Location:
Search - hook file
Search list
Description: vc实现键盘钩子的源代码及说明文档，对于深入学习windows编程的人很有好处-source code and file implementing keyboard hook.
Platform: |
Size: 209920 |
Author: zhangyugang |
Hits:
Description: 记录本机的按键,将记录存放在一个文件中,可方便用户监控查询按键历史.用全局钩子实现.-record the local keyboard press,and save the records to a file, it s convenient for the user to search and check keyboard press history. based on global hook.
Platform: |
Size: 3072 |
Author: |
Hits:
Description: 学习驱动编程的好资料，用于驱动文件保护系统，对学习HOOK具有很好参考价值-Learning-driven programming information for the driver file protection system, with a good reference value to the learning HOOK
Platform: |
Size: 2048 |
Author: panda |
Hits:
Description: 监控文件创建操作的工作，用到了hook的知识-a montion create file tool
Platform: |
Size: 50176 |
Author: 王肖 |
Hits:
Description: 钩子实现文件或端口读写的截取&端口监控，并写入-hook to monitor the file and interface
Platform: |
Size: 351232 |
Author: ego |
Hits:
Description: API钩子系统一般框架
通常，我们把拦截API的调用的这个过程称为是安装一个API钩子（API Hook）。一个API钩子基本是由两个模块组成：一个是钩子服务器（Hook Server）模块，一般为EXE的形式；一个是钩子驱动器（Hook Driver）模块，一般为DLL的形式。
钩子服务器主要负责向目标进程注入钩子驱动器，使得钩子驱动器运行在目标进程的地址空间中，这是关键的第一步，而钩子驱动器则负责实际的API拦截处理工作，以便在我们所关心的API函数调用的之前或之后能做一些我们所希望的工作。一个比较常见的API钩子的例子就是一些实时翻译软件（像金山词霸）中必备的的功能：屏幕抓词。它主要是对一些Win32 API中的GDI函数进行了拦截，获取它们的输入参数中的字符串，然后在自己的窗口中显示出来。
针对上述关于API钩子的两个部分，有以下两点需要我们重点考虑的： 选用何种DLL注入技术，以及采用何种API拦截机制。
本篇文章来源于 黑基网-中国最大的网络安全站点 原文链接：file:///C:/Documents 20and 20Settings/jingtianzi/桌面/最新资料/黑客编程：hook系统函数-学院-黑基网.mht-General framework for API hook system
Usually, we called this process intercept API calls is to install an API hook (API Hook,). An API hooks basically consists of two modules: one is the hook server (Hook, Server) module, generally in the form of EXE a hook drive (Hook Driver) module, generally in the form of a DLL.
Hook server is mainly responsible to the target process inject hook driver device, hook-driven devices running on the target process address space, a critical first step, while the hook-driven device is responsible for the actual API to intercept processing so that in we are concerned with API functions before or after the call to do something we want. Example of a common API hook is some real-time translation software (such as necessary.) Function: screen grab word. It is mainly to intercept some of the Win32 API GDI functions to obtain the string in the input parameters, and then displayed in its own window.
For the two parts of the API hook, the following two ke
Platform: |
Size: 555008 |
Author: 刘永 |
Hits:
Description: Py.Core提供了以下的功能:
- 字符串/日期/数字/正则表达式/文件/数据检查/类型转换 等常见操作。
- 缩略图/验证码/水印 等图片操作。
- 排序/搜索/加密/遍历 等常用算法。
- 日志功能(内置包括向 屏幕、窗口、文件、数据库 输出日志的工具)。
- HTML/INI/ZIP 压缩/JSON/XML/常用集合 等文件或数据结构的处理。
- FTP/上传/下载/邮件/登陆网站 等网络功能 。
- 最完整的数据库操作辅助类 。
- 对于 C/S 结构，获取 CPU/IME 输入法/Memory 内存 等信息， 简化对 图标/键盘钩子/Win32 API 的操作。
- 对于 B/S 结构，获取 访客/服务器 等信息， 简化对 B/S 常见的操作。
- 函数性能测试等辅助工具。-Py.Core provides the following functions:- string/date/number/regular expression to the common operation of the data/files/check/type conversion.- Thumbnails/validation/watermarks and other image manipulation.- Sort/search/encryption/traverse the commonly used algorithms.- The log function (built-in tools to screen, window, file, database output log).- HTML/ini/ZIP compression/JSON/XML/commonly used collection and other documents or data structures processing.- FTP/Upload/download/mail/visit the Web site and other network functions.- The most complete database operations helper classes.- C/S structure to obtain information on the CPU/IME input method/Memory memory, simplifying the operation of the icons/keyboard hook/the Win32 API.- B/S structure, access to visitors/server information, and simplify the operation of the B/S common.- Function performance tests and other aids.
