FAKE PROTOCOL NDIS hook 支持拨号的选项

最新推荐文章于 2025-04-20 15:59:12 发布

原创最新推荐文章于 2025-04-20 15:59:12 发布 · 1.4k 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#hook #struct #string #network #processing #object

windows系统管理和安全专栏收录该内容

168 篇文章

订阅专栏

本文介绍了一种NDIS钩子技术，用于支持NT4与WIN2K的拨号连接。通过定义特定的结构体和处理器，实现对不同操作系统的兼容，并详细展示了NDIS4.1和NDIS5版本中OPEN_BLOCK结构的不同。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

NDIS 支持拨号的选项

几年前写 NDIS HOOK，为了支持 NT 4 与 WIN 2K 的拨号定义的一些
结构。当时采用的是 FAKE PROTOCOL 方式，除了一些拨号声明外其他
都一样。

//Win2K dial network handler
WAN_RECEIVE_HANDLER g_h2KWanReceive ;
RECEIVE_PACKET_HANDLER g_h2KWanReceivePacket ;

//NT4 dial network handler
RECEIVE_HANDLER g_hNT4WanReceive ;
RECEIVE_PACKET_HANDLER g_hNT4WanReceivePacket ;

//Tcp/ip handler for NT4 & Win2k
RECEIVE_PACKET_HANDLER g_hReceivePacket ;
RECEIVE_HANDLER g_hReceive ;

// 兼容 NT 使用 NDIS 4.1

typedef struct _NDIS_OPEN_BLOCK41
{
PNDIS_MAC_BLOCK MacHandle; // pointer to our MAC
NDIS_HANDLE MacBindingHandle; // context when calling MacXX funcs
PNDIS_ADAPTER_BLOCK AdapterHandle; // pointer to our adapter
PNDIS_PROTOCOL_BLOCK ProtocolHandle; // pointer to our protocol
NDIS_HANDLE ProtocolBindingContext;// context when calling ProtXX funcs
PNDIS_OPEN_BLOCK AdapterNextOpen; // used by adapter's OpenQueue
PNDIS_OPEN_BLOCK ProtocolNextOpen; // used by protocol's OpenQueue
PFILE_OBJECT FileObject; // created by operating system
BOOLEAN Closing; // TRUE when removing this struct
BOOLEAN Unloading; // TRUE when processing unload
NDIS_HANDLE CloseRequestHandle; // 0 indicates an internal close
KSPIN_LOCK SpinLock; // guards Closing
PNDIS_OPEN_BLOCK NextGlobalOpen;

//
// These are optimizations for getting to MAC routines. They are not
// necessary, but are here to save a dereference through the MAC block.
//

SEND_HANDLER SendHandler;
TRANSFER_DATA_HANDLER TransferDataHandler;

//
// These are optimizations for getting to PROTOCOL routines.  They are not
// necessary, but are here to save a dereference through the PROTOCOL block.
//

SEND_COMPLETE_HANDLER SendCompleteHandler;
TRANSFER_DATA_COMPLETE_HANDLER TransferDataCompleteHandler;
RECEIVE_HANDLER ReceiveHandler;
RECEIVE_COMPLETE_HANDLER ReceiveCompleteHandler;

//
// Extentions to the OPEN_BLOCK since Product 1.
//
RECEIVE_HANDLER PostNt31ReceiveHandler;
RECEIVE_COMPLETE_HANDLER PostNt31ReceiveCompleteHandler;

//
// NDIS 4.0 extensions
//
RECEIVE_PACKET_HANDLER ReceivePacketHandler;
SEND_PACKETS_HANDLER SendPacketsHandler;

//
// Needed for PnP
//
UNICODE_STRING AdapterName; // Upcased name of the adapter we are bound to
}NDIS_OPEN_BLOCK41 ,*PNDIS_OPEN_BLOCK41;

// W2K 使用 NDIS 5

typedef struct _NDIS_OPEN_BLOCK5
{
PNDIS_MAC_BLOCK MacHandle; // pointer to our MAC
NDIS_HANDLE MacBindingHandle; // context when calling MacXX funcs
PNDIS_ADAPTER_BLOCK AdapterHandle; // pointer to our adapter
PNDIS_PROTOCOL_BLOCK ProtocolHandle; // pointer to our protocol
NDIS_HANDLE ProtocolBindingContext;// context when calling ProtXX funcs
PNDIS_OPEN_BLOCK AdapterNextOpen; // used by adapter's OpenQueue
PNDIS_OPEN_BLOCK ProtocolNextOpen; // used by protocol's OpenQueue
PNDIS_OPEN_BLOCK NextGlobalOpen;
BOOLEAN Closing; // TRUE when removing this struct
BOOLEAN Unbinding; // TRUE when starting to unbind the adapter
BOOLEAN NoProtRsvdOnRcvPkt; // Reflect the protocol_options
BOOLEAN ProcessingOpens;
PNDIS_STRING BindDeviceName;
KSPIN_LOCK SpinLock; // guards Closing
PNDIS_STRING RootDeviceName;

//
// These are optimizations for getting to MAC routines. They are not
// necessary, but are here to save a dereference through the MAC block.
//
union
{
SEND_HANDLER SendHandler;
WAN_SEND_HANDLER WanSendHandler;
};
TRANSFER_DATA_HANDLER TransferDataHandler;

//
// These are optimizations for getting to PROTOCOL routines.  They are not
// necessary, but are here to save a dereference through the PROTOCOL block.
//
SEND_COMPLETE_HANDLER SendCompleteHandler;
TRANSFER_DATA_COMPLETE_HANDLER TransferDataCompleteHandler;
RECEIVE_HANDLER ReceiveHandler;
RECEIVE_COMPLETE_HANDLER ReceiveCompleteHandler;

//
// Extentions to the OPEN_BLOCK since Product 1.
//
union
{
RECEIVE_HANDLER PostNt31ReceiveHandler;
WAN_RECEIVE_HANDLER WanReceiveHandler;
};
RECEIVE_COMPLETE_HANDLER PostNt31ReceiveCompleteHandler;

//
// NDIS 4.0 extensions
//
RECEIVE_PACKET_HANDLER ReceivePacketHandler;
SEND_PACKETS_HANDLER SendPacketsHandler;

//
// More NDIS 3.0 Cached Handlers
//
RESET_HANDLER ResetHandler;
REQUEST_HANDLER RequestHandler;
RESET_COMPLETE_HANDLER ResetCompleteHandler;
STATUS_HANDLER      StatusHandler;
STATUS_COMPLETE_HANDLER StatusCompleteHandler;
REQUEST_COMPLETE_HANDLER RequestCompleteHandler;
}NDIS_OPEN_BLOCK5 ,*PNDIS_OPEN_BLOCK5;