SpookyHook
-------------

Spooky-hook.py is an API call hooking tool based on WinAppDbg for the Windows
platform. It is derived from a script written by Michael Ligh published in the
Malware Analyst's Cookbook [1]


[1] https://code.google.com/p/malwarecookbook/source/browse/trunk/11/12/pymon.py

Catching data
-------------

I had some trouble to get the data from an API call and it required several
tries to get it working. Thus, the script is a mess. However, the hooked
send() API call serves as an example, but please note that this still requires
a cleanup.

Status
-------------

The script is not finished, yet, but might serve as a template for API hooking tests.

License
-------------

Since the original script is published aunder the GNU General Publi
License >= Version 3, this script is it, too.