Hook Winsock2.....

c++ / delphi package - dll injection and api hooking
madshi
Site Admin
Posts: 10753
Joined: Sun Mar 21, 2004 5:25 pm

Post by madshi »

Do you use HookCode or HookAPI? Try using HookAPI if you used HookCode.

That bot hooking code uses plain and simple import table patching. It might work in this specific case. But it hooks only the executable module, it doesn't hook any dlls.

If that is good enough for you you can use it yourself. But it's not really the best API hooking technique available. Anyway, it seems that it works around the WinSock double hooking problems...
nildo
Posts: 249
Joined: Mon Mar 22, 2004 11:32 am
Contact:

Post by nildo »

madshi wrote:nildo, the problem you're talking about might be that with WinSock1 vs WinSock2. In win9x WinSock1 calls end up in the same WinSock2 calls. So if you call WinSock1.recv, this goes through WinSock2.recv. IIRC, in XP when you call WinSock1.recv this ends up in WinSock2.WSARecv. Probably that's what you mean, nildo?
Ya ya!!!!! :D :D
Thats what I mean, and what I was trying to find out.
Mathias, is that a True information or just an assumption?
madshi
Site Admin
Posts: 10753
Joined: Sun Mar 21, 2004 5:25 pm

Post by madshi »

It is true information.
nildo
Posts: 249
Joined: Mon Mar 22, 2004 11:32 am
Contact:

Post by nildo »

Wuhuuu! :crazy: :crazy: :crazy:

So I think my problem has gonne FOREVER :greenBalloon: :D :blueBalloon:

Realllllllly thank you Mathias!
Post Reply