Platform: |
Size: 11936768 |
Author: 郭启洋 |
Hits:
Description: 电话检测模块原理图PDF和schdoc文件。检测振铃，检测摘机和挂机。-Phone detection module the schematic PDF and schdoc-file. Ring detection, detection of the hook and hang up.
Platform: |
Size: 62464 |
Author: yurui |
Hits:
Description: 文件说明：
1、网关服务端
就是网关服务的源代码了，主要用来向登陆器以及游戏客户端DLL下发运行参数等工作。
2、服务端解密DLL
注入游戏服务端进程HOOK RECV对封包解密。
3、客户端加密DLL
注入游戏客户端进程HOOK SEND对游戏封包进行加密。配合服务端加密DLL完成对游戏封包的重新加解密过程。
作用原理：
通过HOOK方式拦截游戏客户端的封包发送和游戏服务端的封包接收对封包进行重加密。这样只有你自己的登陆器启动的游戏才能正常连接。
置于反外挂什么的当然你可以加到客户端DLL里来，如果这个DLL被卸载，游戏必定中断。
为什么要用HOOK不用端口转发呢，答案是显而易见，相对于端口转发HOOK的效率是相当高的几乎感觉不到任何延迟。-File Description: a gateway server side is the gateway service source code is mainly used to run parameters to the lander and the game client DLL. 2, the service end to decrypt the DLL injected into the game server-side process HOOK RECV packet decryption. 3, the client encryption DLL injected into the game client process HOOK SEND game packet is encrypted. With the server-side encryption DLL to complete the game packet re-encryption and decryption process. Of principle: the interception of the game client by HOOK packet send and packet of the game side to receive the re-encryption of the packet. So only your own lander to start the game in order to properly connect. Placed in anti-plug-in, of course you can be added to the client DLL if the DLL is unloaded, the game must be interrupted. Why use HOOK do not have port forwarding, the answer is obvious, is quite high relative to the efficiency of the port forwarding HOOK hardly feel any delay.
Platform: |
Size: 39936 |
Author: 刘振 |
Hits:
Description: IFileOperation COM HOOK代码实例
WIN7系统在explorer.exe中操作文件都是调用IFileOperation COM接口，因此通用方法HOOK Win32 API 如DeleteFile就失去了作用
该实例成功HOOK到了NewItem、RenameItem、RenameItems、MoveItem、MoveItems、CopyItem、CopyItems、DeleteItem、DeleteItems等接口
备注：
google您可以找到有关com hook代码实例，但存在两大问题：
1、只能hook一次，并且操作文件将失效
2、反注入后，explorer.exe直接奔溃
该版本未修复这两个问题
如果需要完整版本，请访问：http://www.csto.com/case/show/id:51-The IFileOperation COM HOOK code instance WIN7 system operating in the explorer.exe in file to call IFileOperation COM interface, therefore, universal method HOOK Win32 APIs such as DeleteFile will lose the role of the instance successfully HOOK to NewItem RenameItem, RenameItems MoveItem, MoveItems CopyItem Remarks CopyItems, DeleteItem, DeleteItems interface: google you can find com, hook code examples, but there are two major problems: 1 hook only once, and manipulating files will fail, anti-implantation, explorer.exe directly Ben collapse version did not fix these two problems if you need the full version, please visit: http://www.csto.com/case/show/id:5177
Platform: |
Size: 74752 |
Author: 海盗医生 |
Hits:
Description: FSD HOOK HIDE FILE 的简单历程完成-Completion of the simple process of FSD HOOK HIDE FILE
Platform: |
Size: 7168 |
Author: 李小玲 |
Hits:
Description: 一个系统键盘钩子应用程序,单文件演示.不需要DLL,可以研究下钩子的原理.-A system keyboard hook applications, single-file demo required DLL can be studied under the principle of the hook.
