Log in

View Full Version : What Api to hook to detect outgoing connection?


Anonymous
December 19th, 2004, 04:30
what is the primery gateway api for all outgoing connections?

gracies

1bitshort
December 19th, 2004, 04:40
Options | Events | Break On New Module

If ws2_32.dll, winsock.dll, urlmon.dll or anything like that is loaded then you can assume the program uses the network. From ws2_32.dll, the main APIs youll probably want to break on are send, sendto, recv, recvfrom, etc

Anonymous
December 19th, 2004, 09:32
Yep I know well it uses winsiock (it is listed in imports directory).
But what API hook to? (its calling home)

Necr0Potenc3
December 19th, 2004, 18:42
hook connect and listen