搜索资源列表
RING0.RING0下检测用HOOK SSDT隐藏进程的代码
- RING0下检测用HOOK SSDT隐藏进程的代码,直接build,适用于XP,2000系统。短小实用。,RING0 detect hidden process by HOOK SSDT code directly build, apply to XP, 2000 systems. Short and practical.
ProcessProtect.rar
- 在Ring0下实现保护进程,通过HOOK SSDT实现保护进程,The Ring0 achieve protection process, achieved through the protection process HOOK SSDT
hook-process
- hook openprocess免杀 保护进程-hook openprocess
hook
- 在vs2008下面测试通过 简单的实现了进程内的hook调用,和全局hook,hook部分简单的实现了屏蔽键盘和鼠标消息,后门为功能键F2,有详细的说明,适合入门研究学习 一共三个文件, v19e2_Hook.rar为全局hook程序块,v19e2_HookTest.rar为测试全局hook的程序,v20e1_innerHook.rar为在一个单独的进程内调用hook,-Simple implementation of the process, call the hook, and
Hook
- 勾子 代码 Hook编程。如何安装钩子过程,如何编写全局钩子-Hook hook programming code. How to install the hook process, how to write global hooks
HOOK
- HOOK API,对于一个没有接触过人而言,时个神秘地带,真有那么神秘码?微软提供了这方面的开发包DETOUES,很简单,不需要其他工作就可以实现了,不需要跳转指令,不需要修改PE头,更不需要枚举当前所有进程和即将启动的进程-HOOK API, no contact for a man is concerned, when a mysterious area code really so mysterious? Microsoft provided an SDK DETOUES, very si
Hook
- 利用Hook在系统进程插入线程的改进版本. -Hook the process to use the system to improve the version of the thread insert.
Hook
- 自己写的一个锁机软件。 使用钩子屏蔽热键。 使用Process类终止任务管理器-Writing a lock their software. The use of hook hotkey shielding. Terminating the use of Process Task Manager
hook
- Hook编程。如何安装钩子过程,如何编写全局钩子,动态连接库里的全局变量数据共享问题分析。ADO数据库编程。在VB中利用ADO控件和ADO对象访问数据库,在VC中利用ADO技术访问数据库-Hook programming. How to install the hook process, how to write global hooks, dynamic link library' s global variable analysis of data sharing problem. A
hook
- 驱动级的隐藏进程代码,在驱动层通过替换ssdt地址表中的函数来隐藏进程-Drive-level code to hide the process, in the driver layer ssdt address by replacing the function table to hide the process of
HOOK
- 控制银证直通车键盘热键的说明格式为Delphi远程线程注入系统进程-Control of Silver Certificate Note Express format of the keyboard hotkey remote thread injection system for the Delphi process
Hook
- 强大的API hook 使自己的进程不被结束。-Powerful API hook itself is not the end of the process. Ha ha ha
ZwOpenProcessHook
- ZwOpenProcess SSDT Hook test to catch open process information. Compile it with Meerkat Advanced kernel mode driver GUI for KmdKit4D. Link: http://www.mediafire.com/?hbhjorv8797k2-ZwOpenProcess SSDT Hook test to catch open process information.
apihook
- C#.NET 2008下开发的API HOOK进程send函数,可封装成DLL,对发送的数据包进行拦截,修改-C#. NET 2008 development of the API HOOK process under the send function, can be packaged into a DLL, for sending data packets to intercept, modify,
SYSENTER-hook
- SYSENETER是一条汇编指令,它是在Pentium® II 处理器及以上处理器中提供的,是快速系统调用的一部分。SYSENTER/SYSEXIT这对指令专门 用于实现快速调用。在这之前是采用INT 0x2E来实现的。INT 0x2E在系统调用的时候,需要进行栈切换的工作。由于Interrupt/Exception Handler的 调用都是通过 call/trap/task这一类的gate来实现的,这种方式会进行栈切换,并且系统栈的地址等信息由TSS提供。这种方式可能会引起多
Source-protection-process
- 无驱动 无hook 纯API编写的保护自身进程源码 防止自身进程,防止被恶意关闭,此源码进程保护强度一般、-No drive no hook pure API code written to protect its own process to prevent its own process, to prevent malicious closed, the source protection process, general strength,
Hook-code
- 如何安装钩子过程,如何编写全局钩子,动态连接库里的全局变量数据共享问题分析。ADO数据库编程。在VB中利用ADO控件和ADO对象访问数据库,在VC中利用ADO技术访问 数据库-How to install the hook process, how to write global hooks, dynamic link library global variable analysis of data sharing. ADO database programming. Controls in
hook-and-thread-DLL
- 注入钩子过程,获取相关的进程信息,and all information-Injection hook process, the process of obtaining relevant information
delphi HOOK 技术
- delphi hook dll案例, 论坛里有关于HOOK API的贴子, 但其实现在方式显示得麻烦, 其实现在拦截API一般不用那种方式, 大都采用inline Hook API方式。其实也就是直接修改了要拦截的API源码的头部,让它无条件跳转到我们自己的处理过程。(There are HOOK API posts on the forum, but in fact, the way it is showing is troublesome. In fact, interception of
HOOK创建进程[1]
- 易语言HOOK api 实现创建进程,很不错的易语言源码,适合易语言爱好者学习。(Easy language HOOK API to achieve the creation process, very good easy language source code, suitable for easy language enthusiasts to learn)