



版權(quán)說(shuō)明:本文檔由用戶提供并上傳,收益歸屬內(nèi)容提供方,若內(nèi)容存在侵權(quán),請(qǐng)進(jìn)行舉報(bào)或認(rèn)領(lǐng)
文檔簡(jiǎn)介
c#實(shí)現(xiàn)過(guò)程:過(guò)程一:找到當(dāng)前鼠標(biāo)位置的句柄您的使用2個(gè)WinAPI(俺喜歡自己封裝下來(lái)用):田日ViewCode[Dlllmport( EntryPoint="GetCursorPos")]publicstaticexternboolGetCursorPos(outPointpt);[Dlllmport("",EntryPoint="WindowFromPoint")]publicstaticexternIntPtrWindowFromPoint(Pointpt);SBEHEBndexOf;)publicoverridestringToString()(StringBuilderresult= newStringBuilder();for(WinHWNDwinHandle=this;winHandle!=null(( "{0}:{1};" ,Escape,if==-1)break;;winHandle=return().TrimEnd();privatestaticstringGetBaseMark(stringsMark)string[]sMarks=();returnsMarks[-1].Split()[0];privatestaticstring[]GetChildMarks(stringsMark)string[]sMarks=();string[]sChildMarks=newstring[-string[]sChildMarks=newstring[-1];for(inti=0;i<;isChildMarks[i]=sMarks[i];returnsChildMarks;foreach(IntPtrbaseHwndinbaseHwnds)IntPtrhandle=baseHwnd;for(inti=- 1;i>= 0;i-)string[]sChildMark=sChildMarks[i].Split(tryhandle=(handle,UnEscape(sChildMark[catch);O]))[(sChildMark[1])];break;if(i==0)returnnewWinHWND(handle);}continue;)returnnull;#region轉(zhuǎn)義privatestaticprivatestaticstringEscape(stringarg)return(").Replace( );privatestaticprivatestaticstringUnEscape(stringarg)return().Replace( );#endregionpublicstaticWinHWNDGetWinHWND()(returnnewWinHWND()));))上全部代碼,里面加了窗口的部分屬性,擴(kuò)展其他的屬性,自己發(fā)揮吧,就是搞WinAPI田臼ViewCodeusingSystem;usingusing;using;usingusing;using;namespacelnformationCollectionDataF川publicclassWinAPI#regionWinodwsAPI[Dlllmport("",EntryPoint"FindWindow")]privatestaticexternIntPtrFindWindow(stringIpCIassName,stringIpWindowName);[Dlllmport("",EntryPoint="FindWindowEx")]privatestaticexternIntPtrFindWindowEx(lntPtrhwndParent,IntPtrhwndChildAfter, stringIpszClass,stringIpszWindow);[Dlllmport( "",EntryPoint= "SendMessage")]privatestaticexternintSendMessage(lntPtrhWnd,intMsg,IntPtrwParam,stringIParam);[Dlllmport( "",EntryPoint= "GetParent")]publicstaticexternIntPtrGetParent(lntPtrhWnd);[Dlllmport( Entrypoint="GetCursorPos")]publicstaticexternboolGetCursorPos(outPointpt);[Dlllmport("",EntryPoint="WindowFromPoint",CharSet=,ExactSpelling=true)]publicstaticexternIntPtrWindowFromPoint(Pointpt);[Dlllmport( "",CharSet=]publicstaticexternintGetClassName(lntPtrhWnd,StringBuilderIpCIassName,intnMaxCount);[Dlllmport( "",CharSet=]
