Questions tagged [hooking]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
-1
votes
1answer
125 views

Intercept zip decryption key or files from an application

If an application is reading from a password protected zip file, is there a way to intercept the key being sent to decrypt the zip file. Or, is there a way to dump the files being read themselves?
0
votes
0answers
35 views

How to make proper stubs with Exception Handlers?

I'm trying to hook a function to output all its parameters. The hook itself works fine, but the stub somehow crashes the program. I thinks its related to the Exception Handler at the beginning of the ...
0
votes
0answers
23 views

javascript hook comparisons

Look at this very basic javascript code: if (s=='abcd') { if (s2='cdef') { ... } } I want to hook all tests: I want to get this: (s,'==','abcd') (s2,'==','cdef') Is there a way ...
1
vote
1answer
69 views

Why does vmt hooking not work with instance member in the following case?

Why does the function not get hooked when called with instance member obj.myFunc() ? class Myclass { public: virtual void myFunc() = 0; }; class Derived : public Myclass { public: void ...
0
votes
2answers
318 views

What functions (in which modules) can be hooked by Frida to access unencrypted data of SSL connections in Java programs running under Windows?

There are gazillions of internet resources discussing how to use Frida to hook and otherwise mess around with SSL connections of Java programs running under Android, but seemingly (as far as my google-...
2
votes
2answers
82 views

Check if instruction is reached

I am doing a challenge for a CTF and I have to reverse an encryption scheme to find a flag. However it would be easier to just try all inputs but they are too much. There is an instruction that when ...
1
vote
1answer
45 views

Windbg Break Points

I need to set a break point when a specific module address space is being overwritten? I need to specify this by module name not address space
0
votes
0answers
37 views

Where should I hook more to analyze android Bluetooth communication?

I wanted to learn how other bluetooth applications connects bluetooth OBject EXchange Object Push Profile , as my app continuously threw famous errors socket might closed are timeout; read() ret : -...
2
votes
1answer
112 views

How to see ReadFile results with ProcMon

I running procmon to monitor my process, and see that my process uses ReadFile API. How can I see which data the process received when it uses ReadFile?
3
votes
1answer
721 views

Is it possible to hook CPU instructions without severe performance impact?

I have been working on some unpackers, and I noticed that at their end, they mostly use this: mov edx, [ebp+oep] call edx ; now, you're at the OEP of the original binary Or this: mov ecx, [ebp+oep] ...