Hooking

Hooking the native API and controlling process creation on a system-wide basis

IntroductionRecentlyIcameacrossthedescriptionofaquiteinterestingsecurityproduct,calledSanctuary.Thisproductpreventsexecutionofanyprogramthatdoesnotappearonthelistofsoftwarethatisallowedtorunonaparticu
lixiangminghate·2014-12-26 09:00

DLL Injection and Hooking

DLL Injection and Hooking http://securityxploded.com/dll-injection-and-hooking.php Three Ways to Inject
·2014-11-06 02:00

Linux System Calls Hooking Method Summary

1.相关学习资料http://xiaonieblog.com/?post=121http://hbprotoss.github.io/posts/li-yong-ld_preloadjin-xing-hook.htmlhttp://www.catonmat.net/blog/simple-ld-preload-tutorial/http://os.51cto.com/art/201004/1955
郑瀚Andrew.Hann·2014-07-21 11:00

MinHook - The Minimalistic x86/x64 API Hooking Library

BackgroundAsyouwhoareinterestedinWindowsAPIhookingknow,thereisanexcellentlibraryforitbyMicrosoftResearchnamed Detours.It'sreallyuseful,butitsfreeedition(called'Express')doesn'tsupportthex64environment
lionzl·2014-05-14 16:00

Game Res Hooking

2010-11-2302:54阅读(83)评论(0)    游戏不是程序员一个人能干的活，还需要策划和美工的支持。    策划的活，程序员可以勉强干一下，但美工可就不是每个程序员都能干的了的了（某些全才除外：）    不过，我们是程序员，可以直接拿别人的资源为我们的游戏做测试（窃取别人的劳动成果是不合法的哦，下文仅供学习研究：）        游戏资源归根到底也只是一堆由0和1组成的数据，由于某些
dj0379·2014-01-16 20:00

FOSCommentBundle功能包：挂接到JS代码

原文出处：13-hooking_into_the_js_code.md原文作者：FriendsOfSymfony授权许可：创作共用协议翻译人员：FireHare校对人员：适用版本：FOSCommentBundle2.0.5
firehare·2013-07-29 12:09

FOSCommentBundle功能包：挂接到JS代码

原文出处：13-hooking_into_the_js_code.md原文作者：FriendsOfSymfony授权许可：创作共用协议翻译人员：FireHare校对人员：适用版本：FOSCommentBundle2.0.5
firehare·2013-07-29 12:09

揭示Win32 API拦截细节/API hooking revealed (3)

. // Activate/Deactivate hooking engine   2. 
yy3166·2013-03-29 14:39

揭示Win32 API拦截细节/API hooking revealed (3)

. // Activate/Deactivate hooking engine   2. 
yy3166·2013-03-29 14:26

揭示Win32 API拦截细节/API hooking revealed (2)

2．Win32用户级钩子A.窗口子类    这种方法适用于那些会根据不同窗口过程的实现而具有不同行为的应用程序。要完成上述工作（通过更改窗口过程来执行用户自定义代码），只需对该特定窗口简单调用SetWindowLongPtr()，传递GWLP_WNDPROC和用户自定义窗口过程的指针作为实参即可。一旦建立好用户自定义窗口过程，以后windows每次分发消息到目标窗口时，都会调用用户自定义的窗口过程
yy3166·2013-03-29 13:11

揭示Win32 API拦截细节/API hooking revealed (1)

 原文出处：http://www.codeproject.com/system/hooksys.asp简要介绍拦截win32API调用对于多数windows开发人员来说都一直是很有挑战性的课题，我承认，这也是我感兴趣的一个课题。钩子机制就是用一种底层技术控制特定代码段的执行，它同时提供了一种直观的方法，很容易就能改变操作系统的行为，而并不需要涉及到代码。这跟一些第三方产品类似。    许多系统都通
yy3166·2013-03-29 13:41

cracker's DS Hooking Tutorial

 cracker'sDSHookingTutorialThisdocumentisbestviewedinFirefoxPrefaceIamcreatingthistutorialforthosewhoarewantingtolearnhowtohackintoDSgamesbuthavenoideawheretobegin.Ireleasedtutorialsawhileagobuttheyre
laokaddk·2013-03-28 11:53

Function hooking on ARM

 FunctionhookingonARMHi,I'veimplementedafunctionhookeronARMthatworkswellsofar(asalinuxkernelmodule):1.Preservethetarget'sfirst2instructionstoastructure.(8bytes)2.Writeldrpc,[pc-#4],tothefirstinstructi
laokaddk·2013-03-22 16:52

Suterusu Rootkit: Inline Kernel Function Hooking on x86 and ARM

http://www.poppopret.org/   SuterusuRootkit:InlineKernelFunctionHookingonx86andARMPostedonJanuary7,2013bymncoppolaTableofContentsIntroductionFunctionHookinginSuterusuFunctionHookingonx86WriteProtectio
laokaddk·2013-03-22 16:59

