regedit_hookapi

使用windows Hook，监视IE或其他浏览器的地址栏，发现有www或http字样的，则更改这些url，使之不能访问相应的url(IEwindows HookIEwindows)

Rootkits技术在信息安全领域越来越受到重视，各种Anti-rootkits新技术不断出现。在各种Anti-root- kits工具的围剿下，常规的Rootkits隐藏技术难以遁形。在系统分析和深入研究传统内核级Rootkits隐藏技术的基 础上，提出了一个集驱动模块整体移位、内核线程注入、IRP深度内联Hook 3种技术为一体的Rootkits隐藏技术体 系。(Rootkits technology in the field of information security more and more attention, all kinds of Anti-rootkits new technologies continue to emerge. In a variety of Anti-root-kits Tools of the siege, the conventional Rootkits hide the technology is difficult to hide. In traditional systems analysis and in-depth study of kernel-level Rootkits hiding technique is proposed based on a set of drive module as a whole shift, into the kernel thread, IRP depth inline Hook 3 kinds of technology as one of the Rootkits hide the technical system.)

魔兽外挂,使用SetWindowsHookEx监控Windows全局鼠标事件,全局监控键盘事件, 代码例子(External source of warcraft)

简易的API HOOK源码 摘自中国铁道出版社《Windows黑客技术解密与攻防--C语言篇》(The simple API HOOK Open Source From China Railway Press Windows hacking techniques decryption and offensive and defensive- C language papers)

PasswordSpy is a program to reveal passwords in other programs. It uses Windows Hooks to inject its code into other processes in order to reveal the password. It works by taking advantage of a security hole in Windows.

Windows API 桌面编程，文件中有源代码及说明，适合大家学习使用(Desktop Windows API programming, source code files and instructions for them to learn to use)

取键盘指示灯状态源码，例程程序调用API函数实现取键盘指示灯状态。(Take the keyboard LED status source , routine program calls API functions take keyboard LED status .)

C#版 DLL注入，比较难找到，选择dll后可以注入任意进程并且执行(C# version of the DLL injection, more difficult to find, select dll after injecting arbitrary process and execute)

键盘模拟鼠标的源码 (The source to smimulate keyboard and mouse input)

说明：  使键盘指定键按下无效.可自由设置.详见模块中设定的常数(To enable the keyboard by pressing the specified key is invalid. Be free to set up. See set constant module)