文件名称:APIH00k
- 所属分类：
- 钩子与API截获
- 资源属性：
- [Windows] [Visual C] [源码]
- 上传时间：
- 2012-11-26
- 文件大小：
- 542kb
- 下载次数：
- 0次
- 提 供 者：
- 刘*
- 相关连接：
- 无
- 下载说明：
- 别用迅雷下载，失败请重下，重下不扣分！
介绍说明－－下载内容均来自于网络，请自行研究使用
API钩子系统一般框架
通常，我们把拦截API的调用的这个过程称为是安装一个API钩子（API Hook）。一个API钩子基本是由两个模块组成：一个是钩子服务器（Hook Server）模块，一般为EXE的形式；一个是钩子驱动器（Hook Driver）模块，一般为DLL的形式。
钩子服务器主要负责向目标进程注入钩子驱动器，使得钩子驱动器运行在目标进程的地址空间中，这是关键的第一步，而钩子驱动器则负责实际的API拦截处理工作，以便在我们所关心的API函数调用的之前或之后能做一些我们所希望的工作。一个比较常见的API钩子的例子就是一些实时翻译软件（像金山词霸）中必备的的功能：屏幕抓词。它主要是对一些Win32 API中的GDI函数进行了拦截，获取它们的输入参数中的字符串，然后在自己的窗口中显示出来。
针对上述关于API钩子的两个部分，有以下两点需要我们重点考虑的： 选用何种DLL注入技术，以及采用何种API拦截机制。
本篇文章来源于 黑基网-中国最大的网络安全站点 原文链接：file:///C:/Documents 20and 20Settings/jingtianzi/桌面/最新资料/黑客编程：hook系统函数-学院-黑基网.mht-General fr a mework for API hook system
Usually, we called this process intercept API calls is to install an API hook (API Hook,). An API hooks basically consists of two modules: one is the hook server (Hook, Server) module, generally in the form of EXE a hook drive (Hook Driver) module, generally in the form of a DLL.
Hook server is mainly responsible to the target process inject hook driver device, hook-driven devices running on the target process address space, a critical first step, while the hook-driven device is responsible for the actual API to intercept processing so that in we are concerned with API functions before or after the call to do something we want. Example of a common API hook is some real-time translation software (such as necessary.) Function: screen grab word. It is mainly to intercept some of the Win32 API GDI functions to obtain the string in the input parameters, and then displayed in its own window.
For the two parts of the API hook, the following two ke
通常，我们把拦截API的调用的这个过程称为是安装一个API钩子（API Hook）。一个API钩子基本是由两个模块组成：一个是钩子服务器（Hook Server）模块，一般为EXE的形式；一个是钩子驱动器（Hook Driver）模块，一般为DLL的形式。
钩子服务器主要负责向目标进程注入钩子驱动器，使得钩子驱动器运行在目标进程的地址空间中，这是关键的第一步，而钩子驱动器则负责实际的API拦截处理工作，以便在我们所关心的API函数调用的之前或之后能做一些我们所希望的工作。一个比较常见的API钩子的例子就是一些实时翻译软件（像金山词霸）中必备的的功能：屏幕抓词。它主要是对一些Win32 API中的GDI函数进行了拦截，获取它们的输入参数中的字符串，然后在自己的窗口中显示出来。
针对上述关于API钩子的两个部分，有以下两点需要我们重点考虑的： 选用何种DLL注入技术，以及采用何种API拦截机制。
本篇文章来源于 黑基网-中国最大的网络安全站点 原文链接：file:///C:/Documents 20and 20Settings/jingtianzi/桌面/最新资料/黑客编程：hook系统函数-学院-黑基网.mht-General fr a mework for API hook system
Usually, we called this process intercept API calls is to install an API hook (API Hook,). An API hooks basically consists of two modules: one is the hook server (Hook, Server) module, generally in the form of EXE a hook drive (Hook Driver) module, generally in the form of a DLL.
Hook server is mainly responsible to the target process inject hook driver device, hook-driven devices running on the target process address space, a critical first step, while the hook-driven device is responsible for the actual API to intercept processing so that in we are concerned with API functions before or after the call to do something we want. Example of a common API hook is some real-time translation software (such as necessary.) Function: screen grab word. It is mainly to intercept some of the Win32 API GDI functions to obtain the string in the input parameters, and then displayed in its own window.
