基于对C++x64超级HOOK源码的魔改达到对send和recv的HOOK

你是我的小星星

#include "SuperHook.h"
#include <Windows.h>
using namespace std;
void _fastcall MySend(SOCKET s, char* buf, int length, int flags) {
        //参数都是直接可用的，在多线程下可能寄存器的值会被其他线程写入冲突，这里不建议读取寄存器的值
        Register l_reg = g_SuperHook_x64.ReadAllRegister(g_HookDataRecv.ReturnRegisterAddress);
        std::cout << "rax:" << l_reg.rax << std::endl;
        std::cout << "rbx:" << l_reg.rbx << std::endl;
        std::cout << "rdx:" << l_reg.rdx << std::endl;
        std::cout << "rcx:" << l_reg.rcx << std::endl;
        std::cout << "rsi:" << l_reg.rsi << std::endl;
        std::cout << "rdi:" << l_reg.rdi << std::endl;
        std::cout << "rsp:" << l_reg.rsp << std::endl;
        std::cout << "rbp:" << l_reg.rbp << std::endl;
        std::cout << "r8:" << l_reg.r8 << std::endl;
        std::cout << "r9:" << l_reg.r9 << std::endl;
        std::cout << "r10:" << l_reg.r10 << std::endl;
        std::cout << "r11:" << l_reg.r11 << std::endl;
        std::cout << "r12:" << l_reg.r12 << std::endl;
        std::cout << "r13:" << l_reg.r13 << std::endl;
        std::cout << "r14:" << l_reg.r14 << std::endl;
        std::cout << "r15:" << l_reg.r15 << std::endl;
}
void _fastcall MyRecv(SOCKET s, char* buf, int length, int flags) {
        //参数都是直接可用的，在多线程下可能寄存器的值会被其他线程写入冲突，这里不建议读取寄存器的值
        Register l_reg = g_SuperHook_x64.ReadAllRegister(g_HookDataRecv.ReturnRegisterAddress);
        std::cout << "rax:" << l_reg.rax << std::endl;
        std::cout << "rbx:" << l_reg.rbx << std::endl;
        std::cout << "rdx:" << l_reg.rdx << std::endl;
        std::cout << "rcx:" << l_reg.rcx << std::endl;
        std::cout << "rsi:" << l_reg.rsi << std::endl;
        std::cout << "rdi:" << l_reg.rdi << std::endl;
        std::cout << "rsp:" << l_reg.rsp << std::endl;
        std::cout << "rbp:" << l_reg.rbp << std::endl;
        std::cout << "r8:" << l_reg.r8 << std::endl;
        std::cout << "r9:" << l_reg.r9 << std::endl;
        std::cout << "r10:" << l_reg.r10 << std::endl;
        std::cout << "r11:" << l_reg.r11 << std::endl;
        std::cout << "r12:" << l_reg.r12 << std::endl;
        std::cout << "r13:" << l_reg.r13 << std::endl;
        std::cout << "r14:" << l_reg.r14 << std::endl;
        std::cout << "r15:" << l_reg.r15 << std::endl;
}

SuperHook_x64 g_SuperHook_x64;
HookData g_HookDataSend;
HookData g_HookDataRecv;

void main() {
        g_SuperHook_x64.HookSend(MySend, g_HookDataSend);
        g_SuperHook_x64.HookRecv(MyRecv, g_HookDataRecv);

        while (true) {
                if (getchar() == 0x61) {
                        break;
                }
        }
        g_SuperHook_x64.UnInstall();
}


SuperHook.zip (5.74 KB, 下载次数: 111)

2023-7-28 11:55 上传

点击文件名下载附件

xtscfyc

学习一下

lukunyu

来学习一下看看

温暖的舌骨

随心随性11

谢谢分享

wanlig34

看看是什么样的 东西

liaoxiaohu

666666666666666666

96692

超级HOOK源码的魔改达到对

cdsdsghh

        g_SuperHook_x64.UnInstall();

jxq205325485

gggggg{:4_267: