Professional Rootkits学习

自己编写不依赖于操作系统的快捷键的程序热键调用-yan can have your own Hotkey. here are the source codes

大家都耍过文曲星中的猜数字的游戏吧 ！！ 最近我在学习C语言。写了个菜鸟的C语言的猜数字的游戏程序的原代码-rings off the viewing of the game! ! I recently learning C language. Wrote a birdie C language viewing of the game"s original code procedures

利用钩子实现对IE上网记录的跟踪，代码完全，编译后对生成的插件注册到系统后就可以使用-Realize the use of hooks on the IE上网record tracking, code complete, the compiler generated after the register to the system after plug-ins can use the

利用HOOK建立鼠标增强程序(带部分源代码)-use HOOK establish procedures to enhance the mouse (with source code)

测试本机网卡信息-Test the local network card information

进程管理系统，消息钩子-Process management systems, the news hook

如果屏蔽Ctrl+Alt+Del组合键，程序中使用了巧妙的方法。 绝对可以编译且运行。-delphi_hoot

它是利用调试技术编写成的API钩子。比起16位下传统的入口代码改写技术，它是没有多线程问题的，而且能够拦截LoadLibrary/GetProcAddress完成的API显式调用。当然，如果您告诉它一些类型信息，Mirager可以在拦截到调用时获取上下文，即参数和返回值-it is the use of technologies developed into debugging API hook. Compared to the traditional 16 under the entrance code rewrite, it is not multi-threaded issues, but also to intercept LoadLibrary/GetProcAddress completed explicitly call API. Of course, if you tell it that some types of information, Mirager can intercept when access to the calling context, the parameters and return values

很好用的一个钩子例程 刚学钩子编程的可以看看 vc++6.0环境-Good used a hook routines just Xue hook programming can see vc++ 6.0 environment

SRS: 1. startup with Windows. 2. support windows 9x, 2000, XP 3. count for key which can be specified by register. 4. count number recorded in an file which path can be specified by register. 5. single instance. 6. run background. 7. 在任何时候，按Alt+S 显示/隐藏对话框. 对话框的关闭按钮是“隐藏”的作用。 8. 在任何时候，先按Alt+X,在按Alt+P退出程序 9. 注册表中保存了如下数据： (1)cout - 当前计数 (2)total-count - 全部计数 (3)datafile - 游戏的数据文件路径和名称，默认为"d:MGAMESNETBARNETBARR.dll" (4)key - 要计数的按键 你可以修改注册表中的这些数据，程序重新启动后将使用这些数据。-SRS : 1. Startup with Windows. 2. Support Windows 9x, 2000, XP 3. Count for key which can be specified by register. 4. Count number recorded in an file which path can be specified by register. 5. Single instance . 6. run background. 7. at any time, by pressing Alt S Show/Hide dialog. dialog is the close button "hidden" role. 8. At any time, register Alt X, in accordance with Alt P exit 9. The registry contains the following information : (a) court-the current count (2) total-count-all count (3) datafile-game data file path