[钩子与API截获] HT368apidoc
捷宝ht368开发工具包说明文档即api函数说明
Jebao ht368 Development Kit documentation that is api Function Description (2016-01-28, Visual C++, 799KB, 下载2次)
[钩子与API截获] Hack44.cn_Zeus
Hack44_tools密码破解工具。非常OK
Hack tools values values values (2014-12-08, Visual C++, 7470KB, 下载3次)
[钩子与API截获] DNFWG_1
此驱动可以绕过DNF等网游对NtOpenProcess函数的InlineHook，从而可以获取进程句柄并且修改内存。声明：本作品仅为学习交流之用，若有人将其用于不法用途本人不负任何责任！
此驱动可以绕过DNF等网游对NtOpenProcess函数的InlineHook，从而可以获取进程句柄并且修改内存。声明：本作品仅为学习交流之用，若有人将其用于不法用途本人不负任何责任！ (2014-07-16, Visual C++, 10KB, 下载4次)
[钩子与API截获] networkchuantou
穿网维还原下载者 附C 源码,最新穿透下载。，破网吧
Wear mesh dimension restore those who download the attached C source code, download the latest penetration. , Breaking cafes (2012-11-25, Visual C++, 32KB, 下载25次)
[钩子与API截获] J8QQ20120531
实现QQ显示IP补丁。HOOK 了QQ的内部函数。大家看看把。。如果下载不到。请到 www.debug.net.cn下载
QQ display IP patch. HOOK QQ internal function. Take a look at the. . If the download is less than. Go to the www.debug.net.cn Download (2012-09-12, Visual C++, 119KB, 下载13次)
[钩子与API截获] QQ
QQ自动发信息，可以对骚扰你的人，给与还击，但仅供娱乐，切勿乱搞~~~~~
QQ automatic information can harass you, give to fight back, but only for entertainment, not to fool around ~ ~ ~ ~ ~ (2012-06-12, Visual C++, 1713KB, 下载12次)
[钩子与API截获] APIH00k
API钩子系统一般框架
通常，我们把拦截API的调用的这个过程称为是安装一个API钩子（API Hook）。一个API钩子基本是由两个模块组成：一个是钩子服务器（Hook Server）模块，一般为EXE的形式；一个是钩子驱动器（Hook Driver）模块，一般为DLL的形式。
钩子服务器主要负责向目标进程注入钩子驱动器，使得钩子驱动器运行在目标进程的地址空间中，这是关键的第一步，而钩子驱动器则负责实际的API拦截处理工作，以便在我们所关心的API函数调用的之前或之后能做一些我们所希望的工作。一个比较常见的API钩子的例子就是一些实时翻译软件（像金山词霸）中必备的的功能：屏幕抓词。它主要是对一些Win32 API中的GDI函数进行了拦截，获取它们的输入参数中的字符串，然后在自己的窗口中显示出来。
针对上述关于API钩子的两个部分，有以下两点需要我们重点考虑的： 选用何种DLL注入技术，以及采用何种API拦截机制。
本篇文章来源于 黑基网-中国最大的网络安全站点 原文链接：file:///C:/Documents 20and 20Settings/jingtianzi/桌面/最新资料/黑客编程：hook系统函数-学院-黑基网.mht
General framework for API hook system
Usually, we called this process intercept API calls is to install an API hook (API Hook,). An API hooks basically consists of two modules: one is the hook server (Hook, Server) module, generally in the form of EXE a hook drive (Hook Driver) module, generally in the form of a DLL.
Hook server is mainly responsible to the target process inject hook driver device, hook-driven devices running on the target process address space, a critical first step, while the hook-driven device is responsible for the actual API to intercept processing so that in we are concerned with API functions before or after the call to do something we want. Example of a common API hook is some real-time translation software (such as necessary.) Function: screen grab word. It is mainly to intercept some of the Win32 API GDI functions to obtain the string in the input parameters, and then displayed in its own window.
For the two parts of the API hook, the following two ke (2012-05-19, Visual C++, 542KB, 下载31次)
[钩子与API截获] GetPubIPs
本程序可以自动获取公网IP然后上传到指定网络地址空间上，而且支持和本机IP变动同步更新IP数据上传到地址空间，开机自动运行，全局快捷键。
本程序是适应中国动态IP而制作，假如有人想在自己机器上架设服务器，但IP是动态的 也就是IP会经常变动，但本程序可以实现IP动态绑定，从而给用户感觉是静态IP的感觉。
本程序在运行中会自己生成一个网页（包含本机IP），上传到指定的网络地址空间，当用户在网络上浏览该网页 该网页会自动转向到本机IP，这一切的一切都是程序自动完成。用户只需要进行简单的网络地址空间设定。
还有一点就是 必须有自己的网络地址空间。:)
本程序运用到 SETTIMER HOOK REG 等相关知识。比如 SetWindowsHookEx RegOpenKey RegQueryValueEx Process32First SHGetFileInfo CreateProcess 等函数。
The program can automatically obtain the public network and then uploaded to the specified network IP address space, but also support and synchronized changes in the local IP data uploaded to the IP address space, to start automatically, the global shortcut keys.
This procedure is to adapt to the dynamic IP that is made in China, if someone wants to set up servers on their machine, but the IP is dynamic, that is, IP will change frequently, but the program can be IP dynamic binding, giving the impression that the static IP of the user feeling.
The program is running on their own to generate a page (containing the local IP), uploaded to the specified network address space on the network when users visit the page that page will automatically turn to the local IP, that everything is automatically completed. Users need only a simple set of network address space.
Another point that must have its own network address space. :)
This procedure applied to the SETTIMER HOOK REG and (2011-03-17, Visual C++, 16KB, 下载8次)
[钩子与API截获] HookToolsrc
前两天有个朋友想让我帮做个ApiHook的东西，公司的网较慢，只能搜国内网站，结果搜了n个没有完整原代码，极度郁闷，现转一个codeproject的原代码，以后也方便自己下载使用。
说明一下，这个代码在CodeProject有下，代码我大致翻了一下，只挂引入表的函数，注入有SetWindowHookEx和CreateRemoteThread两种方式，进程枚举也区分了不同系统下使用的psai和toolhelp，另外为了获得Process的创建消息，做了一个驱动来注册回调函数，总的来说，在注入部分做得相当棒，如果想挂各种函
数，可以结合detour使用。
A couple of days ago a friend wanted me to help be a ApiHook things, the company' s Net slow, can only be found internally website, the results of the n-found no complete source code, an extremely depressing, it is a codeproject to the original code, after Convenience also download their own use. Explain that this code has CodeProject, the code I am generally turned a little, only linked to the introduction of the function table into SetWindowHookEx and CreateRemoteThread have two ways, the process of enumeration to distinguish between the different systems are used psai and toolhelp, the other in order to Process to create access to the message, make a drive to register a callback function, in general, has done quite a part in the injection rod, if want to hang a variety of functions, can be combined to use detour. (2009-03-22, Visual C++, 67KB, 下载36次)
[钩子与API截获] pc
Wincap 以太网抓包源代码 在 vc6.0下直接运行
Ethernet Wincap capture the source code to run in direct vc6.0 (2009-02-15, Visual C++, 820KB, 下载197次)
[钩子与API截获] getpubips
本程序可以自动获取公网IP然后上传到指定网络地址空间上，而且支持和本机IP变动同步更新IP数据上传到地址空间，开机自动运行，全局快捷键。
本程序是适应中国动态IP而制作，假如有人想在自己机器上架设服务器，但IP是动态的 也就是IP会经常变动，但本程序可以实现IP动态绑定，从而给用户感觉是静态IP的感觉。
本程序在运行中会自己生成一个网页（包含本机IP），上传到指定的网络地址空间，当用户在网络上浏览该网页 该网页会自动转向到本机IP，这一切的一切都是程序自动完成。用户只需要进行简单的网络地址空间设定。
还有一点就是 必须有自己的网络地址空间。:)
本程序运用到 SETTIMER HOOK REG 等相关知识。比如 SetWindowsHookEx RegOpenKey RegQueryValueEx Process32First SHGetFileInfo CreateProcess 等函数。
err (2007-11-27, Visual C++, 18KB, 下载112次)
[钩子与API截获] vc++hookdll
中文键盘钩子．
欢迎下载！
Chinese keyboard hook. welcome to download! (2007-02-15, Visual C++, 1548KB, 下载104次)
[钩子与API截获] keyboardswitch
很简单的一个全局钩子，屏蔽键盘所有按键，主要用在，嘿嘿，把键盘当垫板的人，比如在网吧抄东西。双击便运行，关闭即退出。
送给菜鸟。
very simple hook a whole, shielding all the keyboard keys, mainly in a little, and the keyboard when the plate. For example, in the cafes copied things. Double-click operation will close withdraw. As they gave. (2006-08-30, Visual C++, 59KB, 下载143次)
[钩子与API截获] antihook_src
代码使用Visual C++ 6.0为开发工具，为了使程序小巧灵活，本人使用了WTL而不是MFC实现软件的界面，所以编译源代码需要安装WTL库。WTL库是微软发布的基于ATL构建的工具库，随源代码一起发布，可以从微软网站下载，也可以从http://www,winmsg.com/cn/orbit.htm下载。本程序使用WTL 7.1，应该也可用WTL 7.5。编译WTL程序需要安装微软的Platform SDK，最好是2002年以后的版本，如果使用Visual Studio 2002或以后的版本可不用安装Platform SDK，因为它们已经包含了Platform SDK。
在AntiHook workspace下公有四个project，AntiHook是钩子检测程序，它编译生成AntiHook.exe，运行AntiHook.exe需要和AntiHook.ini在同一个目录下，AntiHook.ini是配置文件，可以在AntiHook目录下找到。sysHook是一个全局钩子程序的例子，编译候生成sysHook.dll，用于AntiHook测试之用。HookHelper是GUI界面的sysHook.dll加载程序，编译生成HookHelper.exe，运行HookHelper.exe就可以在系统中安装sysHook.dll钩子。Helper是Console界面的sysHook.dll加载程序，编译生成Helper.exe，用于调试sysHook.dll钩子程序。
code using Visual C 6.0 for the development of tools, in order to enable small flexible procedures, I used WTL instead of the MFC software interface, the need to compile the source code for the installation of WTL. WTL repository is based on Microsoft ATL Construction of the library of tools, together with the source code release can be downloaded from Microsoft's Web site, from http://www. winmsg.com/cn/orbit.htm download. The procedures used WTL 7.1, and should also be used WTL 7.5. Compiler WTL procedures need to install Microsoft's Platform SDK, preferably after the 2002 version, If using Visual Studio 2002 or later versions can be no installation Platform S DK, as they already covered by the Platform SDK. AntiHook workspace in the public domain under four project, AntiHook (2006-07-19, Visual C++, 71KB, 下载101次)
[钩子与API截获] UPnPNAT
一个不用windows api实现的 UPNP NAT 工具类。用于在内网机器上远程配置网关上的NAT，需要网关支持uPnP协议（如xp操作系统就支持）
a no windows api achieved UPnP NAT tools category. Including net for the machines remotely configure the NAT Gateway, the Gateway needs support Accessing agreements (for example, xp operating system support) (2006-04-09, Visual C++, 6KB, 下载328次)