projects
piathook 1.4
Written by David Reguera García   
Wednesday 21 february 2007

DOWNLOAD

Here is the piathook 1.4 now i don't need to add the function address to be patched, it is
enough to give the name (if the process has the firsthunk set to 0 it will not work, only uses
the IMAGE_IMPORT_DIRECTORY).

Also the user interface has been improved.

Other screenshot

Last update ( Wednesday 21 February 2007 )


piathook 1.3
Written By David Reguera García   
Friday 16 February 2007

DOWNLOAD

piathook 1.3 has an important debugging of the code also, now it usesthe token method to
obtain all the privileges if it is possible, so we could patch a process that before we could
not, and the grafic interface to show the processes has been improved:


Last update ( Friday 16 February 2007 )


piathook 1.2
Written By David Reguera García   
Wednesday 14 February 2007

DOWNLOAD

piathook 1.2 is a tool capable to do patching in the IAT, in a generic way, executing a
payload that loads at the same time a DLL, we only have to create a DLL that has the
implementation of the new patched function and tell piathook which is our DLL and our new
function (obviously it has to be exported).

Screenshots: captura1 captura2

Last update ( Wednesday 14 February 2007 )


piathook
Written By David Reguera García   
Monday 12 February 2007

DOWNLOAD

piathook is a tool capable of redirect a function that imports any process modifying the value
that Win32 loader adds, (It uses IMPORT DIRECTORY and FIRST THUNK tables), it has
BSD/MIT license and it has been compiled with mingw.

In the future versions they will be able to be redirected taking as a reference the name of
the function, also all the addresses X from all the libraries could be patched, or all the
functions from a library or all the functions from all the libraries etc.

To see how it works actually watch this screenshot

Last update ( Monday 12 February 2007 )