分享几个dll劫chi源码

DDSGXQ

winmm.dll，lpk.dll，version.dll，msimg32.dll，ws2help.dll
注：lpk.dll劫chi仅在XP下有效，win7/8/8.1/10需要导入zc表。
劫chi原理：
默认情况下，程序运行需要加载诸多dll链接库文件，而这些dll大部分存在于win操作系统的system32目录下，当程序开始运行时就加载dll实现一些功能。
如果程序目录下含有一些与加载系统dll同名的dll时，如有一个winmm.dll，那么程序会首先加载程序目录下的dll，系统的dll将会被忽略。
因此可通过dll劫chi实现内存操作，达到修改内存数据，破J的目的。
使用方法：
OD载入需破J的文件，运行，点击按钮E，查看模块加载信息，以上5个哪个先被加载，就是哪个劫chi模块。
打开对应源码，子程序命令：_启动子程序() 下写关于HOOK具体函数，可直接新建一个程序集进行引用。最后静态编译为对应劫chidll名，放在要破J的目下即可。
自用源码[网络收集]：
DLL劫持.zip (56.09 KB, 下载次数: 252)

2018-6-9 10:26 上传

点击文件名下载附件

tiantian11

大神，静态编译的时候出现如下错误是怎么回事啊？求解
winmm.lib(WINMM.dll) : error LNK2005: _midiStreamRestart@4 already defined in winmm.obj
winmm.lib(WINMM.dll) : error LNK2005: _midiStreamClose@4 already defined in winmm.obj
winmm.lib(WINMM.dll) : error LNK2005: _midiOutReset@4 already defined in winmm.obj
winmm.lib(WINMM.dll) : error LNK2005: _midiStreamStop@4 already defined in winmm.obj
winmm.lib(WINMM.dll) : error LNK2005: _midiStreamPause@4 already defined in winmm.obj
winmm.lib(WINMM.dll) : error LNK2005: _midiOutShortMsg@8 already defined in winmm.obj
winmm.lib(WINMM.dll) : error LNK2005: _midiStreamOut@12 already defined in winmm.obj
winmm.lib(WINMM.dll) : error LNK2005: _midiOutPrepareHeader@12 already defined in winmm.obj
winmm.lib(WINMM.dll) : error LNK2005: _midiStreamProperty@12 already defined in winmm.obj
winmm.lib(WINMM.dll) : error LNK2005: _midiStreamOpen@24 already defined in winmm.obj
winmm.lib(WINMM.dll) : error LNK2005: _midiOutUnprepareHeader@12 already defined in winmm.obj
winmm.lib(WINMM.dll) : error LNK2005: _waveOutOpen@24 already defined in winmm.obj
winmm.lib(WINMM.dll) : error LNK2005: _waveOutGetNumDevs@0 already defined in winmm.obj
winmm.lib(WINMM.dll) : error LNK2005: _waveOutClose@4 already defined in winmm.obj
winmm.lib(WINMM.dll) : error LNK2005: _waveOutReset@4 already defined in winmm.obj
winmm.lib(WINMM.dll) : error LNK2005: _waveOutPause@4 already defined in winmm.obj
winmm.lib(WINMM.dll) : error LNK2005: _waveOutWrite@12 already defined in winmm.obj
winmm.lib(WINMM.dll) : error LNK2005: _waveOutPrepareHeader@12 already defined in winmm.obj
winmm.lib(WINMM.dll) : error LNK2005: _waveOutUnprepareHeader@12 already defined in winmm.obj
winmm.lib(WINMM.dll) : warning LNK4006: _midiStreamRestart@4 already defined in winmm.obj; second definition ignored
winmm.lib(WINMM.dll) : warning LNK4006: _midiStreamClose@4 already defined in winmm.obj; second definition ignored
winmm.lib(WINMM.dll) : warning LNK4006: _midiOutReset@4 already defined in winmm.obj; second definition ignored
winmm.lib(WINMM.dll) : warning LNK4006: _midiStreamStop@4 already defined in winmm.obj; second definition ignored
winmm.lib(WINMM.dll) : warning LNK4006: _midiStreamPause@4 already defined in winmm.obj; second definition ignored
winmm.lib(WINMM.dll) : warning LNK4006: _midiOutShortMsg@8 already defined in winmm.obj; second definition ignored
winmm.lib(WINMM.dll) : warning LNK4006: _midiStreamOut@12 already defined in winmm.obj; second definition ignored
winmm.lib(WINMM.dll) : warning LNK4006: _midiOutPrepareHeader@12 already defined in winmm.obj; second definition ignored
winmm.lib(WINMM.dll) : warning LNK4006: _midiStreamProperty@12 already defined in winmm.obj; second definition ignored
winmm.lib(WINMM.dll) : warning LNK4006: _midiStreamOpen@24 already defined in winmm.obj; second definition ignored
winmm.lib(WINMM.dll) : warning LNK4006: _midiOutUnprepareHeader@12 already defined in winmm.obj; second definition ignored
winmm.lib(WINMM.dll) : warning LNK4006: _waveOutOpen@24 already defined in winmm.obj; second definition ignored
winmm.lib(WINMM.dll) : warning LNK4006: _waveOutGetNumDevs@0 already defined in winmm.obj; second definition ignored
winmm.lib(WINMM.dll) : warning LNK4006: _waveOutClose@4 already defined in winmm.obj; second definition ignored
winmm.lib(WINMM.dll) : warning LNK4006: _waveOutReset@4 already defined in winmm.obj; second definition ignored
winmm.lib(WINMM.dll) : warning LNK4006: _waveOutPause@4 already defined in winmm.obj; second definition ignored
winmm.lib(WINMM.dll) : warning LNK4006: _waveOutWrite@12 already defined in winmm.obj; second definition ignored
winmm.lib(WINMM.dll) : warning LNK4006: _waveOutPrepareHeader@12 already defined in winmm.obj; second definition ignored
winmm.lib(WINMM.dll) : warning LNK4006: _waveOutUnprepareHeader@12 already defined in winmm.obj; second definition ignored

985778113

看看                        

1229338788

谢谢分享，支持开源

110356776

很好  感谢分享

roc110

有点没看懂

Hooksafe

看看                       

dljy

#在这里快速回复#支持开源~！感谢分享

fyhfzt

有创意，学习了

dszbox471

谢谢分享哦！~