Description
Windows API Hooking Course. This course examines various methods for controlling and monitoring the flow of execution of system functions. Hooking is a technique that allows programs to interrupt the flow of execution of a function and examine or modify the parameters passed to it. This technique is widely used by antivirus software and endpoint detection and response systems to monitor critical operating system functions such as memory allocation functions or remote thread creation. The course covers three main methods. The first method is five-byte inline hooking, in which the first five bytes of the target function are replaced with a jump instruction to the attacker’s function to take control of the flow and parameters, and after examination, the execution of the main function is resumed or blocked. The second method is import address table hooking, in which calls are redirected to the hooking function by changing the function address in this table. Practical techniques such as process hiding are also taught, which manipulates the linked list of processes returned by system functions to hide the process from tools such as Task Manager. Finally, the method of hook isolation from dynamic libraries is presented, in which the executable code section of a hooked library is replaced with a clean copy from disk or from a stopped process to restore normal system behavior. This course helps to gain a deeper understanding of operating system security mechanisms and methods for dealing with them.
What you will learn
- What is API Hooking?
- Different types of hooking
- Inline Hooking
- IAT Hooking
- DLL Unhooking
This course is suitable for people who:
- Penetration Testers
- Malware Developers
- Red Teamers
Course details
- Publisher: Udemy
- Instructor: Naga Sai Nikhil
- Training level: Beginner to advanced
- Training duration: 2 hours and 13 minutes
- Number of lessons: 8
Course syllabus in 2024/5
Windows API Hooking Course Prerequisites
- No prior experience needed but the basics of Windows API is an added advantage
Course images
Sample course video
Installation Guide
After Extract, view with your favorite player.
Subtitles: None
Quality: 720p
Download link
Downloadly
Rapidgator link
File(s) password: www.downloadly.ir
File size
1.2 GB
