远程线程注入

小生怕怕啊

1. #include <windows.h>
   
2. #include <iostream>
   
3. #include <TLHELP32.H>
   
4. using namespace std;
   
5. 
   
6. int main()
   
7. {
   
8. char* TargetProcess="notepad.exe"; //目标进程
   
9. char* TargetDllPath="d:\\play.dll"; //目标DLL路径
   
10. DWORD pid=-1; //进程ID
    
11. HANDLE hSnap=CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS,0); //获取进程快照
    
12. PROCESSENTRY32 pe; //进程信息
    
13. ZeroMemory(&pe,sizeof(pe));
    
14. pe.dwSize=sizeof(pe);
    
15. BOOL bProcess= Process32First(hSnap,&pe); //获取首个进程信息
    
16. while (bProcess)
    
17. {
    
18. cout<<pe.szExeFile<<endl;
    
19. if (strstr(TargetProcess,pe.szExeFile))
    
20. {
    
21. pid=pe.th32ProcessID;
    
22. break;
    
23. }
    
24. bProcess= Process32Next(hSnap,&pe);
    
25. }
    
26. CloseHandle(hSnap);
    
27. LPTHREAD_START_ROUTINE pLoadLibrary=(LPTHREAD_START_ROUTINE)GetProcAddress(GetModuleHandle("kernel32.dll"),"LoadLibraryA"); //获取函数地址
    
28. if (pLoadLibrary==NULL)
    
29. {
    
30. cout<<"获取函数地址失败\n！";
    
31. }
    
32. else
    
33. {
    
34. cout<<pLoadLibrary<<endl;
    
35. HANDLE hProcess= OpenProcess(PROCESS_ALL_ACCESS,false,pid); //打开进程
    
36. if (hProcess)
    
37. {
    
38. LPVOID DllAddress= VirtualAllocEx(hProcess,NULL,strlen(TargetDllPath),MEM_COMMIT,PAGE_READWRITE); //申请空间
    
39. if (DllAddress==NULL)
    
40. {
    
41. cout<<"申请空间失败！\n";
    
42. }
    
43. else
    
44. {
    
45. cout<<DllAddress<<endl;
    
46. if (WriteProcessMemory(hProcess,DllAddress,TargetDllPath,strlen(TargetDllPath),NULL))
    
47. {
    
48. DWORD dwThreadId;
    
49. HANDLE hThread;
    
50. hThread= CreateRemoteThread(hProcess,NULL,0,pLoadLibrary,TargetDllPath,0,&dwThreadId); //创建远程线程
    
51. if (hThread==NULL)
    
52. {
    
53. cout<<"创建远程线程失败！\n";
    
54. }
    
55. else
    
56. {
    
57. cout<<"创建远程线程成功！\n";
    
58. WaitForSingleObject(hThread,INFINITE); //等待线程返回
    
59. VirtualFreeEx(hProcess,DllAddress,strlen(TargetDllPath),MEM_RELEASE); //释放空间
    
60. CloseHandle(hThread); //关闭线程句柄
    
61. CloseHandle(hProcess); //关闭进程句柄
    
62. }
    
63. }
    
64. else
    
65. {
    
66. cout<<"写入DLL路径失败！\n";
    
67. }
    
68. 
    
69. }
    
70. }
    
71. else
    
72. {
    
73. cout<<"打开进程失败！\n";
    
74. }
    
75. }
    
76. system("pause");
    
77. return 0;
    
78. }

复制代码

tiantianle

好像有BUG

MCQTSS

无法注入javaw进程。。。创建远程线程失败

低调小鱼鱼

6666666666666

素颜

什么东西啊···

Icpower

这种注入兼容型不行的