Solved

How to intercept winsock function like send,sendto, recv ,etc.

Posted on 2002-06-29
2
514 Views
Last Modified: 2007-12-19
hi all,

i wrote a dll to intercept windows API, for other APIs that is in user32.dll or advapi32.dll, it works well, but when i want to intercept api in wsock32.dll or w2_32.dll, it doesn't work well, i mean i can only intercept some application which is using these function like send, but for others which are using "send", it can't intercept.

how to?

BTW, what i use is to change the IAT of every executable file images.
0
Comment
Question by:greensleeve
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 32

Expert Comment

by:jhance
ID: 7118932
Are you sure that these "other" applications are using send from these DLLs?  I think you'll find that there is more than one way to "network" in a Windows application.
0
 
LVL 30

Accepted Solution

by:
Axter earned 50 total points
ID: 7119201
There's more then one Send API function.
You need to capture the following API calls:

WSASend
WSASendTo

WSPSend
WSPSendTo

send
sendto
0

Featured Post

Enroll in June's Course of the Month

June's Course of the Month is now available! Every 10 seconds, a consumer gets hit with ransomware. Refresh your knowledge of ransomware best practices by enrolling in this month's complimentary course for Premium Members, Team Accounts, and Qualified Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will show you some of the more useful Standard Template Library (STL) algorithms through the use of working examples.  You will learn about how these algorithms fit into the STL architecture, how they work with STL containers, and why t…
Go is an acronym of golang, is a programming language developed Google in 2007. Go is a new language that is mostly in the C family, with significant input from Pascal/Modula/Oberon family. Hence Go arisen as low-level language with fast compilation…
The viewer will learn how to user default arguments when defining functions. This method of defining functions will be contrasted with the non-default-argument of defining functions.
The viewer will learn how to clear a vector as well as how to detect empty vectors in C++.

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question