基于对C++x64超级HOOK源码的魔改达到对send和recv的HOOK

你是我的小星星

#include "SuperHook.h"
#include <Windows.h>
using namespace std;
void _fastcall MySend(SOCKET s, char* buf, int length, int flags) {
        //参数都是直接可用的，在多线程下可能寄存器的值会被其他线程写入冲突，这里不建议读取寄存器的值
        Register l_reg = g_SuperHook_x64.ReadAllRegister(g_HookDataRecv.ReturnRegisterAddress);
        std::cout << "rax:" << l_reg.rax << std::endl;
        std::cout << "rbx:" << l_reg.rbx << std::endl;
        std::cout << "rdx:" << l_reg.rdx << std::endl;
        std::cout << "rcx:" << l_reg.rcx << std::endl;
        std::cout << "rsi:" << l_reg.rsi << std::endl;
        std::cout << "rdi:" << l_reg.rdi << std::endl;
        std::cout << "rsp:" << l_reg.rsp << std::endl;
        std::cout << "rbp:" << l_reg.rbp << std::endl;
        std::cout << "r8:" << l_reg.r8 << std::endl;
        std::cout << "r9:" << l_reg.r9 << std::endl;
        std::cout << "r10:" << l_reg.r10 << std::endl;
        std::cout << "r11:" << l_reg.r11 << std::endl;
        std::cout << "r12:" << l_reg.r12 << std::endl;
        std::cout << "r13:" << l_reg.r13 << std::endl;
        std::cout << "r14:" << l_reg.r14 << std::endl;
        std::cout << "r15:" << l_reg.r15 << std::endl;
}
void _fastcall MyRecv(SOCKET s, char* buf, int length, int flags) {
        //参数都是直接可用的，在多线程下可能寄存器的值会被其他线程写入冲突，这里不建议读取寄存器的值
        Register l_reg = g_SuperHook_x64.ReadAllRegister(g_HookDataRecv.ReturnRegisterAddress);
        std::cout << "rax:" << l_reg.rax << std::endl;
        std::cout << "rbx:" << l_reg.rbx << std::endl;
        std::cout << "rdx:" << l_reg.rdx << std::endl;
        std::cout << "rcx:" << l_reg.rcx << std::endl;
        std::cout << "rsi:" << l_reg.rsi << std::endl;
        std::cout << "rdi:" << l_reg.rdi << std::endl;
        std::cout << "rsp:" << l_reg.rsp << std::endl;
        std::cout << "rbp:" << l_reg.rbp << std::endl;
        std::cout << "r8:" << l_reg.r8 << std::endl;
        std::cout << "r9:" << l_reg.r9 << std::endl;
        std::cout << "r10:" << l_reg.r10 << std::endl;
        std::cout << "r11:" << l_reg.r11 << std::endl;
        std::cout << "r12:" << l_reg.r12 << std::endl;
        std::cout << "r13:" << l_reg.r13 << std::endl;
        std::cout << "r14:" << l_reg.r14 << std::endl;
        std::cout << "r15:" << l_reg.r15 << std::endl;
}

SuperHook_x64 g_SuperHook_x64;
HookData g_HookDataSend;
HookData g_HookDataRecv;

void main() {
        g_SuperHook_x64.HookSend(MySend, g_HookDataSend);
        g_SuperHook_x64.HookRecv(MyRecv, g_HookDataRecv);

        while (true) {
                if (getchar() == 0x61) {
                        break;
                }
        }
        g_SuperHook_x64.UnInstall();
}


SuperHook.zip (5.74 KB, 下载次数: 154)

2023-7-28 11:55 上传

点击文件名下载附件

zlh123

为什么我hook模拟器  模拟器直接崩溃了啊

zlh123

这个有使用案例吗  大牛

zhoujian114

6666666666666666666

小刻

6666666666666666666

夢夢夢

感谢老铁分享

情笙

这个会崩溃吗

精易企鹅

64位hooksend?

wdb928

学习一下

xtscfyc

学习一下