Click here to Skip to main content
Click here to Skip to main content

A Simple C# Global Low Level Keyboard Hook

By , 30 May 2007
 
Screenshot - key_preview.jpg

Introduction

This article discusses a class that I wrote that wraps a global low level keyboard hook. The sample hooks the A and B keys, just for demonstration.

Background

I was trying to find a way for an application that I am writing to restore itself when a combination of keys was pressed. This was born from searching around for the answer.

Using the Code

First download the source, and add globalKeyboardHook.cs to your project. Then add...

using Utilities;

... to the top of the file you are going to use it in. Next add an instance of globalKeyboardHook to your class:

globalKeyboardHook gkh = new globalKeyboardHook() ;

When a globalKeyboardHook is constructed, it automatically installs the hook, so all there is left to do is add some keys for it to watch, and define some event handlers for the KeyDown and KeyUp events. I usually do this on the main form's load event handler, like this:

private void Form1_Load(object sender, EventArgs e) {
    gkh.HookedKeys.Add(Keys.A);
    gkh.HookedKeys.Add(Keys.B);
    gkh.KeyDown += new KeyEventHandler(gkh_KeyDown);
    gkh.KeyUp += new KeyEventHandler(gkh_KeyUp);
} 

void gkh_KeyUp(object sender, KeyEventArgs e) {
    lstLog.Items.Add("Up\t" + e.KeyCode.ToString());
    e.Handled = true ;
}

void gkh_KeyDown(object sender, KeyEventArgs e) {
    lstLog.Items.Add("Down\t" + e.KeyCode.ToString());
    e.Handled = true ;
} 

Here I have chosen to watch for the A and B keys, and defined handlers for the KeyUp and KeyDown events that both log to a listbox called lstLog. So whenever the user presses the A or B keys, no matter what has focus, the application will be notified. Setting e.Handled to true makes it so no other notifications for this event go out, in the sample, this effectively stops the user from typing an A or B. This can be useful in ensuring that key combinations are not also typed out when used.

You can add hooks for as many keys as you would like, just add them like above. Don't get frustrated if you add a hook for a key and it doesn't work, many of them, like Keys.Shift show up as other more specific keys, like Keys.LShiftKey or Keys.RShiftKey. Keys.Alt shows up as Keys.LMenu or Keys.RMenu, Keys.Control shows up as Keys.LControl or Keys.RControl, just to name a few.

If you would like to hook or unhook the keyboard hook at any point, just call your globalKeyboardHook's hook and unhook methods, like so:

//unhook
gkh.unhook() 
//set the hook again
gkh.hook() 

Points of Interest

The bulk of the work in this code is done in the globalKeyboardHook class, although it is a fairly simple piece of code itself. The hardest part of doing this was finding the correct parameters for SetWindowsHookEx.

[DllImport("user32.dll")]
static extern IntPtr SetWindowsHookEx
    (int idHook, keyboardHookProc callback, IntPtr hInstance, uint threadId);

The parameters were worked out to be:

IntPtr hInstance = LoadLibrary("User32");
hhook = SetWindowsHookEx(WH_KEYBOARD_LL, hookProc, hInstance, 0);

The first parameter WH_KEYBOARD_LL is just saying that we want to hook the low level keyboard events, hookProc is the callback for the event, hInstance is a handle to User32.dll, where this event is first processed (I think). The last parameter is if you want to hook a specific thread, then you would just pass a thread id instead of using the hInstance.

History

  • 5/30/07 - First version

License

This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

About the Author

StormySpike
Software Developer
United States United States
Member
I currently work as a Software Engineer for a company in North Carolina, mainly working with C#.

