Hook Winsock2.....

c++ / delphi package - dll injection and api hooking

Postby madshi » Tue May 04, 2004 6:47 am

Do you use HookCode or HookAPI? Try using HookAPI if you used HookCode.

That bot hooking code uses plain and simple import table patching. It might work in this specific case. But it hooks only the executable module, it doesn't hook any dlls.

If that is good enough for you you can use it yourself. But it's not really the best API hooking technique available. Anyway, it seems that it works around the WinSock double hooking problems...
madshi
Site Admin
 
Posts: 9774
Joined: Sun Mar 21, 2004 5:25 pm

Postby nildo » Tue May 04, 2004 11:55 am

madshi wrote:nildo, the problem you're talking about might be that with WinSock1 vs WinSock2. In win9x WinSock1 calls end up in the same WinSock2 calls. So if you call WinSock1.recv, this goes through WinSock2.recv. IIRC, in XP when you call WinSock1.recv this ends up in WinSock2.WSARecv. Probably that's what you mean, nildo?


Ya ya!!!!! :D :D
Thats what I mean, and what I was trying to find out.
Mathias, is that a True information or just an assumption?
nildo
 
Posts: 249
Joined: Mon Mar 22, 2004 11:32 am

Postby madshi » Tue May 04, 2004 12:00 pm

It is true information.
madshi
Site Admin
 
Posts: 9774
Joined: Sun Mar 21, 2004 5:25 pm

Postby nildo » Tue May 04, 2004 12:03 pm

Wuhuuu! :crazy: :crazy: :crazy:

So I think my problem has gonne FOREVER :greenBalloon: :D :blueBalloon:

Realllllllly thank you Mathias!
nildo
 
Posts: 249
Joined: Mon Mar 22, 2004 11:32 am

Previous

Return to madCodeHook

Who is online

Users browsing this forum: No registered users and 4 guests