HOOK API时代码注入方法和函数重定向技术研究

HOOK API是一种高级编程技术,在介绍Windows HOOK技术的基础上,阐述了HOOK API技术的概念,分析了HOOK API技术的实现原理,给出了三种实现HOOK API技术时的代码注入方法,即使用钩子注入DLL、使用注册表注入DLL及使用远程线程注入DLL.探讨两种实现HOOK API技术时的函数重定向技术,即利用PE文件中的导入表实现函数的重定向及通过嵌入汇编代码实现函数的重定向.

STUDY ON CODE EMBEDDING METHOD AND FUNCTION REDIRECTION TEC HNIQUE WHEN HOOKING API

HOOK API is a kind of advanced programming technique.On the basis of introducing Windows HOOK technique,in this paper it expounds the concept of HOOK API technique,analyses its realization principle,and puts forward three kinds of DLL code embedding methods when realizing HOOK API:(1)by using hooks;(2)by using registration table;(3)by using remote thread.It also discusses two kinds of function redirection techniques when realizing HOOK API:(1)by using PE file importing table;(2)by embedding assemble languag...