Platform: |
Size: 168960 |
Author: zdbao |
Hits:
Description: 独立打包，保证可解压，内含大量源码，网上搜集而来。一共10几包，每个包几十兆。
本包内容：
深入解析ATL(第二版)源代码资源大小.zip
仿制金山毒霸专杀工具界面.rar
仿金山词霸界面.rar
仿QQ信息提示窗口.zip
工具栏画到标题栏上.rar
自己动手写操作系统.rar
完整源码 统计后台([源码信息] 梦者 绿色下载器 流量商必备 ).rar
关联文件.zip
对磁盘下任意目录的动作进行监控.rar
多功能小闹钟.zip
第12章+DLL开发与系统编程.rar
鼠标钩子.zip
打印函数.zip
手机远控电脑源码.rar
手写输入法源码.rar
文件(文件夹)加密解密工具源码.zip
文件加密程序.rar
文件夹加密小程序 .rar
写日志log的类.zip
阳历阴历转换.rar
一个轻量级网络通信开发库源码.zip-Independent package, extract, containing a large number of source, collected from the Internet. A total of 10 a few packs of each package of dozens of megabytes. The contents of the package: depth analysis ATL (2nd Edition) source code size zip generic Duba Zhuanshagongju interface rar imitation Kingsoft interface. Rar imitation QQ prompt window zip Toolbar draw to the title bar. Rar themselves hands to write the operating system. Rar complete source statistical background ([source] dream by the green download traffic necessary) rar associated files zip disk under any directory action to monitor the to. rar multi-purpose small alarm clock. zip 12 the Chapter+DLL development and system programming the. rar mouse hook zip print function. zip phone remote control computer source code rar handwriting input method source rar files (folders) encryption and decryption tool source zip file encryption program. the rar folder encryption applet rar write log log class. zip Gregorian lunar convers
Platform: |
Size: 38664192 |
Author: 李东波 |
Hits:
Description: 这个工具采用的是HOOK进程的winsock API，把一些数据记录下来。
2.1 patch静态文件，即运行前挂钩.
2.2 也是修改IAT，跟1.1一样.
2.3 修改目标函数的前几个字节，跳转到新的函数，但不再调用原始函数，无
实际意义，作者只是做演示？
2.4 这种方法(3.2.3 保存原始函数)很COOL，其中的亮点和难点就是“获取任意
地址的指令长度”。
之前我也想用2.4这种办法，但卡在如何“获取任意地址的指令长度”上面了:(
在看到《挂钩Windows API》这篇文章之前，我取了一个比较简单有效的办法：
3.1 把目标函数的DLL COPY一份到内存中，修改原目标函数的前几字节，跳转
到我们的函数，在我们的函数中调用原函数新的COPY。-AppWizard has created this xHook DLL for you.
This file contains a summary of what you will find in each of the files that
make up your xHook application.
xHook.dsp
This file (the project file) contains information at the project level and
is used to build a single project or subproject. Other users can share the
project (.dsp) file, but they should export the makefiles locally.
xHook.cpp
This is the main DLL source file.
xHook.h
This file contains your DLL exports.
/////////////////////////////////////////////////////////////////////////////
Other standard files:
StdAfx.h, StdAfx.cpp
These files are used to build a precompiled header (PCH) file
named xHook.pch and a precompiled types file named StdAfx.obj.
/////////////////////////////////////////////////////////////////////////////
Other notes:
AppWizard uses "TODO:" to indicate parts of the source code you
should add to or customize.
Platform: |
Size: 58368 |
Author: yunfeng |
Hits:
Description: linux串口工具
目前已支持如下功能(Support Feature List)：
1） 自动枚举串口(Auto List Serial)；
2） 支持侧边栏命令框(Support Side Command Bar)；
3） 支持回车、换行符勾选(Support Enter/NewLine Code)；
4） 支持定时发送(You can Ontimer Send one command)；
5） 支持读取文本显示(Display the ASCII that read from serial)；
6） 支持多窗口，可以创建多个串口界面(You Can Create Multi-Serial Ctrl UI)；
7） 支持当前窗口保存(You can save the Commands to file, and load back)；
8） 支持读取文件记录(You can save the received data to file)；-the linux serial tool currently supports the following functions (Support Feature List): 1) automatically enumerate the serial port (Auto List Serial) 2) support sidebar command box (Support Side Command Bar) 3) support the carriage return, newline hook Select (Support Enter/NewLine Code) 4) support of regularly sent (You can Ontimer the Send one command) 5) support for reading text display (Display the ASCII that read from serial) 6) to support multi-window, you can create multiple serial interface (You Can Create Multi-Serial the Ctrl UI) 7) support the current window to save (You can save the Commands to file, and load back) 8) to support reading file records (You can save the received data to file)
Platform: |
Size: 1366016 |
Author: 陈云 |
Hits:
Description: 功能：传真演示程序
其具体操作过程如下：
1）设置好所发（收）传真文件（可以设置从指定页开始收发文件）。（收传真还需设置存放文件路径）
2）拨号，摘机后播放提示音，选择收发传真操作。
3）开始收（发）传真。
4）操作结束，挂机。
需要注意的是如需加发文件，则需要在传真已经开始以后再加发文件。且加发文件格式应与已在发文件格式相同。如在发文件是Fax文件，则只能加发Fax文件；如在发文件是Tif文件，则只能发Tif文件。
-Features: Fax demonstration program
The specific operation process is as follows:
1) set the hair (closing) Fax file (can be set to start sending and receiving files from the specified page). (Received fax needs to set the store file path)
2) play tone dialing, off-hook, and select the send and receive fax operation.