Hooking SpringBoard

http://blog.sina.com.cn/s/blog_7cac85620100s1it.html[Tutorial]HookingSpringBoardBasicConceptOk,hookingintoSpringBoardisactuallyveryeasy.WhatyoudoishaveSpringBoardopenadynamiclibrarythatyoucreate,which
qhexin·2013-03-04 01:00

You don't have permission to edit anything

have permission to edit anything", 查了下文档http://docs.djangoproject.com/en/dev/ref/contrib/admin/#hooking-adminsite-instances-into-your-u
mr.zxing·2011-10-28 17:00

OSB: Hooking up Rest Service with XML Payload in Query String

  UsingOSBtohookupRestServiceisfairlycommon.Therearequiteafewarticlesonlinetalkingabouthowtodoit.However,IranintosomeparticularissueswheretryingtohookupaRestServiceinOSB.Theproblemisthisserviceusesque
qingqingxuelang·2011-09-01 00:00

[导入]Paper导读系列之HookFinder: Identifying and Understanding Malware Hooking Behaviors

[导入]Paper导读系列之HookFinder:IdentifyingandUnderstandingMalwareHookingBehaviors最近要看各种paper 但是看的断断续续的，后面看前面的就忘光了（主要就是太忙……各种私人以及学习的是，不过还好申请弄完了闲下来可以看看书了哈哈），所以开个帖子把读过的paper总结下，写个心得吧。标红的是我的问题~哈哈 原文：HookFinder:
Ay's Blog@CNSSUESTC·2011-01-04 00:00

一个实用并且确实的内核补丁--关于桥接nat的

vger.kernel.org [email protected] ...相关的收件人邮箱 Hi,everyone As we know,the NAT netfilter-hook for IP hooking
izuoyan·2010-09-28 23:00

一个实用并且确实的内核补丁--关于桥接nat的

vger.kernel.org [email protected] ...相关的收件人邮箱 Hi,everyone As we know,the NAT netfilter-hook for IP hooking
totoxian·2010-09-28 23:00

一个实用并且确实的内核补丁--关于桥接nat的

vger.kernel.org [email protected] ...相关的收件人邮箱 Hi,everyone As we know,the NAT netfilter-hook for IP hooking
xitong·2010-09-28 23:00

windows下的api hooking技术

APISpyingTechniquesforWindows9x,NTand2000YarivKaplanAPIspyingutilitiesareamongthemostpowerfultoolsforexploringtheinnerstructureofapplicationsandoperatingsystems.Unfortunately,neithertheSDKnortheDDKpro
G_Spider·2010-07-30 20:00

Hooking the kernel directly

http://www.codeproject.com/KB/system/soviet_direct_hooking.aspxHowtohookthekernelfunctionsdirectly.Downloadsourcefiles
lwglucky·2010-07-01 19:31

Hooking the kernel directly

http://www.codeproject.com/KB/system/soviet_direct_hooking.aspxHowtohookthekernelfunctionsdirectly.Downloadsourcefiles
lwglucky·2010-07-01 19:31

[Tutorial] Hooking SpringBoard

BasicConceptOk,hookingintoSpringBoardisactuallyveryeasy.WhatyoudoishaveSpringBoardopenadynamiclibrarythatyoucreate,whichcallstheinitializingfunctionwithinyourdylib(specifiedwhenlinking).Fromhereyoutak
wyymaomi·2010-04-05 21:00

Hooking a DirectX/COM Interface

HookingaDirectX/COMInterface原文：http://www.codeproject.com/KB/system/Hooking_DirectX_COM.aspxDownloadsourcefiles
S.l.e!ep.￠%·2010-01-13 00:00

SOA Using

formerly of Microsoft, has a great acronym he likes to usewhen talking about interoperability: HST, or “Hooking
kill522·2009-11-29 19:00

COM Interface Hooking and Its Application - Part I

Downloaddemoproject-29.9KbDownloadsource-55KbIntroductionIthasbeennearlyoneyearsinceIpublished"MessengerSpy++forMSNMessenger/WindowMessenger"(tointeractwithMSNMessenger4.6,4.7and5.0)inwww.CodeGuru.com
S.l.e!ep.￠%·2009-10-10 21:00

You don't have permission to edit anything

have permission to edit anything", 查了下文档 http://docs.djangoproject.com/en/dev/ref/contrib/admin/#hooking-adminsi
lxneng·2009-08-23 12:00

API hooking revealed

APIhookingrevealed转自http://www.codeproject.com/KB/system/hooksys.aspxDownloadsourcefiles-69KbDownloaddemoproject-139KbIntroductionInterceptingWin32APIcallshasalwaysbeenachallengingsubjectamongmostofth
iniwf·2009-04-11 23:00