Sign Up to vote   Poor Excellent
Add a reason or comment to your vote: x
Votes of 3 or less require a comment

Comments and Discussions

 
You must Sign In to use this message board.
Search this forum  
    Spacing  Noise  Layout  Per page   
GeneralRe: CallbackOnCollectedDelegate ExceptionmemberLeye011 Apr '12 - 22:13 
I know it's old, but thank you for this modification!
This code is only useful in "sophisticated" application with a lot of forms,
so this revision was needed.
GeneralAwesome!memberKhoiTran197 Dec '10 - 17:45 
This is the simplest and neatest hook code I have seen. Can you make one like that to hook keyboards too?
GeneralMy vote of 5membermesuhas_sit7 Dec '10 - 16:52 
Thanks StormySpike...
Helped me to learn a lot..
Generalctrl+alt+imemberpukino18030 Sep '10 - 10:13 
can also do Ctrl + alt + i? :(
GeneralRe: ctrl+alt+imemberDungVinh12 Feb '12 - 23:48 
Control.Modifiers always is None in this case
QuestionForeign characters?memberlvq68411 Sep '10 - 2:36 
How do you add characters to the hook like danish æ, ø and å. Or other european special characters?
GeneralAll keysmemberMember 724777630 Jul '10 - 5:35 
Is it possible to do with all keys? Also KeyPress event would be nice
GeneralRe: All keysmemberjrbosch2 Jan '11 - 21:47 
foreach (System.Windows.Forms.Keys item in Enum.GetValues(typeof(System.Windows.Forms.Keys)))
{
gkh.HookedKeys.Add(item);
}
GeneralMy vote of 4memberangelamerkel28 Jun '10 - 10:11 
error garbage collected delegate but solution in ocmments
GeneralMy vote of 1memberMember 356761318 Jun '10 - 1:38 
it crash when we type very fast
QuestionKey combination like CTRL+ALT+A?memberuhcafigdc4 Jun '10 - 9:03 
Is there a way to capture a key combination like CTRL+ALT+A, where those three keys are pressed simultaneously?
General[My vote of 2] Sorry not perfect...memberjohannesnestler25 May '10 - 23:50 
Have a look at your marshalling! (Attributes) Your code can lead to some (seldom but nasty) errors.
So sorry for the bad vote but your code seems to be reused by a lot of people, i will revote if you improve your code.
A good site is: http://www.pinvoke.net[^]
Maybe you are also interested in the way I get the Instance handle for the process containing the callback.
 
Have a look at the code I use for a keyboard hook:
 
/* File: GlobalKeyboardHook.cs
 * Proj: Common
 * Date: 20.03.2009
 * Desc: GlobalKeyboardHook - Helper class for global (system-wide) keyboard hooks. 
 * Elem: CLASS GlobalKeyboardHook - -"-
 * Auth: © Johannes Nestler 2009 */
 

using System;
using System.Diagnostics;
using System.Reflection;
using System.Runtime.InteropServices;
using System.Windows.Forms;
 

namespace Common
{
    #region CLASS GlobalKeyboardHook
 
    /// <summary>
    /// Helper class for global (system-wide) keyboard hooks.
    /// </summary>        
    public class GlobalKeyboardHook
    {
        #region TYPES
 
        #region CLASS KeyboardHookStruct
 
        /// <summary>
        /// Marshalling of the Windows-API KBDLLHOOKSTRUCT structure.#
        /// Contains information about a low-level keyboard input event.
        /// This is named "struct" to be consistent with the Windows API name,
        /// but it must be a class since it is passed as a pointer in SetWindowsHookEx.
        /// </summary>
        [StructLayout(LayoutKind.Sequential)]
        class KeyboardHookStruct
        {
            public int vkCode;
            public int scanCode;
            public int flags;
            public int time;
            public int dwExtraInfo;
        }
 
        #endregion // CLASS KeyboardHookStruct

        #region DELEGATE HookProc
 
        /// <summary>
        /// Represents the method called when a hook catches a monitored event.
        protected delegate int HookProc(int nCode, int wParam, IntPtr lParam);
 
