description: vc6的dll代码 功能让进程不能结束掉
-vc6 code of the dll functions so that the process should not end swap
Platform: |
Size: 3392512 |
Author: 白菜 |
Hits:
Description: 通过调用.dll文件获得系统消息控制权
该程序仅为尝试小做-By calling. Dll file access control system information the program is only trying to make small
Platform: |
Size: 2048 |
Author: 123 |
Hits:
Description: ring0--hook NtContinue+source_code
ring0下面hookNtContinue 使用drx7寄存器实现的hook
this code hooks ntoskrnl!NtContinue to set dr7 to 0 (no updating of dr7)
so NtContinue called from ring3 cannot alter drX registers...
This hook will only PREVENT drX clearing from SEH (kiuser->ntcontinue)
and will not alter debugging using ring3 debuggers (olly->SetThreadContext)
mainly developed for personal reasearch and as anti-bpm...
Hook NtContinue (not exported from ntoskrnl.exe but exported in ntdll.dll with service number) to set dr7 to 0 prior to calling original NtContinue so debug registers won t be changed from seh and ring3 code =)
Its use for some targets such as armadillo... but never posted code...
by deroko-ring0- hook NtContinue+ source_codering0 use the following hookNtContinue register drx7 realize the hook this code hooks ntoskrnl! NtContinue to set dr7 to 0 (no updating of dr7) so NtContinue called from ring3 cannot alter drX registers ... This hook will only PREVENT drX clearing from SEH (kiuser-> ntcontinue) and will not alter debugging using ring3 debuggers (olly-> SetThreadContext) mainly developed for personal reasearch and as anti-bpm ... Hook NtContinue (not exported from ntoskrnl.exe but exported in ntdll. dll with service number) to set dr7 to 0 prior to calling original NtContinue so debug registers won t be changed from seh and ring3 code =) Its use for some targets such as armadillo ... but never posted code ... by deroko
Platform: |
Size: 6144 |
Author: 张京 |
Hits:
Description: VS2005下使用的dll，可以隐藏进程，即从进程列表中看不到-VS2005 to use the dll, can hide the process, that is, from the process list can not see
Platform: |
Size: 13312 |
Author: 任静 |
Hits:
Description: 请先编译DLL文件，并将DLL文件拷贝至call HOOK目录， 调用CallDll程序加载外挂前,应先运行IE.
-Please compiled DLL files, DLL files and copy to call HOOK directory, call the procedure to load plug-CallDll before running IE.
Platform: |
Size: 20480 |
Author: |
Hits:
Description: 一个利用dll注入拦截OpenProcess，禁止强行关闭程序的例子-Dll into the interception of a use OpenProcess, prohibition of forced closure procedure example
Platform: |
Size: 358400 |
Author: 天一 |
Hits:
Description: QQ尾巴的DLL程序，里面实现了HOOK QQ主程序的功能，代码不多，简单易懂-QQ tail of the DLL procedure, which achieved the main program HOOK QQ function, the code small, easy-to-read
Platform: |
Size: 37888 |
Author: paulwang |
Hits:
Description: 利用Detour编写的一个截获createprocess的Demo,很有实用性,可以在进程启动的同时把你的DLL加载进去作你想作的-Detour prepared to use an intercepted CreateProcess the Demo, very practical, you can start the process at the same time to load into your DLL as you would like to make the
Platform: |
Size: 3072 |
Author: 郭亮 |
Hits:
Description: 与inject.rar程序配套的，注入到第三方进程中的程序，用来实现hook第三方指定API的功能-Matching procedures and inject.rar injected into third-party process procedures, used to hook a third party to achieve the specified API function
Platform: |
Size: 2417664 |
Author: 安丙春 |
Hits:
Description: 这是一个编辑/查看PE文件导出表的工具。利用它可以方便的对PE文件的导出表进行增、删、改的操作，现在它还可以用于给没有导出表的文件添加导出函数。
这个工具除了PE diy外，通过为导出函数添加Forward信息等方法还可以实现函数hook，dll注入等功能。-This is an edit/view PE file Export Table tool. It can be convenient to use for PE files by exporting table, delete, change operations, and now it can be used to export the table did not add export function. PE diy this tool in addition to outside, through the Export function to add information such as Forward method can also achieve the function hook, dll injection functions.
Platform: |
Size: 96256 |
Author: 董林 |
Hits:
Description: Start.exe 安装 Insert.dll 中的 WH_GETMESSAGE 钩子. 当任何一个进程从
消息队列取消息时, Insert.dll 都将被装入其空间. Insert.dll在入口代码
中判断当前进入的进程模块名, 如果是 Explorer则建立一个线程, 并发消息
通知 Start.exe退出. 这个时候建立的新线程, 当然是属于Explorer进程的,
这就是关键之所在了. 另外, 该线程还建立了一个窗体, 可以设定IE首页. :~)-Start.exe installation of Insert.dll hook WH_GETMESSAGE. When any one process from the message queue check news, Insert.dll will be put into its space. Insert.dll at the entry code to enter the process to determine the current module name, if is the Explorer is the creation of a thread, and发消息Start.exe quit notice. this time the new thread, of course, is the Explorer process, and this is the key to a. In addition, the thread has also set up a form, can set the IE homepage.: ~)
Platform: |
Size: 29696 |
Author: hss |
Hits:
Description: 屏幕取词，利用APIHOOK原理，带有一DLL。-Screen using APIHOOK principle, with one DLL.
Platform: |
Size: 202752 |
Author: 追风少年 |
Hits:
Description: dll实现全局钩子
MainPrg 实现系统托盘-dll hook MainPrg realize realize the overall system tray
Platform: |
Size: 586752 |
Author: light.way |
Hits:
Description: PE文件是windows(95/98/NT)目前采用的可执行文件格式。流行的CIH病毒就是通过改变PE文件的内容，并且保持文件大小不变，从而实现自己的功能。本程序通过分析PE文件格式，将可执行文件的文件定位表重新定位，指向用户编写的DLL，然后指令指针返回正常调用位置。在DLL中通过系统挂钩，实现了后台各种级别密码的截获功能。 -PE file is windows (95/98/NT) is currently used in the executable file format. CIH virus is prevalent PE by changing the contents of the file, and keep the file size unchanged, and thus realize their functions. This procedure by analyzing the PE file format, the executable file to re-positioning table positioning, pointing users to the preparation of the DLL, and then return to normal call instruction pointer location. Adopted in the DLL system linking all levels realize the background of the intercepted password function.
Platform: |
Size: 64512 |
Author: sujun |
Hits:
Description: 1.小弟初学EVC，因之前都没学过C++、VC，所以写的比较简单。在此要谢谢驱动开发网的zhoumc
大哥，谢谢他多日来给我耐心的帮助！
2.工程kbhook是放HHOOK处理程序的DLL，winceKBhook是一个对话框程序，用来调用具体的应用程序。
3.因本人目前手上开发板上还没有键盘，所以在对话框上装了个按钮，用keybd_event来发送键盘消息。钩子安装成功之后可多次调用应用程序，但前后两次调用之间要有点时间间隔，大约5秒种，且要把应用程序关掉之后才可继续调用。
4.如有发现程序中有错误，或有更好的方法来实现调用具体的应用程序，欢迎来信告之小弟一声！我的邮箱saint_bxg@126.com。谢谢！
Platform: |
Size: 7168 |
Author: lzy |
Hits: