Posted February 15, 201510 yr I try to hook the api EstimateFileRiskLevel with python + pydbg, but failed to get the api address. Is there any way I can hook the api?
February 15, 201510 yr Yes. You can start by reading MSDN documentation, especially the Remarks part.
February 17, 201510 yr Author Yes. You can start by reading MSDN documentation, especially the Remarks part. I can hook LoadLibrary and GetProcAddress to get the address of EstimateFileRiskLevel, but when I set a bp on EstimateFileRiskLevel and try to download file via IE, IE crash. why ? Edited February 17, 201510 yr by bin123485
Create an account or sign in to comment