For the two parts of the API hook, the following two ke
(系统自动生成,下载前可以参看下载内容)
下载文件列表
APIHookTest
...........\.svn
...........\....\text-base
...........\....\.........\StdAfx.h.svn-base
...........\....\.........\ApiHookDemo.cpp.svn-base
...........\....\.........\ApiHookDemo.rc.svn-base
...........\....\.........\ApiHookDemo.dsp.svn-base
...........\....\.........\ApiHookDemo.h.svn-base
...........\....\.........\ApiHookDemoDlg.cpp.svn-base
...........\....\.........\StdAfx.cpp.svn-base
...........\....\.........\ApiHookDemo.dsw.svn-base
...........\....\.........\ReadMe.txt.svn-base
...........\....\.........\ApiHookDemoDlg.h.svn-base
...........\....\.........\Resource.h.svn-base
...........\....\prop-base
...........\....\props
...........\....\tmp
...........\....\...\text-base
...........\....\...\prop-base
...........\....\...\props
...........\....\format
...........\....\entries
...........\Hook
...........\....\.svn
...........\....\....\text-base
...........\....\....\.........\StdAfx.h.svn-base
...........\....\....\.........\Hook.cpp.svn-base
...........\....\....\.........\HookApi_Jmp.cpp.svn-base
...........\....\....\.........\Hook.dsp.svn-base
...........\....\....\.........\HookApi_Jmp.h.svn-base
...........\....\....\.........\StdAfx.cpp.svn-base
...........\....\....\.........\ReadMe.txt.svn-base
...........\....\....\.........\Hook.def.svn-base
...........\....\....\prop-base
...........\....\....\props
...........\....\....\tmp
...........\....\....\...\text-base
...........\....\....\...\prop-base
...........\....\....\...\props
...........\....\....\format
...........\....\....\entries
...........\....\StdAfx.h
...........\....\Hook.cpp
...........\....\HookApi_Jmp.cpp
...........\....\Hook.dsp
...........\....\HookApi_Jmp.h
...........\....\StdAfx.cpp
...........\....\ReadMe.txt
...........\....\Hook.def
...........\res
...........\...\.svn
...........\...\....\text-base
...........\...\....\.........\ApiHookDemo.rc2.svn-base
...........\...\....\.........\ApiHookDemo.ico.svn-base
...........\...\....\prop-base
...........\...\....\.........\ApiHookDemo.ico.svn-base
...........\...\....\props
...........\...\....\tmp
...........\...\....\...\text-base
...........\...\....\...\prop-base
...........\...\....\...\props
...........\...\....\format
...........\...\....\entries
...........\...\ApiHookDemo.rc2
...........\...\ApiHookDemo.ico
...........\StdAfx.h
...........\ApiHookDemo.cpp
...........\ApiHookDemo.rc
...........\ApiHookDemo.dsp
...........\ApiHookDemo.h
...........\ApiHookDemoDlg.cpp
...........\StdAfx.cpp
...........\ApiHookDemo.dsw
...........\ReadMe.txt
...........\ApiHookDemoDlg.h
...........\Resource.h
IE，API注入问题 - VC-MFC - 进程-线程-DLL.mht
程式者的胡言亂語 程式者的胡言亂語.mht
黑客编程：hook系统函数-学院-黑基网.mht
...........\.svn
...........\....\text-base
...........\....\.........\StdAfx.h.svn-base
...........\....\.........\ApiHookDemo.cpp.svn-base
...........\....\.........\ApiHookDemo.rc.svn-base
...........\....\.........\ApiHookDemo.dsp.svn-base
...........\....\.........\ApiHookDemo.h.svn-base
...........\....\.........\ApiHookDemoDlg.cpp.svn-base
...........\....\.........\StdAfx.cpp.svn-base
...........\....\.........\ApiHookDemo.dsw.svn-base
...........\....\.........\ReadMe.txt.svn-base
...........\....\.........\ApiHookDemoDlg.h.svn-base
...........\....\.........\Resource.h.svn-base
...........\....\prop-base
...........\....\props
...........\....\tmp
...........\....\...\text-base
...........\....\...\prop-base
...........\....\...\props
...........\....\format
...........\....\entries
...........\Hook
...........\....\.svn
...........\....\....\text-base
...........\....\....\.........\StdAfx.h.svn-base
...........\....\....\.........\Hook.cpp.svn-base
...........\....\....\.........\HookApi_Jmp.cpp.svn-base
...........\....\....\.........\Hook.dsp.svn-base
...........\....\....\.........\HookApi_Jmp.h.svn-base
...........\....\....\.........\StdAfx.cpp.svn-base
...........\....\....\.........\ReadMe.txt.svn-base
...........\....\....\.........\Hook.def.svn-base
...........\....\....\prop-base
...........\....\....\props
...........\....\....\tmp
...........\....\....\...\text-base
...........\....\....\...\prop-base
...........\....\....\...\props
...........\....\....\format
...........\....\....\entries
...........\....\StdAfx.h
...........\....\Hook.cpp
...........\....\HookApi_Jmp.cpp
...........\....\Hook.dsp
...........\....\HookApi_Jmp.h
...........\....\StdAfx.cpp
...........\....\ReadMe.txt
...........\....\Hook.def
...........\res
...........\...\.svn
...........\...\....\text-base
...........\...\....\.........\ApiHookDemo.rc2.svn-base
...........\...\....\.........\ApiHookDemo.ico.svn-base
...........\...\....\prop-base
...........\...\....\.........\ApiHookDemo.ico.svn-base
...........\...\....\props
...........\...\....\tmp
...........\...\....\...\text-base
...........\...\....\...\prop-base
...........\...\....\...\props
...........\...\....\format
...........\...\....\entries
...........\...\ApiHookDemo.rc2
...........\...\ApiHookDemo.ico
...........\StdAfx.h
...........\ApiHookDemo.cpp
...........\ApiHookDemo.rc
...........\ApiHookDemo.dsp
...........\ApiHookDemo.h
...........\ApiHookDemoDlg.cpp
...........\StdAfx.cpp
...........\ApiHookDemo.dsw
...........\ReadMe.txt
...........\ApiHookDemoDlg.h
...........\Resource.h
IE，API注入问题 - VC-MFC - 进程-线程-DLL.mht
程式者的胡言亂語 程式者的胡言亂語.mht
黑客编程：hook系统函数-学院-黑基网.mht