Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 01-08-2005, 01:23
killy
 
Posts: n/a
yes this is what everyone does mainly in trainers. i wanted something different which can be done within the exe.
redbull,thanks for your api help but badly those api are'nt in the imports and then how do we capture the key?
Reply With Quote
  #2  
Old 01-13-2005, 17:56
redbull redbull is offline
Friend
 
Join Date: Mar 2004
Posts: 160
Rept. Given: 17
Rept. Rcvd 5 Times in 4 Posts
Thanks Given: 3
Thanks Rcvd at 6 Times in 6 Posts
redbull Reputation: 5
Both RegisterHotKey and UnRegisterHotKey are found in "user32.dll"

You need to hope that the app you are hooking into (for evil purposes) has LoadLibrary and GetProcAddress...

Otherwise you have to hard-code the calls into your program or have a range of calls hard coded for each operating system and service pack...

You can find out which function these are in User32.dll and walk through user32.dll 's PE header export section and get the address of the function that way.

Other than that you are going to have to do things the hard way. There are a number of papers on this writtern by the virus writers or rootkit authors ....
Reply With Quote
  #3  
Old 01-17-2005, 20:29
killl
 
Posts: n/a
if the software itself has some hotkeys, I think it's easy to do.

use exescope to open the software, u may find : accelarate... or sth like this , can we change here to build our own hotkeys?
Reply With Quote
  #4  
Old 01-17-2005, 21:31
dmownz
 
Posts: n/a
Look at SetWindowsHook(ex). You can write a dll which will be loaded into all gui processes, intercept the keypress, and do whatever you need to in the context of the process that received the keypress. The hotkey message would leave you in the context of your own process.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 02:34.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )