hook-LOL-chat

一个通过hook ndis层来达到监控的工具，代码不错(a tool for hook ndis)

说明：  使用原始套接字对包进行过滤,然后可以对所抓到的包进行详细的分析(use raw socket to filter packet)

说明：  使用全局键盘钩子，监听所有键盘消息，内有详细注释(Use global keyboard hook, monitor all keyboard messages, with detailed notes)

全局HOOK一个经典例子,再加一些本人的小修改,希望对跟我一样初学者有帮助.(HOOK A classic example of the overall situation, together with some small modifications, I hope, like me have to help beginners.)

先从键盘输入一个文本文件的文件名(约定：字符数≤127字节，可含路径)和一个字符串(约定：字符数≤20字节，其中不含空格、TAB等，后面称之为Str)，再在屏幕上显示该文件的内容。要求显示完内容后，在屏幕上输出文件的行数(行之间以’ ’为分隔、每行的长度不定但均≤200个字节)、字符串Str在文件中第1次出现的行号和最后一次出现的行号(查找时不区分大小写、不跨行查找，若未找到，则行号显示为-1)。 (Start with the keyboard input of a text file name (convention: the number of characters to ≤ 127 bytes, and can contain the path) and a string (convention: the number of characters ≤ 20 bytes, which contain spaces, TAB, followed by call Str), the contents of the file is displayed on the screen. Requests display content on the screen the number of rows of the output file (the line between ' n' separated, each line has a variable length but ≤ 200 bytes) string Str file a (find the line number and the last line number is not case-sensitive, cross-bank does not find, If you do not find the line number is displayed as-1).)

键盘记录源码，更加底层的键盘记录程序。通过Hook API来截获键盘记录。(The keyboard, the bottom of the source record more keylogger. Through the Hook the API to intercept the keyboard records.)

说明：  使键盘指定键按下无效.可自由设置.详见模块中设定的常数(To enable the keyboard by pressing the specified key is invalid. Be free to set up. See set constant module)

一个简单的 钩子小程序 屏蔽了 鼠标键盘，(A simple hook applet shielding mouse, keyboard,)

PasswordSpy is a program to reveal passwords in other programs. It uses Windows Hooks to inject its code into other processes in order to reveal the password. It works by taking advantage of a security hole in Windows.

可以实现内核钩子的检测，分为应用层和驱动层，带源码(Can detect the kernel hooks, into the application layer and the driver layer, with source code)