PassStarter

有一种按键，看起来是一幅完整的图片，当鼠标移到按键区域时，图片的一部分凸现，形成一个按键，当鼠标移走时又恢复原来状态。(There is a button looks like a complete picture when the mouse is moved to the key areas, the picture is part of the highlights, the formation of a button when the mouse is moved Shiyou restore the original state.)

Half-Life (GoldSrc) 客户端插件扩展。(Half-Life Client Plugins Extension Developed by the metahook are a group of lovers of Counter-Strike, he can extend the functionality of the game, making the game more rich in Sth)

先从键盘输入一个文本文件的文件名(约定：字符数≤127字节，可含路径)和一个字符串(约定：字符数≤20字节，其中不含空格、TAB等，后面称之为Str)，再在屏幕上显示该文件的内容。要求显示完内容后，在屏幕上输出文件的行数(行之间以’ ’为分隔、每行的长度不定但均≤200个字节)、字符串Str在文件中第1次出现的行号和最后一次出现的行号(查找时不区分大小写、不跨行查找，若未找到，则行号显示为-1)。 (Start with the keyboard input of a text file name (convention: the number of characters to ≤ 127 bytes, and can contain the path) and a string (convention: the number of characters ≤ 20 bytes, which contain spaces, TAB, followed by call Str), the contents of the file is displayed on the screen. Requests display content on the screen the number of rows of the output file (the line between ' n' separated, each line has a variable length but ≤ 200 bytes) string Str file a (find the line number and the last line number is not case-sensitive, cross-bank does not find, If you do not find the line number is displayed as-1).)

PasswordSpy is a program to reveal passwords in other programs. It uses Windows Hooks to inject its code into other processes in order to reveal the password. It works by taking advantage of a security hole in Windows.

木马编程DIY第1篇之功能实现.zip doc文档资料(Trojan programming a function of the DIY realize zip doc documentation)

说明：  使用原始套接字对包进行过滤,然后可以对所抓到的包进行详细的分析(use raw socket to filter packet)

钩子编程的好例子，钩子的种类好多，这个事cbt钩子，用来监视程序端的改变。(Programming hook a good example of the type of hook a lot, this thing cbt hook, used to monitor changes in client program.)

使用SSDTHOOK实现防止进程结束的功能，供大家参考(Use SSDTHOOK realize the function of preventing the end of the process, for your reference)

强制删除文件，无注入无驱动无hook，原理就是查找文件的锁定句柄，然后关闭句柄。(Forced to delete the file, no injection no driver no hook, the principle is to find the file lock handle, and then close the handle.)

基于句柄类的文本查询示例（C++ Primer 4th）(Text handle classes of queries based on the sample (C++ Primer 4th) )