TracePlus/Win32
Submitted by kaparo on Sun, 2006-01-01 22:53. commercial | hook, spy api | windows
Author:
SST Incorporated
Version:
4.12.000
File URL:
http://www.sstinc.com/windows.html
Description:
TracePlus®/Win32 provides information on application usage of the Win32, ODBC, and DB-Library APIs. It traces 25 categories of API functions, comprising nearly 1200 API calls.
Using its unique visual realtime display of Win32 activity, you can spot timing-sensitive API issues, view error codes for failed Win32 functions, reverse engineer other Win32 applications without source code, locate DLLs loaded by an application, and discover what registry keys are used by an application.
Detours
Submitted by hadicol on Wed, 2005-12-28 01:53. commercial | hook, spy api | windows | library
Author:
Microsoft Research
Version:
2.0
File URL:
http://research.microsoft.com/sn/detours/
Description:
Detours is a library for instrumenting arbitrary Win32 functions on x86 machines. Detours intercepts Win32 functions by re-writing target function images. The Detours package also contains utilities to attach arbitrary DLLs and data segments (called payloads) to any Win32 binary.
Detours preserves the un-instrumented target function (callable through a trampoline) as a subroutine for use by the instrumentation. Our trampoline design enables a large class of innovative extensions to existing binary software.
We have used Detours to create an automatic distributed partitioning system, to instrument and analyze the DCOM protocol stack, and to create a thunking layer for a COM-based OS API.
Detours 1.5 is still available under a non-commerical and research use license.
Submitted by kaparo on Mon, 2005-09-05 22:57. freeware | hook, spy api | windows
Author:
M.o.D
Version:
1.3b2
File:
apilog1.3b2.zip (14.2 KB)
Description:
API-Log shows you how often a API is called by the selected process! Furthermore it provides you the EIP of the call!
Submitted by kaparo on Wed, 2005-10-26 10:34. freeware | hook, spy api | windows
Author:
Rustem Fasihov
Version:
1.04
File URL:
http://rapidshare.de/files/6777512/kerberos1.04.zip.html
Submitted by yex on Sat, 2005-12-10 10:19. hook, spy api | open source | windows
Author:
Jacquelin POTIER
Version:
1.0
File URL:
http://jacquelin.potier.free.fr/exe/winapioverride32_bin.zip
Description:
This software allows you to monitor and/or modify any function of a process. This can be done for any calling convention (stdcall or cdecl), and for API functions or executable internal functions.
Submitted by kaparo on Mon, 2005-09-05 22:22. freeware | hook, spy api | windows | library
Author:
Sistemo
Version:
gamma
File URL:
http://www.sistemo.com/Hoko/info.htm
Description:
Hoko (Esperanto for 'hook') is a library that easily could be used to set up a system wide API hook and take them down again at any time on Windows 9x/ME/NT/2k/XP. Your handler, which must be coded in the DELTA code method, is always executed if any process calls the target API. Newly created processes and newly loaded modules are patched before its actual entry point is reached. Your handler is able to modify the API arguments, the registers from the time of the call and the return value of the API call. The user API hook handler could also call the original API itself and addtionally receives some information as e.g. process/thread id, etc.
Submitted by kaparo on Mon, 2005-09-05 22:25. freeware | hook, spy api | windows | library
Author:
EliCZ
Version:
6
File URL:
http://www.apihooks.com/AH.HTM
Description:
ApiHooks allows developers to watch intermodule communications. Suitable for file monitors, registry monitors, dumpers, antiviruses and unpackers.
Submitted by kaparo on Mon, 2005-09-05 22:51. freeware | hook, spy api | windows
Author:
Rohitab Batra
Version:
1.5
File URL:
http://www.rohitab.com/apimonitor/
Description:
API Monitor is a software that monitors and displays API calls made by applications. Its a powerful tool for seeing how Windows and other applications work or tracking down problems that you have in your own applications. The current version include Filters to monitor the following API Categories. A complete list of API categories and API's is available here.
Submitted by kaparo on Mon, 2005-09-05 22:54. freeware | hook, spy api | windows
Author:
Matcode
Version:
2.5
File URL:
http://www.matcode.com/apis32.htm
Description:
APIS32 ( API Spy ) - is the best tool for examine Windows API functions used by 32 bit Windows applications. It allows to examine any known API function`s calls that are resolved during the program load time and are given by APIS32. APIS32 will work with Windows95/98/ME and Windows NT/2000/XP applications which will be executed on the any Win32 platforms.