Hooking drivers

c++ / delphi package - dll injection and api hooking
Post Reply
denisb
Posts: 33
Joined: Tue Dec 07, 2004 3:48 pm

Hooking drivers

Post by denisb »

OK, this question keeps me awake at nights so I'll spill it now:
Can madCodeHook intercept a device driver IOCTL call? Or, let me put it mor bluntly, can I hook functions inside a .sys file?
My point is to hook NDIS.
madshi
Site Admin
Posts: 10764
Joined: Sun Mar 21, 2004 5:25 pm

Post by madshi »

No, madCodeHook only works at Ring3 (application level). If you want to hook driver land, you might want to check out EliCZ' driver hooking package.
denisb
Posts: 33
Joined: Tue Dec 07, 2004 3:48 pm

Post by denisb »

kewl...i'll have a look.
10x madsh
Post Reply