搜索资源列表
UiQQCode_1
- 这是盗用qq号软件的源码，是用钩子截获密码，只是作为大家互相学习拉！-theft qq This is the source code for its software, is the hook intercepted password, but as we learn from each other!!
Mouse_hook_
- 一个简单的鼠标钩子程序 实现适时获取当前鼠标所在窗口的标题，并将其显示在一个EDITBOX中-a simple mouse hook procedures to achieve timely access to the current window where the mouse title, and its display in which a EDITBOX
hookdllwgx
- hook需要自己写调用程序 -hook needs its own procedures hook was called to write our own procedures call hook needs to write his call hook procedures need to write their own procedures ca
dll_code
- 远程插入dll代码，可以根据自己的需要动态的链接有益或有害程序，为己所用。-Remote insert dll code, according to their own needs dynamic link beneficial or harmful procedures for its own use.
hookntcontinue
- ring0--hook NtContinue+source_code ring0下面hookNtContinue 使用drx7寄存器实现的hook this code hooks ntoskrnl!NtContinue to set dr7 to 0 (no updating of dr7) so NtContinue called from ring3 cannot alter drX registers... This hook will only PREVENT dr
WIN30
- MAPWIN, written by Richard Smith (president of Phar Lap Software), is a program that makes it easy to see what API functions a Windows program uses, or what functions a dynamic-link library (DLL) or device driver provides. Phar Lap generally u
pefile
- PE文件是windows(9598NT)目前采用的可执行文件格式。流行的CIH病毒就是通过改变PE文件的内容，并且保持文件大小不变，从而实现自己的功能。本程序通过分析PE文件格式，将可执行文件的文件定位表重新定位，指向用户编写的DLL，然后指令指针返回正常调用位置。在DLL中通过系统挂钩，实现了后台各种级别密码的截获功能。-PE document windows (9598NT) of the executable file format. Popular CIH virus is throug
PE文件格式
- PE文件是windows(9598NT)目前采用的可执行文件格式。流行的CIH病毒就是通过改变PE文件的内容，并且保持文件大小不变，从而实现自己的功能。本程序通过分析PE文件格式，将可执行文件的文件定位表重新定位，指向用户编写的DLL，然后指令指针返回正常调用位置。在DLL中通过系统挂钩，实现了后台各种级别密码的截获功能-PE document windows (9598NT) of the executable file format. Popular CIH virus is through
hook实例
- Surface时捆绑了TCanvas对象,使得DirectDrawSurface可以支持强大的TGraphic及其扩展对象。在此测试中,使用了扩展TGraphic的开放源码的第三方控件PNGImage,实现了通过TCanvas对象在显示平面快速的绘制... -Surface TCanvas when bundled with the target, making DirectDrawSurface can support powerful TGraphic and its expansion t
LibSpy_src
- LibSpy源代码。运行该程序，可以获取当前窗口的进程号，以及线程号。为想要深入理解windows系统的朋友提供了一个很不错的途径。-LibSpy source code. Run this program, you can access the current window of the process, as well as its threads. For the want-depth understanding of Friend windows system provides a ve
Detours-Express-3.0
- 拦截API调用，将其引导到自己的子程序，从而实现WIN32 API的定制。为一个已在运行的进程创建一新线程，装入自己的代码并运行。 -Intercept API calls, will lead to his son the program, so as to realize the customized WIN32 API. For a has set up a file in the operation of the process to create new thread, into it
DLLv3_HOOKING
- hook nextfile and openprocess, it blocks notepad and hides files its a mix of diferent codes their autors are:E0N and internals (StickyApp32)
joystick-api
- 游戏手柄joystick api测试程序(VB)： joyGetNumDevs 获取当前系统支持的游戏设备数量 joyGetDevCaps 查询获取指定的游戏杆设备以确定其性能 joySetCapture 向系统申请捕获某个游戏设备并定时将该设备的状态值通过消息发送到某个窗口 joyReleaseCapture 释放对某个游戏设备的捕获 joyGetPos 获取游戏设备的坐标位置和按钮状态 joyGetPosEx 获取游戏设备的坐标位置和按钮状态 joyG
ring3_inline_hook_demo
- tat hook api 在一个文件中对自身调用的api进行hook的一个例子。-tat hook api in a document of its own hook to call api
keey
- 如何读取键盘信息通过它可以得到您键盘上的信息-How to read the keyboard information through its keyboard you can get information on the
shv4.tar
- Source code for SHV4 rootkit. Its old version of the rootkit but very good for study purposes
Keyboardsimulation
- cSharp实现的键盘模拟器,如果需要,请自行修改-keyboard simulator cSharp achieved, if necessary, to make its own decisions
Code_AllocMemory
- win32抛弃了win16的全局内存的概念,每个进程有自己独立的内存空间, 并且不受其他进程影响.这样一来所有代码都只能访问局部资源,但很显然有些 应用必须是全局的,比如你的hook,所以ms必须提供一种折衷的安全的方法.好 在windows中的dll正好可以解决这个问题.-win32 global win16 abandoned the concept of memory, each process has its own separate memory space, and ot
Code_APIData
- win32抛弃了win16的全局内存的概念,每个进程有自己独立的内存空间, 并且不受其他进程影响.这样一来所有代码都只能访问局部资源,但很显然有些 应用必须是全局的,比如你的hook,所以ms必须提供一种折衷的安全的方法.好 在windows中的dll正好可以解决这个问题.-win32 global win16 abandoned the concept of memory, each process has its own separate memory space, and ot
Code_BitBlt
- win32抛弃了win16的全局内存的概念,每个进程有自己独立的内存空间, 并且不受其他进程影响.这样一来所有代码都只能访问局部资源,但很显然有些 应用必须是全局的,比如你的hook,所以ms必须提供一种折衷的安全的方法.好 在windows中的dll正好可以解决这个问题.-win32 global win16 abandoned the concept of memory, each process has its own separate memory space, and ot