包括系統(tǒng)鉤子和線程鉤子,或者叫全局鉤子和私有鉤子。系統(tǒng)鉤子需要一個單獨的DLL,這個地方耽誤了不少時間,網(wǎng)上有說可以不用單獨DLL的。
現(xiàn)在開始貼代碼,代碼參照了紅黑聯(lián)盟中的一篇文章。
public class SetHook
{
public class HookTypes
{
/// <summary>
/// 鉤子類型
/// </summary>
public enum HookType
{
WH_JOURNALRECORD = 0,//對寄送至消息隊列的輸入消息進(jìn)行記錄
WH_GETMESSAGE = 3,//對寄送至消息隊列的消息進(jìn)行監(jiān)視
WH_JOURNALPLAYBACK = 1,//對此前由WH_JOURNALRECORD 掛鉤處理過程紀(jì)錄的消息進(jìn)行寄送
WH_CALLWNDPROC = 4,//在系統(tǒng)將消息發(fā)送至目標(biāo)窗口處理過程之前,對該消息進(jìn)行監(jiān)視
WH_CBT = 5,//接受對CBT應(yīng)用程序有用的消息
WH_MSGFILTER = -1,//監(jiān)視由對話框、消息框、菜單條、或滾動條中的輸入事件引發(fā)的消息
WH_SYSMSGFILTER = 6,//監(jiān)視由對話框,消息框,菜單條,滾動條中的輸入事件引發(fā)的消息
//8
WH_DEBUG = 9,//對其他鉤子處理過程進(jìn)行調(diào)試
WH_SHELL = 10,//接受對外殼應(yīng)用程序有用的通知
WH_FOREGROUNDIDLE = 11,//當(dāng)應(yīng)用程序的前臺線程即將進(jìn)入空閑狀態(tài)時被調(diào)用,它有助于在空閑時間內(nèi)執(zhí)行低優(yōu)先級的任務(wù)
#region 鼠標(biāo)和鍵盤事件
/// <summary>
/// 對擊鍵消息進(jìn)行監(jiān)視
/// </summary>
WH_KEYBOARD = 2,
/// <summary>
/// 只能在windows NT中被安裝,用來對底層的鍵盤輸入事件進(jìn)行監(jiān)視
/// </summary>
WH_KEYBOARD_LL = 13,
/// <summary>
/// 對鼠標(biāo)消息進(jìn)行監(jiān)視
/// </summary>
WH_MOUSE = 7,
/// <summary>
/// 只能在windows NT中被安裝,用來對底層鼠標(biāo)事件進(jìn)行監(jiān)視
/// </summary>
WH_MOUSE_LL = 14,
#endregion
}
}
public abstract class Hooks : HookTypes
{
public delegate int HookProc(int nCode, int wParam, IntPtr IParam);
/// <summary>
/// 安裝鉤子
/// </summary>
/// <param name="idHook">鉤子類型,即它處理的消息類型</param>
/// <param name="lpfn"> 鉤子函數(shù)地址</param>
/// <param name="hInstance">應(yīng)用程序?qū)嵗木浔?biāo)識包含lpfn所指的子程的DLL</param>
/// <param name="threadId">安裝鉤子后想監(jiān)控的線程的ID號, 如果為0,鉤子子程與所有的線程關(guān)聯(lián),即為全局鉤子</param>
/// <returns>返回參數(shù)為鉤子句柄,失敗為NULL</returns>
[DllImport("user32.dll", CallingConvention = CallingConvention.StdCall)]
public static extern int SetWindowsHookEx(HookType hooktype, HookProc lpfn, IntPtr hInstance, int threadId);
/// <summary>
/// 卸載鉤子
/// </summary>
/// <param name="idHook">要卸載的鉤子句柄</param>
/// <returns></returns>
[DllImport("user32.dll", CallingConvention = CallingConvention.StdCall)]
public static extern bool UnhookWindowsHookEx(int idHook);
/// <summary>
/// 繼續(xù)下一個鉤子
/// </summary>
/// <param name="idHook"></param>
/// <param name="nCode"></param>
/// <param name="wParam"></param>
/// <param name="IParam"></param>
/// <returns></returns>
[DllImport("user32.dll", CallingConvention = CallingConvention.StdCall)]
public static extern int CallNextHookEx(int idHook, int nCode, int wParam, IntPtr IParam);
/// <summary>
/// 獲取當(dāng)前線程編號
/// </summary>
/// <returns></returns>
[DllImport("kernel32")]
public static extern int GetCurrentThreadId();
#region
/// <summary>
/// 委托對象
/// </summary>
public HookProc proc;
public abstract int SetWindowsHookEx();
#endregion
}
public class AddHook : Hooks
{
HookType hooktyp;
HookProc hookproc;
public AddHook(HookType _hooktype, HookProc _hookproc)
{
this.hooktyp = _hooktype;
this.hookproc = _hookproc;
}
public int AddPrivateHook()
{
return SetWindowsHookEx();
}
/// <summary>
/// 線程鉤子
/// </summary>
/// <returns></returns>
public override int SetWindowsHookEx()
{
//int theadId = System.Threading.Thread.CurrentThread.ManagedThreadId(); 應(yīng)對GetCurrentThreadId()的過時
int hookId = 0;
object hookId_ = SetWindowsHookEx(this.hooktyp, this.hookproc, IntPtr.Zero, GetCurrentThreadId());
if (hookId_ != null)
{
hookId = (int)hookId_;
}
return hookId;
}
//系統(tǒng)鉤子和這差不多,安裝鉤子的時候后兩個參數(shù)不一樣
}
}
調(diào)用我新建了一個類,方便調(diào)用線程或者系統(tǒng)鉤子,這里就不貼了