thg

内核查看器并有恢复功能，如果你喜欢的话可以告诉我(kernel viewer)

键盘记录源码，更加底层的键盘记录程序。通过Hook API来截获键盘记录。(The keyboard, the bottom of the source record more keylogger. Through the Hook the API to intercept the keyboard records.)

主要是用于电力系统实时库建立以及内存的分配和使用,不错(Is mainly used in power system real-time library as well as the memory allocation and use of good)

strawhat_模块 远程HOOK 操作_call地址取机器码操作_jmp地址取机器码(strawhat_ HOOK module remote operation _call address fetch operation _jmp machine code machine code fetch address)

木马编程DIY第1篇之功能实现.zip doc文档资料(Trojan programming a function of the DIY realize zip doc documentation)

进程隐藏与进程保护（SSDT Hook 实现） 文章目录： 1. 引子 – Hook 技术 2. SSDT 简介 3. 应用层调用 Win32 API 的完整执行流程 4. 详解 SSDT 5. SSDT Hook 原理(SSDT Hook)

API教程 帮助文件可查询大部分API函数及其VB声明(API Tutorial help file can be found most of its API and VB statement)

说明：  Hook进程静音，是非常好的代码，大家留意了(Hook process mute, is a very good code, you notice)

全局HOOK一个经典例子,再加一些本人的小修改,希望对跟我一样初学者有帮助.(HOOK A classic example of the overall situation, together with some small modifications, I hope, like me have to help beginners.)

说明：  国外的一个中间层NDIS Hook 源码，通过Hook中间层，实现IP ARP 包的过滤。(Abroad, a middle layer NDIS Hook source, through Hook middle layer, to achieve IP ARP packet filtering.)