如何利用hook制作程序如何监视对话框的弹出及其提示的内容？

2004-10-20 08:15:17 351 阅读 AI 写同款 · GEO 优化AI 选题数据监测一键分发 ›

API Hook完全手册注：本文是根据我两年前写的一个系统行为监测程序写成（参考了一些书籍和文章）。最近在论坛上看到有不少人在问关于API Hook的问题，便写成此文，希望能对朋友们在写API Hook代码的时候能够有所帮助。1 基本原理API Hook是什么我就不多说了，直接进入正题。API Hook技术主要有下面的技术难点：1. 如何将自己的的代码Inject到其他进程2. 如何Hoo 阅读详情

想大家请教
如何利用hook制作程序如何监视对话框的弹出及其提示的内容？

...全文

浅谈hook攻防攻与防都是相对的，只有掌握细节才能更好的对抗。基础知识对于Windows系统，它是建立在事件驱动机制上的，说白了就是整个系统都是通过消息传递实现的。hook（钩子）是一种特殊的消息处理机制，它可以监视系统或者进程中的各种事件消息，截获发往目标窗口的消息并进行处理。所以说，我们可以在系统中自定义钩子，用来监视系统中特定事件的发生，完成特定功能，如屏幕取词，监视日志，截获键盘、鼠标输入等等。钩子的种类很多，每种钩子可以截获相应的消息，如键盘钩子可以截获键盘消息，外壳钩子可以截取、启动和关闭应用程序的消息阅读详情

gyhong

Windows SDK/API 1,184 成员 22,326 内容

+ 关注 + 加入社区

切换为时间正序

longtusoft 2004-10-20

打赏
举报

顶

zwb666 2004-10-20

打赏
举报

ding

gyhong 2004-10-20

打赏
举报

我的具体问题如下：

form1 中有个Webbrower1控件，用Webbrower1打开一个网页开始录入数据，录入结束后，
该网页弹出对话框(messagebox），文字提示为“数据录入成功!",
为了监视这个对话框,我原来用 Timer ,findwindow 来实现，但程序不稳定。
我想用hook方法来监视监视这个对话框,

我查到了监控键盘的hook方法，思路为：先用hook方法作一个Dll文件，然后用程序调用
该DLL文件。希望高手通过下面的代码帮我该成一个监控messagebox对话框弹出的程序代码。

谢谢 gyhong

键盘监控程序代码如下：

1。DLL文件代码：
unit Global;
interface
uses windows,Local;
//define the structure of the SetHookHandle function in hookdll.dll
type TSetHookHandle = procedure(HookHandle: HHook); stdcall;

var LibLoaded: boolean; //true if hookdll.dll is already loaded
LibHandle: HInst; //dll handle
HookProcAdd: pointer; //memory address of hook procedure in windows
GHookInstalled: boolean;
SetHookHandle: TSetHookHandle;

function LoadHookProc: boolean;
function SetupGlobalHook: boolean;

implementation

{
LoadHookProc
------------
This function loads the hook procedure from the dll created in hookdll.dll
and obtains a handle for the dll and the address of the procedure in the
dll. The procedure will be called 'GlobalKeyBoardHook'
This procedure also loads the SetHookHandle procedure in hookdll.dll. As
explained in the dll code, this procedure is simply used to inform the dll
of the handle for the current hook, which is needed to call CallNextHookEx
and also to initialise the keyarray (see the dll code).
}
function LoadHookProc: boolean;
begin
//attempt to load the dll containing our hook proc
LibHandle:=LoadLibrary('hookdll.dll');
if LibHandle=0 then begin //if loading fails, exit and return false
LoadHookProc:=false;
exit;
end;
//once the dll is loaded, get the address in the dll of our hook proc
HookProcAdd:=GetProcAddress(LibHandle,'GlobalKeyBoardHook');
@SetHookHandle:=GetProcAddress(LibHandle,'SetHookHandle');
if (HookProcAdd=nil)or(@SetHookHandle=nil) then begin //if loading fails, unload library, exit and return false
FreeLibrary(LibHandle);
LoadHookProc:=false;
exit;
end;
LoadHookProc:=true;
end;

{
SetupGlobalHook
---------------
This function installs a global hook. To the install a global hook, we first have
to load the hook procedure that we have written from hookdll.dll, using the LoadHookProc
above. If succesful use the setwindowshookex function specifying the hook type as WH_KEYBOARD,
the address of the hook procedure is that loaded from hookdll.dll, the hMod is the handle
of the loaded hookdll.dll and the threadid is set to 0 to indicate a global hook.
}
function SetupGlobalHook: boolean;
begin
SetupGlobalHook:=false;
if LibLoaded=false then LibLoaded:=LoadHookProc; //if hookdll isnt loaded, load it
if LibLoaded=false then exit; //if dll loading fails, exit
CurrentHook:=setwindowshookex(WH_KEYBOARD,HookProcAdd,LibHandle,0); //install hook
SetHookHandle(CurrentHook);
if CurrentHook<>0 then SetupGlobalHook:=true; //return true if it worked
end;

end.

2。运行的另一个程序，监控键盘，当通过键盘键入的字超过20个时，存入log.txt文件。
unit MainFormUnit;

interface

uses
Windows, Messages, SysUtils, Classes, Graphics, Controls, Forms, Dialogs, Local, global,
StdCtrls;

type
TMainForm = class(TForm)
Button1: TButton;
Button2: TButton;
procedure Button1Click(Sender: TObject);
procedure FormCreate(Sender: TObject);
procedure FormDestroy(Sender: TObject);
procedure Button2Click(Sender: TObject);
private
{ Private declarations }
public
{ Public declarations }
end;

var
MainForm: TMainForm;

implementation

{$R *.DFM}

procedure TMainForm.Button1Click(Sender: TObject);
begin
if GHookInstalled=true then exit; //if a global hook is installed, exit routine
//if a local hook not installed, then attempt to install one, else attempt to remove one
if HookInstalled=false then HookInstalled:=SetupLocalHook else HookInstalled:=not(RemoveLocalHook);
end;

procedure TMainForm.FormCreate(Sender: TObject);
begin
HookInstalled:=false;
GHookInstalled:=false;
LibLoaded:=false;
end;

procedure TMainForm.FormDestroy(Sender: TObject);
begin
if HookInstalled=true then RemoveLocalHook;
end;

procedure TMainForm.Button2Click(Sender: TObject);
begin
if HookInstalled=true then exit; //if a local hook is installed, exit routine
//if a local hook not installed, then attempt to install one, else attempt to remove one
//note that removelocalhook can still be used no matter whether the hook is global or local
if GHookInstalled=false then GHookInstalled:=SetupGlobalHook else GHookInstalled:=not(RemoveLocalHook);
end;

end.

gyhong 2004-10-20

打赏
举报

监视其它程序弹出的messagebox对话框

delphi99 2004-10-20

打赏
举报

请说具体一点呀

hottey 2004-10-20

打赏
举报

什么对话框

hottey 2004-10-20

打赏
举报

什么对话框

如何利用hook制作程序如何监视对话框的弹出及其提示的内容？

相关推荐