        #endregion // DELEGATE HookProc

        #endregion // TYPES

        #region CONSTANTS
 
        const int WH_KEYBOARD_LL = 13;
        const int WH_KEYBOARD = 2;
 
        const int WM_KEYDOWN = 0x100;
        const int WM_KEYUP = 0x101;
        const int WM_SYSKEYDOWN = 0x104;
        const int WM_SYSKEYUP = 0x105;
 
        const byte VK_SHIFT = 0x10;
        const byte VK_CAPITAL = 0x14;
        const byte VK_NUMLOCK = 0x90;
 
        const byte VK_LSHIFT = 0xA0;
        const byte VK_RSHIFT = 0xA1;
        const byte VK_LCONTROL = 0xA2;
        const byte VK_RCONTROL = 0x3;
        const byte VK_LALT = 0xA4;
        const byte VK_RALT = 0xA5;
 
        // const byte LLKHF_ALTDOWN = 0x20; // not used

        #endregion // CONSTANTS

        #region VARIABLES
 
        /// <summary>
        /// Value indicating if hook is active.
        /// </summary>
        bool m_bHookActive;
 
        /// <summary>
        /// Stored hook handle returned by SetWindowsHookEx
        /// </summary>
        int m_iHandleToHook;
 
        /// <summary>
        /// Stored reference to the HookProc delegate (to prevent delegate from beeing collected by GC!)
        /// </summary>
        protected HookProc m_hookproc;
 
        #endregion // VARIABLES

        #region EVENTS
 
        /// <summary>
        /// Occurs when a key is pressed.
        /// </summary>
        public event KeyEventHandler KeyDown;
        /// <summary>
        /// Occurs when a key is released.
        /// </summary>
        public event KeyEventHandler KeyUp;
        /// <summary>
        /// Occurs when a character key is pressed.
        /// </summary>
        public event KeyPressEventHandler KeyPress;
 
        #endregion // EVENTS

        #region CONSTRUCTION & DESTRUCTION
 
        /// <summary>
        /// Dtor.
        /// </summary>
        ~GlobalKeyboardHook()
        {
            Unhook();
        }
 
        #endregion // CONSTRUCTION & DESTRUCTION

        #region PROPERTIES
 
        /// <summary>
        /// Gets a value indicating if hook is active.
        /// </summary>
        public bool HookActive
        {
            get { return m_bHookActive; }
        }
 
        #endregion // PROPERTIES

        #region METHODS
 
        /// <summary>
        /// Install the global hook. 
        /// </summary>
        /// <returns> True if hook was successful, otherwise false. </returns>
        public bool Hook()
        {
            if(!m_bHookActive)
            {
                m_hookproc = new HookProc(HookCallbackProcedure);
 
                IntPtr hInstance = GetModuleHandle(Process.GetCurrentProcess().MainModule.ModuleName);
                m_iHandleToHook = SetWindowsHookEx(
                    WH_KEYBOARD_LL,
                    m_hookproc,
                    hInstance,
                    0);                
 
                if(m_iHandleToHook != 0)
                {
                    m_bHookActive = true;
                }
            }
            return m_bHookActive;
        }
 
        /// <summary>
        /// Uninstall the global hook.
        /// </summary>
        public void Unhook()
        {
            if(m_bHookActive)
            {
                UnhookWindowsHookEx(m_iHandleToHook);
                m_bHookActive = false;
            }
        }
 
        /// <summary>
        /// Raises the KeyDown event.
        /// </summary>
        /// <param name="kea"> KeyEventArgs </param>
        protected virtual void OnKeyDown(KeyEventArgs kea)
        {
            if(KeyDown != null)
                KeyDown(this, kea);
        }
 
        /// <summary>
        /// Raises the KeyUp event.
        /// </summary>
        /// <param name="kea"> KeyEventArgs </param>
        protected virtual void OnKeyUp(KeyEventArgs kea)
        {
            if(KeyUp != null)
                KeyUp(this, kea);
        }
 
        /// <summary>
        /// Raises the KeyPress event.
        /// </summary>
        /// <param name="kea"> KeyEventArgs </param>
        protected virtual void OnKeyPress(KeyPressEventArgs kpea)
        {
            if(KeyPress != null)
                KeyPress(this, kpea);
        }
 
        #endregion // METHODS

        #region EVENTHANDLER
 
        /// <summary>
        /// Called when hook is active and a key was pressed.
        /// </summary>
        int HookCallbackProcedure(int nCode, int wParam, IntPtr lParam)
        {
            bool bHandled = false;
 
            if(nCode > -1 && (KeyDown != null || KeyUp != null || KeyPress != null))
            {
                // Get keyboard data
                KeyboardHookStruct khs = (KeyboardHookStruct) Marshal.PtrToStructure(lParam, typeof(KeyboardHookStruct));
 
                // Get key states
                bool bControl = ((GetKeyState(VK_LCONTROL) & 0x80) != 0) || ((GetKeyState(VK_RCONTROL) & 0x80) != 0);
                bool bShift = ((GetKeyState(VK_LSHIFT) & 0x80) != 0) || ((GetKeyState(VK_RSHIFT) & 0x80) != 0);
                bool bAlt = ((GetKeyState(VK_LALT) & 0x80) != 0) || ((GetKeyState(VK_RALT) & 0x80) != 0);
                bool bCapslock = (GetKeyState(VK_CAPITAL) != 0);
 
                // Create KeyEventArgs 
                KeyEventArgs kea = new KeyEventArgs((Keys) (khs.vkCode |
                        (bControl ? (int) Keys.Control : 0) |
                        (bShift ? (int) Keys.Shift : 0) |
                        (bAlt ? (int) Keys.Alt : 0)));
 
                // Raise KeyDown/KeyUp events
                if(wParam == WM_KEYDOWN || wParam == WM_SYSKEYDOWN)
                {
                    OnKeyDown(kea);
                    bHandled = kea.Handled;
                }
                else if(wParam == WM_KEYUP || wParam == WM_SYSKEYUP)
                {
                    OnKeyUp(kea);
                    bHandled = kea.Handled;
                }
 
                // Raise KeyPress event
                if(wParam == WM_KEYDOWN && !bHandled && !kea.SuppressKeyPress)
                {
                    byte[] abyKeyState = new byte[256];
                    byte[] abyInBuffer = new byte[2];
                    GetKeyboardState(abyKeyState);
 
                    if(ToAscii(khs.vkCode, khs.scanCode, abyKeyState, abyInBuffer, khs.flags) == 1)
                    {
                        char chKey = (char) abyInBuffer[0];
                        if((bCapslock ^ bShift) && Char.IsLetter(chKey))
                            chKey = Char.ToUpper(chKey);
                        KeyPressEventArgs kpea = new KeyPressEventArgs(chKey);
                        OnKeyPress(kpea);
                        bHandled = kea.Handled;
                    }
                }
            }
 
            if(bHandled)
                return 1;
            else
                return CallNextHookEx(m_iHandleToHook, nCode, wParam, lParam);
        }
 
        #endregion // EVENTHANDLER

        #region EXTERN
 
        [DllImport("user32.dll", CharSet = CharSet.Auto, CallingConvention = CallingConvention.StdCall, SetLastError = true)]
        static extern int SetWindowsHookEx(int idHook, HookProc lpfn, IntPtr hMod, int dwThreadId);
 
        [DllImport("user32.dll", CharSet = CharSet.Auto, CallingConvention = CallingConvention.StdCall, SetLastError = true)]
        static extern int UnhookWindowsHookEx(int idHook);
 
        [DllImport("user32.dll", CharSet = CharSet.Auto, CallingConvention = CallingConvention.StdCall)]
        static extern int CallNextHookEx(int idHook, int nCode, int wParam, IntPtr lParam);
 
        [DllImport("user32.dll")]
        static extern int GetKeyboardState(byte[] pbKeyState);
 
        [DllImport("user32.dll", CharSet = CharSet.Auto, CallingConvention = CallingConvention.StdCall)]
        static extern short GetKeyState(int vKey);
 
        [DllImport("user32.dll")]
        static extern int ToAscii(int uVirtKey, int uScanCode, byte[] lpbKeyState, byte[] lpwTransKey, int fuState);
 
        [DllImport("kernel32.dll", CharSet = CharSet.Auto)]
        public static extern IntPtr GetModuleHandle(string lpModuleName);
 
        #endregion // EXTERN
    }
 
    #endregion // CLASS GlobalKeyboardHook
}
 
btw: This is .NET not Java - the convention is: type names start with capital letters...
GeneralRe: [My vote of 2] Sorry not perfect...memberVHong99923 Sep '11 - 16:45 
Hi Johannes,
 
Thanks for posting your code. I tried it and works perfectly for XP. However, when migrated to Windows 7, it works initially for several key strokes, but then it does not work as expected... I used the code to hook the keys for my application to control PowerPoint slide up and down by SendKeys method. Initially ok, but after ~10 key strokes, the PowerPoint does not respond to the keys. Does the code compliant with Windows 7? or any hint to change? thanks.
 
Best regards,
 
Vincent
GeneralI get an error....membermoni9425 May '10 - 0:42 
I've made a program using this hook and on about the 40th second I get an exception:
 
A callback was made on a garbage collected delegate of type 'SuperLogger!Utilities.globalKeyboardHook+keyboardHookProc::Invoke'. This may cause application crashes, corruption and data loss. When passing delegates to unmanaged code, they must be kept alive by the managed application until it is guaranteed that they will never be called.
 
That's quite weird. Any ideas?
GeneralRe: I get an error....membermahboobeh mohamadi31 Jan '11 - 20:08 
i have this error too.is there any solution????
و این منم زنی تنها در آستانه فصلی سرد...

GeneralStrange problem concernign Arrow Keys [modified]membermuff997 Apr '10 - 1:28 
Hi,
 
First of all, thanks for sharing this code!
 
Second: I got a problem using this code, I'm hooking some "normal" keys (like A, S, Q...) and the alt key. After a while (30-240 minutes), my application crashes. I surrounded all of my code with try-catches and debug output in the catch clause, so i'm almost sure its not my code that causes the crash (bold statement, I know ... not to be taken too seriously).
The only piece of information I found so far: The crash seems to occur shortly after using the arrow keys (which I did not hook).
 
My system: Win XP SP3, 32 Bit, german language
 
UPDATE: After testing some more, its not bound to the arrow keys ... it happens with all keys. I had some more crashes today that occured while I was typing.
modified on Wednesday, April 7, 2010 11:16 AM

GeneralOverride F1memberFullmetal9901229 Mar '10 - 8:24 
I need to use the F1 in my application, and ive tried e.handled, but everytime ive hit F1, it brings up help.
GeneralApp locks upmemberFullmetal9901228 Mar '10 - 10:41 
When I hook keys, and then press them, the app locks up for a second or two, then resumes. why does it do this?
GeneralKeyboard cant type!memberBuggingMe22 Mar '10 - 10:57 
Hi, i'm trying to make my program pick up any key and write it in a text file when i press F6, then, i want the text file to be read and all the text from it put into a TextBox on the form by pressing F7. I've looked at numerous posts such as the one with the _hookAll thing, but when i type ANYTHING on a text field with this function, nothing happens. the text doesnt even appear.
 
I'm making a spammer (for experimental reasons) and everything works. I want the user to be able to set a new message without going back to the Form (by pressing F6 to activate, F7 to set).
 
I might not even have to use streamwriter/reader to do this, it just seems an easier option for me.
 
So can someone tell me why and how to stop the program disabling my keyboard?
 
