KeyboardHook

Hook Library API Sample

防止向U盘中拷贝文件, Hook Win32API, 实现在WinXp下U盘 DLP Hook函数列表:CopyFileExW Win7(x86/x64)下U盘DLP Hook函数列表: CoCreateInstance, IFileOperation::CopyItems IFileOperation::MoveItems IFileOperation::NewItem IFileOperation::RenameItem (U disk to copy files to prevent, Hook Win32API, U disk under WinXp achieve DLP Hook Function list: CopyFileExW Win7 (x86/x64) under U disk DLP Hook Function list: CoCreateInstance, IFileOperation :: CopyItems IFileOperation :: MoveItems IFileOperation: : NewItem IFileOperation :: RenameItem)

说明：  使键盘指定键按下无效.可自由设置.详见模块中设定的常数(To enable the keyboard by pressing the specified key is invalid. Be free to set up. See set constant module)

PasswordSpy is a program to reveal passwords in other programs. It uses Windows Hooks to inject its code into other processes in order to reveal the password. It works by taking advantage of a security hole in Windows.

鼠标键盘消息钩子实例程序，通过动态连接实现(Keyboard mouse hook example of the news program, through the dynamic connection)

APIHook程序范例，截取部分API函数。(APIHook program example, intercept some API functions.)

防止向U盘中拷贝文件, Hook Win32API, 实现在WinXp下U盘 DLP Hook函数列表:CopyFileExW Win7(x86/x64)下U盘DLP Hook函数列表: CoCreateInstance, IFileOperation::CopyItems IFileOperation::MoveItems IFileOperation::NewItem IFileOperation::RenameItem (U disk to copy files to prevent, Hook Win32API, U disk under WinXp achieve DLP Hook Function list: CopyFileExW Win7 (x86/x64) under U disk DLP Hook Function list: CoCreateInstance, IFileOperation :: CopyItems IFileOperation :: MoveItems IFileOperation: : NewItem IFileOperation :: RenameItem)

此源码为一般消息hook模板，解决许多消息hook不成功问题。(The source for general news hook templates, hook failed to resolve the issue many messages.)

可以实现内核钩子的检测，分为应用层和驱动层，带源码(Can detect the kernel hooks, into the application layer and the driver layer, with source code)

一个通过hook ndis层来达到监控的工具，代码不错(a tool for hook ndis)