• 控制台注入DLL代码


    // zhuru.cpp : 定义控制台应用程序的入口点。
    
    #include "stdafx.h"
    #include <Windows.h>
    #define GameClassName "classFoxitReader"
    #define dllName "GameDLL.dll"
    
    void zhuru(HWND hGame,const char* DllNameFullpath);
    int _tmain(int argc, _TCHAR* argv[])
    {
        HWND hGame = FindWindowA(GameClassName,NULL);
        char DirName[256]="";
        char DllNameFullpath[256]="";
        GetCurrentDirectoryA(sizeof(DirName),DirName);
        strcpy_s(DllNameFullpath,DirName);
        strcat_s(DllNameFullpath,"\");
        strcat_s(DllNameFullpath,dllName);
        printf("%s
    ",DllNameFullpath);
        zhuru(hGame,DllNameFullpath);
        //getchar();
        return 0;
    }
    void zhuru(HWND hGame,const char* DllNameFullpath)
    {
        
        DWORD pid;
        HANDLE hProcess;
        LPWORD AddressDW;
        DWORD byWriteSize;
        HANDLE hThread;
        
            if (hGame!=NULL)
            {
                GetWindowThreadProcessId(hGame,&pid);
                if (pid!=NULL)
                {
                    hProcess = OpenProcess(PROCESS_ALL_ACCESS,FALSE,pid);
                    if (hProcess!=NULL)
                    {
                        AddressDW = (LPWORD)VirtualAllocEx(hProcess,NULL,256,MEM_COMMIT,PAGE_READWRITE);
                        if (AddressDW!=NULL)
                        {
                            WriteProcessMemory(hProcess,AddressDW,DllNameFullpath,strlen(DllNameFullpath)+1,&byWriteSize);
                            if (byWriteSize>=strlen(DllNameFullpath))
                            {
                                hThread = CreateRemoteThread(hProcess,NULL,NULL,(LPTHREAD_START_ROUTINE)LoadLibraryA,AddressDW,NULL,NULL);
                                WaitForSingleObject(hThread,0xFFFFFFF);
                                CloseHandle(hThread);
                                VirtualFreeEx(hProcess,AddressDW,256,MEM_COMMIT);
                                CloseHandle(hProcess);
                            }
                        }
                    }
                }
            }
        
            return;
    }
  • 相关阅读:
    弱口令扫描.python脚本
    扫描web目录的Python小脚本
    Linux /etc目录重要文件
    linux(centos7)系统优化
    泛型程序设计
    对象包装器与自动装箱
    打包apk时,提示:error: Error: Resource is not public.
    SpringMVC分页实现
    IDEA搭建基于maven 的SSM框架
    ssm框架搭建
  • 原文地址:https://www.cnblogs.com/wumac/p/4167184.html
Copyright © 2020-2023  润新知