Hacker News new | past | comments | ask | show | jobs | submit login

Detours is a library for instrumenting arbitrary Win32 functions Windows-compatible processors. Detours intercepts Win32 functions by re-writing the in-memory code for target functions. The Detours package also contains utilities to attach arbitrary DLLs and data segments (called payloads) to any Win32 binary.

Detours preserves the un-instrumented target function (callable through a trampoline) as a subroutine for use by the instrumentation. Our trampoline design enables a large class of innovative extensions to existing binary software.

https://www.microsoft.com/en-us/research/project/detours/





And my more sophisticated library, https://github.com/stevemk14ebr/PolyHook_2_0


Interesting. Has anyone done the same thing on Linux?


I use and recommend subhook[0].

[0] https://github.com/Zeex/subhook




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: