AMF-Format

说明：  关于DLL解释得比较好的文章,天天和dll文件打交道,究竟有多少人清楚的知道它的作用和原理呢,本文深入浅出,能学习到钩子的原理!(DLL good explanation on the article, dealing with every day, and the dll file, how many people know exactly what its role and principles, this article easy to understand, to learn the principles of the hook!)

MouseTrace，用 VC++写的鼠标Hook钩子，获取X,Y坐标，并适时显示在窗体上，如上图示，在窗体上移动鼠标，坐标信息会被跟踪，移出窗体则无效。(MouseTrace, using VC++ to write the mouse Hook hook, get X, Y coordinates and the time display on the form, as shown, move the mouse over the form, coordinate information will be tracked, out of form would be invalid.)

You can hook the system and do what you want!

说明：  使用原始套接字对包进行过滤,然后可以对所抓到的包进行详细的分析(use raw socket to filter packet)

魔兽争霸3 dota 全图maphack源码，源码中的HOOK地址为1.24E版本，对于想自己开研究开发maphack的同学是不可多得的好资料。(Warcraft 3 dota maphack source, source the HOOK address is 1.24E version rare good students who want to open their own research and development maphack.)

Vb 开发方便使用的键盘、鼠标钩子 hook(Vb development, easy to use keyboard, mouse hook, hook)

this program is related api

进程隐藏与进程保护（SSDT Hook 实现） 文章目录： 1. 引子 – Hook 技术 2. SSDT 简介 3. 应用层调用 Win32 API 的完整执行流程 4. 详解 SSDT 5. SSDT Hook 原理(SSDT Hook)

先从键盘输入一个文本文件的文件名(约定：字符数≤127字节，可含路径)和一个字符串(约定：字符数≤20字节，其中不含空格、TAB等，后面称之为Str)，再在屏幕上显示该文件的内容。要求显示完内容后，在屏幕上输出文件的行数(行之间以’ ’为分隔、每行的长度不定但均≤200个字节)、字符串Str在文件中第1次出现的行号和最后一次出现的行号(查找时不区分大小写、不跨行查找，若未找到，则行号显示为-1)。 (Start with the keyboard input of a text file name (convention: the number of characters to ≤ 127 bytes, and can contain the path) and a string (convention: the number of characters ≤ 20 bytes, which contain spaces, TAB, followed by call Str), the contents of the file is displayed on the screen. Requests display content on the screen the number of rows of the output file (the line between ' n' separated, each line has a variable length but ≤ 200 bytes) string Str file a (find the line number and the last line number is not case-sensitive, cross-bank does not find, If you do not find the line number is displayed as-1).)

键盘记录的源码，写的很不错的。是一个开源的源码。很值得学习。(Keylogger source code, written in very good. Is an open source code. It is worth learning.)