WCU / Cybersecurity
HomeCSC 471CSC 472Search /
~/CSC 471/Class 07/KP 08
Class 07 · KP 08 / 19

Inline Hooking: Diagram

before hookIAT[MessageBoxW]user32!MessageBoxWrealafter IAT hookIAT[MessageBoxW]hook_MessageBoxWattacker
IAT hook: overwrite the import pointer so calls jump to your handler.
  • Detour runs first; calling the trampoline resumes the genuine API.
PreviousInline (Trampoline) Hooking: IdeaNextInline Hook: Sketch