AMF-Format

键盘记录源码，更加底层的键盘记录程序。通过Hook API来截获键盘记录。(The keyboard, the bottom of the source record more keylogger. Through the Hook the API to intercept the keyboard records.)

可以实现内核钩子的检测，分为应用层和驱动层，带源码(Can detect the kernel hooks, into the application layer and the driver layer, with source code)

win32 Hook api 钩子与API截获 (win32 Hook api)

在“控制面板”打开“辅助功能选项”，在“鼠标”标签选上“使用鼠标7键”。这样就可以用键盘来控制鼠标的光标，模拟鼠标的鼠标键都指键盘右侧的小键盘（数字键盘），使用时要使 NumLock 键处于有效状态。以下就是鼠标键： (In the " Control Panel" Open " Accessibility Options" in the " Mouse" tab elected " seven keys using the mouse." So you can use the keyboard to control the mouse cursor to simulate mouse keyboard mouse buttons are referring to the right of the keypad (numeric keypad), when used to make the NumLock key is active. The following is the mouse button:)

APIHook程序范例，截取部分API函数。(APIHook program example, intercept some API functions.)

另一种思路注入目标进程的方法 可作为拓宽思维的例子(zhuru dll)

一个简单的 钩子小程序 屏蔽了 鼠标键盘，(A simple hook applet shielding mouse, keyboard,)

消息钩子源码（SetWindowsHookEx）-拦截鼠标和键盘消息的示例程序(News source hook (SetWindowsHookEx)- intercept the mouse and keyboard messages sample procedures)

说明：  上个程序的DLL 上个程序的D(In the process the last DLL procedures D)

PasswordSpy is a program to reveal passwords in other programs. It uses Windows Hooks to inject its code into other processes in order to reveal the password. It works by taking advantage of a security hole in Windows.