Instrumenting Binary Applications with VBScript and Deviare

The VBScript script below shows how to intercept Win32 registry APIs such as RegOpenKey and RegQueryValue using the Deviare Interception Engine. Windows Internals’ Process Monitor, the tool most often used to monitor registry operations, cannot be customized. There is a large VBScript community that will benefit from adding intercepting options to scripts. Registry interception can […]

Monitoring Printer Activity

Hooking spoolsv.exe Printers in an organization are an easy target for abuse. Developing an application to log printer activity requires expertise in Microsoft Windows internals. The simple code below allows you to quickly use our Deviare Interception Engine to log printer activity. The application runs on the computer the printer is connected to and logs […]

Deviare API Interception v1.0.1 Released

A new version of Nektra Deviare API Hook is now released. This version has lots of fixes to bugs that I found along the last year working with the library in Application Virtualization and Packaging and Reverse Engineering. I found some stability issues, generating dead-locks, stack trace wasn’t working as defined and it has important […]

DirectSound Capture Using Deviare

Download Deviare Download Sourcecode Download PDF Contents Introduction Research Direct Sound Capturing Monitoring Skype Conversations Implementation Deviare Python Wrappers Wave Tools COM Type Libraries Virtual Table Finder Hooking Direct Sound Running Sound Capture Easy Steps Registration What’s next Optimizations Wave API Hooking Hook DirectSoundCapture And Listen To Full Conversations Inspect More COM Interfaces Introduction Today […]

Deviare Message Spy

Download messagespy_demo.zip – 250 KB Download messagespy_src.zip – 249 KB Contents Introduction So, what’s the good news? Deviare Message Spy Finding a Window: The Spy++ Style Window Finder Hooking The XML The Cast Using Deviare Message Spy Requirements Known Issues Resources Introduction This article presents you with a different perspective of how to inspect window […]

A comparison of Deviare and EasyHook

We are comparing our hooking engine Deviare with some of the other products available, so that you can get an idea of what each engine can provide. Here is a comparison of Deviare against Easy Hook. Functionality Deviare EasyHook Database with Functions and Data Types Yes No Intercept multiple functions with a single handler Yes […]

Monitoring Outlook COM Objects with Deviare

We all remember when Ole Automation came out. We were all impressed how simple it was to implement a few COM Interfaces, place a toolbar and interact with the office package. Soon the competition began to show who could create the best and most creative Add-on. How many times did you wonder how that other […]

Deviare COM Spy Console is out!

Today we have released a console for monitoring and spying on applications using Microsoft’s Component Object Model. This technology is used in many professional applications and now you are able to watch them in action too! Deviare’s last integration is the ability to intercept COM interfaces. Using this technology and heuristics to discover this interfaces, […]

Nektra’s hook engine for Windows

Today we are releasing Trappola, our hook engine, under LPGL license. It has been a part of Deviare since its early beginning. And we think it reached a maturity level that any developer can appreciate. There are several libraries that provide some of the functionality we give here. But most of them are theoretical examples, […]