olemus
tarkvaras: programmi käitumise muutmine
komponentidevahelise teabe püügiga, mille
sihtmärgiks on funktsioonikutsed, sõnumid, sündmused
=
techniques used to alter the behaviour of software components by intercepting function calls or messages or events passed between the components

rakendused
- silumine
- testimine
- rünne

ülevaateid
https://en.wikipedia.org/wiki/Hooking

http://jbremer.org/x86-api-hooking-demystified/

http://ntvalk.blogspot.com.ee/2013/11/hooking-explained-detouring-library.html

http://www.malwaretech.com/2015/01/inline-hooking-for-programmers-part-1.html

https://www.blackhat.com/docs/us-16/materials/us-16-Yavo-Captain-Hook-Pirating-AVs-To-Bypass-Exploit-Mitigations.pdf

http://bitblaze.cs.berkeley.edu/papers/hookfinder_ndss08.pdf

vt ka
- haak