被动D3D Hooking方案

被动D3DHooking方案    所谓被动，通俗点说就是等着别人来调用。这种方式不像其他D3DHooking，需要自己编写一个应用来启动需要Hook的程序，而是将自己伪装成d3d*.dll。下图展现了整个方案所涉及的两个重要的interface，由于methods繁多，在此略去（可以参考d3d的文档和headfiles）。P.S.感谢Jeffrey的《WindowsviaC/C++》和Matth
Heath's Blog·2008-11-23 15:00

[转]Hooking the kernel directly

PrintBrokenArticle?AddBookmarkDiscussSendtoafriend35votesforthisArticle.Popularity:7.29Rating:4.72outof5Downloadsourcefiles-5.22KbIntroductionSometimes,werunintoasituationwhenwebadlyneedtohooksomekern
ngaut·2008-03-06 08:00

Hooking into NDIS and TDI-part 1

By:andreasThisisthefistpartinaseriesof2articlesonhowtohookintotheNDISandTDIlayer.Inthisfirstone,wewilldiscusswhereandhowtohookintotheNDISlayer.Inthesecond,wewilldothesameforTDI.First,letstakeaquickloo
Blue_Dream_·2007-09-03 15:00

NDIS and TDI Hooking, Part II

By:andreasThisisthesecondandlastarticleonhowtohookintotheNDISandTDIlayer.TheapproachwewillusewillbeslightlydifferentfromtheNDIScase.However,aneatsideeffectisthatthismethodcanbeusedtohookintoanydevicec
Blue_Dream_·2007-08-23 20:00

NDIS and TDI Hooking, Part II

By:andreas ThisisthesecondandlastarticleonhowtohookintotheNDISandTDIlayer.TheapproachwewillusewillbeslightlydifferentfromtheNDIScase.However,aneatsideeffectisthatthismethodcanbeusedtohookintoanydevice
iiprogram·2007-08-13 11:00

Hooking CPUID – A Virtual Machine Monitor Rootkit Framework

By:mobydefrag HookingCPUID–AVirtualMachineMonitorRootkitFrameworkIamwritingthisarticlefrominsideaVirtualMachine…orperhapsIamnot!OneofthefascinatingdebatestakingplacearoundthewebiswhetherornotanOScande
iiprogram·2007-08-13 11:00

Hooking the IAT of a driver

Content：I thoughtI'dpublishsomethingthatIwroteinaprivateprojectoverayearago-howtohooktheimportaddresstableofadriver(ring0).Basically,lotsofdriverswillusekernelapithatareexportedbyntoskrnl.exe.Ifyouwis
xiong2127·2007-04-29 20:50

Hooking the IAT of a driver

Content：IthoughtI'dpublishsomethingthatIwroteinaprivateprojectoverayearago-howtohooktheimportaddresstableofadriver(ring0).Basically,lotsofdriverswillusekernelapithatareexportedbyntoskrnl.exe.Ifyouwish
xiong2127·2007-04-29 20:50

Hooking the IAT of a driver

Content：I thoughtI'dpublishsomethingthatIwroteinaprivateprojectoverayearago-howtohooktheimportaddresstableofadriver(ring0).Basically,lotsofdriverswillusekernelapithatareexportedbyntoskrnl.exe.Ifyouwis
xiong2127·2007-04-29 20:50

Hooking Windows API (ZT)

http://hxdef.org/knowhow/hookingen.txt===========================[HookingWindowsAPI]==============================                TechnicsofhookingAPIfunctionsonWindows                ----------------
酒水不犯茶水·2006-12-19 10:00

hooking the service manger with hacker defender

hooking the service manger with hacker defender ********************************IntroThe idea of this
iiprogram·2006-04-22 02:00

AntiHookExec Version 1.0 (Anti API Hooking Proof-Of-Concept)

byTanChewKeong15April2004DownloadIntroductionAPIhookingisausefultechniquethatcanbeusedtomonitorAPIcallsusedbyWin32programs.Thisallowsunderstandingoftheprograms'functionalitiesbasedontheAPIsthatarecall
iiprogram·2006-04-10 21:00

程序行为追踪（API TRACING）

以前曾写过一个利用 API HOOKING 原理记录可疑程序对文件、注册表、服务
lovnet·2005-07-07 14:00

Hooking server DLL into PHP

http://www.issociate.de/board/post/211185/Hooking_server_DLL_into_PHP.html[Suche] [Administrator] [HinweisezumReader
xiaocon·2005-06-06 17:00
上一页 1 2 下一页
按字母分类： ABCDEFGHIJKLMNOPQRSTUVWXYZ其他