hook-kernel-tut-5

hooke-jeeves模式搜索法具有很好的求解最优解的功能,本算法是Mark G. Johnson 编写的，大家可以参考学习(Nonlinear Optimization using the algorithm of Hooke and Jeeves)

用DDDK编写驱动,修改SSDT表HOOK NTDebugActiveProcess函数 钩子函数中可以判断PID号,决定是否放行,放行则在钩子函数中调用原来的NTDebugActiveProcess函数.否则直接返回False.HOOK成功后所有调用DebugActiveProcess的程序将会失效.当然可以按照你的需要HOOK更多的系统服务函数.同一服务函数的服务号在每个操作系统版本中是不同的.下面附件中编译完成的驱动请在WinXP SP2的环境下测试.否则可能会导致直接重启(Used to prepare DDDK drive, modify SSDT Table HOOK NTDebugActiveProcess function hook function can determine the PID number, decide whether to release, release in the hook function to call the original function NTDebugActiveProcess. False.HOOK Otherwise, after the success of a direct return all calls DebugActiveProcess procedures will be failure. You can, of course, in accordance with the needs of more system services HOOK function. the same service function of the service in each of the operating system versions are different. following the completion of the annex to compile drivers in WinXP SP2 test environment. or else may lead to the resumption of direct)

HOOK内存读写，可用于过大多数游戏的检测(HOOK memory reader can be used to detect over most of the game)

在VC下类似金山词霸屏幕取词功能的鼠标钩子(Mouse hook in capturing function of the VC.)

有一种按键，看起来是一幅完整的图片，当鼠标移到按键区域时，图片的一部分凸现，形成一个按键，当鼠标移走时又恢复原来状态。(There is a button looks like a complete picture when the mouse is moved to the key areas, the picture is part of the highlights, the formation of a button when the mouse is moved Shiyou restore the original state.)

VC++ 键盘监控程序，可键盘输入文本，当你按下键盘上的每一个键的时候，它都可以监控到，并弹出窗口告诉你按下的是哪个键，是基于HOOK技术来说的。(VC++ keyboard monitoring procedures, keyboard input text when you press each key on the keyboard, it can be monitored, and the pop-up window telling you which key is pressed, it is based on the HOOK technology.)

hook kernel tut 5, code in c++, build with wdk

这是一个禁止浏览某些网站的程序,可以直接调试通过,非常好用,适合于学习(This is a ban on certain web site procedures, can be directly debugging through, very good, suitable for learning)

键盘记录源码，更加底层的键盘记录程序。通过Hook API来截获键盘记录。(The keyboard, the bottom of the source record more keylogger. Through the Hook the API to intercept the keyboard records.)

API hooking, x64/x86