paperlined.org
dev
>
oss
>
BlinkBlocker
>
search
>
docs
document updated 15 years ago, on Nov 13, 2009
CodeProject
Three Ways to Inject Your Code into Another Process
[Jul 2003]
API Hooking with MS Detours
[Oct 2008]
Intercept and Rewrite DNS Requests Using Regular Expressions
[Nov 2006]
EasyHook - The reinvention of Windows API hooking
[Aug 2008]
Circumventing Windows Group Policies using Detours
[Apr 2004]
Trap CtrlAltDel; Hide Application in Task List on Win2000/XP
[Apr 2003]
Symbolic Links for Applications using Detours
[May 2007]
Low Fragmentation Heap and Function Interception
[Jan 2004]
How to get rid of Microsoft Detours’ detoured.dll
more code examples
(Google Code Search)
simpler code examples
more code examples
(Google)
system-wide hooks
AppInit_DLLs
basic documentation
(it's comma or space delimited)
In Vista, it's essentially been replaced by LoadAppInit_DLLs, and requires admin-level access to modify
GPCul8r - Group Policy Bypassing Tool
fuck, that's easy
Hot code patching
SetWindowsHookEx() + "innocuous" message
"innocuous" = WH_CBT
(search for "The SetWindowsHookEx method")
subclassing
hide task manager
extend task manager
cross-process subclassing / Notepad
more
A More Complete DLL Injection Solution Using CreateRemoteThread
[Aug 2007]
Powerful x86/x64 Mini Hook-Engine
[Nov 2007]
API Hooking (LoadLibrary)
[Jun 2009]
HookAPI source code
[Jan 2005]
DLL Injection and function interception tutorial
[Oct 2003]
API hooking revealed
[Dec 2002]
Remote Code/Process Injection and Relocation
[Sep 2009]
Extending Task Manager with DLL Injection
[May 2005]
RemoteLib - DLL Injection for Win9x & NT Platforms
[Jan 2005]
APIHijack - A Library for easy DLL function hooking.
[Sep 2000] (all the documentation is in Chinese)
other places
API Hooking Revealed