Thanks!
GeneralRe: Keyboard cant type!memberStormySpike23 Mar '10 - 14:10 
Hm, make sure that your KeyUp/KeyDown handlers return properly and that you are not setting e.Handled to true.
GeneralEXCELLENT! [modified]memberalexis410 Dec '09 - 9:05 
WOW! This is PERFECT!!! Short, representative, well organized and after I changed some things I have read from the posts it's WORKING! Exactly what I needed, thanks!
 
modified on Friday, January 1, 2010 10:00 AM

GeneralSystem.NullReferenceExceptionmemberMariusUt1 Dec '09 - 8:27 
Hi, I got the following error:
 
System.NullReferenceException: Object reference not set to an instance of an object.
at Utilities.globalKeyboardHook.CallNextHookEx(IntPtr idHook, Int32 nCode, Int32 wParam, keyboardHookStruct& lParam)
at Utilities.globalKeyboardHook.hookProc(Int32 code, Int32 wParam, keyboardHookStruct& lParam) in c:\Documents and Settings\Marius Utheim\Mine dokumenter\SharpDevelop Projects\Useful stuff\globalKeyboardHook.cs:line 109
at System.Windows.Forms.UnsafeNativeMethods.PeekMessage(MSG& msg, HandleRef hwnd, Int32 msgMin, Int32 msgMax, Int32 remove)
at System.Windows.Forms.Application.ComponentManager.System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FPushMessageLoop(Int32 dwComponentID, Int32 reason, Int32 pvLoopData)
at System.Windows.Forms.Application.ThreadContext.RunMessageLoopInner(Int32 reason, ApplicationContext context)
at System.Windows.Forms.Application.ThreadContext.RunMessageLoop(Int32 reason, ApplicationContext context)
at System.Windows.Forms.Application.Run(Form mainForm)
 
It seems to happen if I press two keys at the same time, or almost simultaneously. Do you know how to fix it?
GeneralExample worked, but in my program the most bizzare error...memberPhill6425 Nov '09 - 2:11 
Hi, I tried the sample and it worked well so without further thought I implemented it in my app. However when a key is pressed... i get the error "object reference not set to an instanc eof an object" now before you go jumping to conclusions let me tell you WHERE this error occurs... on the Application.Run(new Form1()); line in the main program file...
 
System.NullReferenceException: Object reference not set to an instance of an object.
at ComponentManager.System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FPushMessageLoop
at ThreadContext.RunMessageLoopInner
at ThreadContext.RunMessageLoop
at System.Windows.Forms.Application.Run
 
This will occur whenever ANY key is pressed, and all I need to do is create an instance of your class and it will happen.
 
Now I have gotten this error before in this app, it uses directx's audio object, and upon trying to stop an already stopped audio object this weird error would happen.. therefore I'm thinking the existance of these two things are to blame.. not that it makes much sense though...
GeneralRe: Example worked, but in my program the most bizzare error...memberPhill6425 Nov '09 - 10:30 
I used the "GetAsyncKeyState" dll call instead for my app. (difference between it and this is that it sniffs any key without having to hook to it, but for that reason doesn't provide a neat event, you poll it instead).
GeneralCallback ErrormemberVoulnet29 Oct '09 - 5:38 
Hello, I'm using your great hook class, and it's been responding great, until I needed to use Settings in Visual Studio!
Basically, I allow the user to save his settings; the settings of the modified key functions.
Just adding this line in the code generates an annoying error:
 
if (Properties.Settings.Default.DisableAll == false) { }
 
The error I'm getting is:
 
A callback was made on a garbage collected delegate of type 'key preview!Utilities.globalKeyboardHook+keyboardHookProc::Invoke'. This may cause application crashes, corruption and data loss. When passing delegates to unmanaged code, they must be kept alive by the managed application until it is guaranteed that they will never be called.
 
This is really stopping me from further progress, and I am completely unable to do anything about it, even MSDN experts are not capable to providing solutions!

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Rant Rant    Admin Admin   

Permalink | Advertise | Privacy | Mobile
Web01 | 2.6.130523.1 | Last Updated 30 May 2007
Article Copyright 2007 by StormySpike
Everything else Copyright © CodeProject, 1999-2013
Terms of Use
Layout: fixed | fluid