Hooking

hooking

Great Reads

PolyHook 2: C++17 x86/x64 Hooking Library

by stevemk14ebr

PolyHook v2 - the C++17 x86/x64 library supporting multiple methods of hooking

How to Hook 64-Bit Code from WOW64 32-Bit Mode

by Apriorit Inc

Being able to switch between 32-bit and 64-bit modes in Windows is a useful skill. Learn about the heaven’s gate technique and the tools and methods needed for hooking 64-bit processes from the 32-bit WOW64 mode.

x64 API Hooker + Disassembler

by Member 13737597

This article shows you how to implement trampolines on x64, introduces the idea of sync and async hooks, and dynamically added runtime filters and loggers.

Hooking Linux Kernel Functions, Part 1: Looking for the Perfect Solution

by Apriorit Inc

Two theoretical ways to protect a Linux kernel module from hooks.

Latest Articles

How to Hook 64-Bit Code from WOW64 32-Bit Mode

by Apriorit Inc

Hooking Linux Kernel Functions, Part 2: How to Hook Functions with Ftrace

by Apriorit Inc, Sergey Stepanchuk

Learn how you can use ftrace to hook critical function calls in the Linux kernel

Hooking Linux Kernel Functions, Part 3: What Are the Main Pros and Cons of Ftrace?

by Apriorit Inc

In this article, we focus on the main ftrace pros and cons and describe some unexpected surprises we’ve faced when hooking Linux kernel functions with this utility.

Hooking Linux Kernel Functions, Part 1: Looking for the Perfect Solution

by Apriorit Inc

Two theoretical ways to protect a Linux kernel module from hooks.

All Articles

top

Hooking

PolyHook 2: C++17 x86/x64 Hooking Library

24 Jul 2018 by stevemk14ebr

PolyHook v2 - the C++17 x86/x64 library supporting multiple methods of hooking

C++11

C++14

assembler

C++

How to Hook 64-Bit Code from WOW64 32-Bit Mode

23 Mar 2020 by Apriorit Inc

x64 API Hooker + Disassembler

8 Nov 2018 by Member 13737597

This article shows you how to implement trampolines on x64, introduces the idea of sync and async hooks, and dynamically added runtime filters and loggers.

Hooking Linux Kernel Functions, Part 1: Looking for the Perfect Solution

9 Jan 2019 by Apriorit Inc

Two theoretical ways to protect a Linux kernel module from hooks.

Hooking Linux Kernel Functions, Part 3: What Are the Main Pros and Cons of Ftrace?

17 Jan 2019 by Apriorit Inc

In this article, we focus on the main ftrace pros and cons and describe some unexpected surprises we’ve faced when hooking Linux kernel functions with this utility.

Hooking Linux Kernel Functions, Part 2: How to Hook Functions with Ftrace

22 Jan 2019 by Apriorit Inc, Sergey Stepanchuk