Solved

How to intercept winsock function like send,sendto, recv ,etc.

Posted on 2002-06-29
2
492 Views
Last Modified: 2007-12-19
hi all,

i wrote a dll to intercept windows API, for other APIs that is in user32.dll or advapi32.dll, it works well, but when i want to intercept api in wsock32.dll or w2_32.dll, it doesn't work well, i mean i can only intercept some application which is using these function like send, but for others which are using "send", it can't intercept.

how to?

BTW, what i use is to change the IAT of every executable file images.
0
Comment
Question by:greensleeve
2 Comments
 
LVL 32

Expert Comment

by:jhance
ID: 7118932
Are you sure that these "other" applications are using send from these DLLs?  I think you'll find that there is more than one way to "network" in a Windows application.
0
 
LVL 30

Accepted Solution

by:
Axter earned 50 total points
ID: 7119201
There's more then one Send API function.
You need to capture the following API calls:

WSASend
WSASendTo

WSPSend
WSPSendTo

send
sendto
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Unlike C#, C++ doesn't have native support for sealing classes (so they cannot be sub-classed). At the cost of a virtual base class pointer it is possible to implement a pseudo sealing mechanism The trick is to virtually inherit from a base class…
In days of old, returning something by value from a function in C++ was necessarily avoided because it would, invariably, involve one or even two copies of the object being created and potentially costly calls to a copy-constructor and destructor. A…
The goal of the tutorial is to teach the user how to use functions in C++. The video will cover how to define functions, how to call functions and how to create functions prototypes. Microsoft Visual C++ 2010 Express will be used as a text editor an…
The viewer will learn how to pass data into a function in C++. This is one step further in using functions. Instead of only printing text onto the console, the function will be able to perform calculations with argumentents given by the user.

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

25 Experts available now in Live!

Get 1:1 Help Now