3) to begin accepting (hair) Fax.
4) the end of the operation, hang up.
For an extra note file you need in the fax has begun coupled issuing documents. And, additional file format should be the same in the hair file format. Issued a document such as a Fax file, you can only add hair Fax file issued a document, can only be made Tif file Tif file.
Platform: |
Size: 2600960 |
Author: 沈中跃 |
Hits:
Description: 一、建立数据库
本站测试数据库为ms sqlserver2005,建议使用ms sqlserver2005或者更高版本，新建一个用于短网址的数据库，用url.sql里的代码创建数据表。
二、IIS伪静态设置（仅作参考，使用ISAPI_Rewrite的请自行设置）。
1.右键点击站点“属性”-“主目录”-“配置”-“映射”-“插入”在提示框中输入：c:windowsmicrosoft.netframeworkv2.0.50727aspnet_isapi.dll
取消“确认文件是否存在”的勾选。
2.asp.net使用2.0或者更高版本。
三、配置cgi/Config.asp文件中的数据库账号密码-First, create a database site testing database ms sqlserver2005, suggestions to use ms sqlserver2005 or later, a new one for the short URL database with code in the url.sql to create data table. Second, IIS pseudo static setting (only for reference, please use ISAPI_Rewrite set your own). Right-click on the site " Properties" - " home directory" - " Configuration" - " mapping" - " insert" in the prompt box enter: c: windowsmicrosoft.netframeworkv2.0.50727aspnet_isapi.dll cancel " Confirm File exists" hook election. 2.asp.net use version 2.0 or higher. Third, the configuration database account password the cgi/Config.asp file
Platform: |
Size: 94208 |
Author: sdgawi |
Hits:
Description: C#中常用的42个类,这些小类库似乎使用频率都比较高，作为从事C#编程的朋友来说，应该把这些类库收集起来，方便自己查询和使用。
部分类库：
c#全局键盘钩子.txt
获取页面源代码.txt
正则分割字符串.txt
随机100种声音.txt
宽带连接.txt
win7判断管理员身份.txt
打开指定路径文件对话框.txt
IEcookie清除.txt
字符串检查.txt
窗体鼠标穿透.txt等等的类-C# 42 class, these small library seems relatively high frequency of use, as friends in the C# programming, these libraries should be collected to facilitate their own inquiries and use. The part class libraries: c# global keyboard hook. Txt access to the source code of the page. Txt split string txt random 100 voices. Txt broadband connection TXT win7 judgment administrator. Txt file dialog box to open the specified path. Txt IEcookie Clear. the txt string check txt form mouse penetration. txt and so the class
Platform: |
Size: 40960 |
Author: zpudn9 |
Hits:
Description: This file contains the smack hook function implementations.
Platform: |
Size: 18432 |
Author: sieviurao |
Hits:
Description: Delphi安装和卸载钩子的源码实例，包括有一个钩子类的DLL源文件，主程序调用这个钩子DLL，并安装钩子与卸载的实例，可学习下如何调用一个DLL库文件。-Delphi install and uninstall hook source code examples, including a hook DLL source files, the main program calls the hook DLL, and install hook and unloading instance, can learn how to call a DLL library file.
Platform: |
Size: 171008 |
Author: 张海红 |
Hits:
«
1
2
...
4
5
6
7
8
910
11
»