ChenChen-hrbust / API_watching
监视Windows系统下程序执行过程中的API调用,采用Ring3 Hook方式进行监控,记录API调用,分析软件行为。
☆31Updated 12 years ago
Alternatives and similar repositories for API_watching
Users that are interested in API_watching are comparing it to the libraries listed below
Sorting:
- 我的开源:讲解anything☆21Updated 4 years ago
- 逆的或者收集的别人家的代码☆27Updated 3 months ago
- 安全卫士项目☆32Updated 7 years ago
- PE文件解析和加壳工具☆18Updated 2 years ago
- 卓然主动防御源码(可执行文件+完整源码+完整作品报告)☆15Updated 6 years ago
- 主动防御-网络过滤器(firewall)☆5Updated last year
- ☆93Updated 3 years ago
- 粗暴地枚举管理内核的WFP对象。 Manage kernel WFPs in a brutal way.☆27Updated 7 years ago
- 稳定多线程中的inline hook☆16Updated 5 years ago
- x64HOOK库☆18Updated 5 years ago
- base on winHttp to develep download☆12Updated 7 years ago
- HTTP/HTTPS/DNS inspector (windows driver)☆26Updated 6 years ago
- shellcode注入测试工具☆50Updated 5 years ago
- 进程行为分析工具☆14Updated 7 years ago
- 基于UC的启发式杀毒引擎[还没做完]☆34Updated 4 years ago
- 绕过卡巴斯基主动防御,加载驱动,unhook所有ssdt hook及shadow ssdt hook☆37Updated 9 years ago
- 进程保护、进程过滤的小工程、主要亮点是在内核中对操作系统中的用户进行管理☆16Updated 10 years ago
- 此目录收集整理反调试方法☆74Updated 3 years ago
- 基于MiniFilter和Sfilter的加解密☆22Updated 5 years ago
- 驱动层拦截web访问源码☆29Updated 7 years ago
- ida提取特征码脚本☆55Updated 5 years ago
- WIN64驱动编程基础教程-源码 作者:胡文亮☆87Updated 7 years ago
- windows 系统API C++封装库,包含进程间通讯,互斥,内存队列等通用功能☆54Updated 8 years ago
- ☆36Updated 8 years ago
- myLittleBear☆57Updated last month
- 安全卫士r3工具集☆37Updated 5 years ago
- 反射式注入☆28Updated 6 years ago
- ☆30Updated 8 years ago
- ☆40Updated 5 years ago
- 管道监视器,类似于spyxx之类的东西,一般用于监视目标进程的系统调用.关键词:detours+piep☆23Updated 11 years ago