public[Dlllmport(public[Dlllmport(public[Dlllmport(public[Dlllmport(public"",CharSet=]static extern int GetWindowRect(lntPtrhwnd, ref Rectanglerc);"",CharSet=]static extern int GetClientRect(lntPtrhwnd, ref Rectanglerc);"",CharSet=]static extern int MoveWindow(lntPtrhwnd, int x, inty,intnWidth, intnHeight,boolbRepaint);[Dlllmport([Dlllmport("",CharSet=,SetLastError=true,ExactSpelling=true)]publicstaticexternintScreenToClient(lntPtrhWnd,refRectanglerect);#endregion#region封裝API方法ndexOf;}privateRectangleGetRect()(if==null)returndefault(Rectangle);Rectangleclientsize=;RectangleclientPoint=);returnnewRectangle,,,;)publicstaticWinHWNDGetWinHWND()returnnewWinHWND()));)publicoverridestringToStringOStringBuilderresult=newStringBuilder();for(WinHWNDwinHandle=this;winHandle!=null"{0}:{1};" ,Escape,if==-1)break;return().TrimEnd();)privatestaticstringGetBaseMark(stringsMark);winHandle=string[]sMarks=();returnsMarks[-1].Split()[0];)privatestaticstring[]GetChildMarks(stringsMark)string[]sMarks=();string[]sChildMarks=newstring[-1];for(inti=0;i<;i++)sChildMarks[i]=sMarks[i];returnsChildMarks;)foreach(IntPtrbaseHwndinbaseHwnds)IntPtrhandle=baseHwnd;for(inti=- 1;i>= 0;i-)tryhandle=(handle,UnEscape(sChildMark[catchbreak;if0)returnnewWinHWND(handle);ifO]))[(sChildMark[1])];continue;returnnull;)#region轉(zhuǎn)義privatestaticstringEscape(stringarg)return( ).Replace( );privatestaticstringUnEscape(stringarg),).Replace( );,).Replace( );}#endregion)}效果:Postsubject:DllInjectionThisismyoldtutorialondllinjection...peoplehavebeenaskingaboutthistopicabitrecently,so...hereitis:DllInjectionTutorialbyDarawkIntroductionTheCreateRemoteThreadmethodTheSetWindowsHookExmethodThecodecavemethodAppendixA-MethodsofobtainingaprocessIDAppendixB-MethodsofobtainingathreadIDAppendixC-CompleteCreateRemoteThreadexamplesourcecodeAppendixD-CompleteSetWindowsHookExexamplesourcecodeAppendixE-CompletecodecaveexamplesourcecodeIntroductionInthistutoriali'lltrytocoveralloftheknownmethods(oratleast,thosethatIknow=p)ofinjectingdll'sintoaprocess.DllinjectionisincrediblyusefulforTONSofstuff(gamehacking,functionhooking,codepatching,keygenning,unpacking,etc..).Thoughtherearescatteredtutorialsonthesetechniquesavailablethroughouttheweb,Ihaveyettoseeanycompletetutorialsdetailingallofthem(theremayevenbemoreouttherethanIhavehere,ofcourse),andcomparingtheirrespectivestrength'sandweakness's.Thisispreciselywhati'llattempttodoforyouinthispaper.Youarefreetoreproduceorcopythispaper,solongaspropercreditisgivenandyoudon'tmodifyitwithoutspeakingtomefirst.TheCreateRemoteThreadmethodI'veusedthisintonsofstuff,andIonlyrecentlyrealizedthatalotofpeoplehaveneverseenit,orknowhowtodoit.Ican'ttakecreditforthinkingitup...Igotitfromanarticleoncodeproject,butit'saneattrickthatIthinkmorepeopleshouldknowhowtouse.Thetrickissimple,andelegant.ThewindowsAPIprovidesuswithafunctioncalledCreateRemoteThread().Thisallowsyoutostartathreadinan
溫馨提示
- 1. 本站所有資源如無(wú)特殊說(shuō)明,都需要本地電腦安裝OFFICE2007和PDF閱讀器。圖紙軟件為CAD,CAXA,PROE,UG,SolidWorks等.壓縮文件請(qǐng)下載最新的WinRAR軟件解壓。
- 2. 本站的文檔不包含任何第三方提供的附件圖紙等,如果需要附件,請(qǐng)聯(lián)系上傳者。文件的所有權(quán)益歸上傳用戶所有。
- 3. 本站RAR壓縮包中若帶圖紙,網(wǎng)頁(yè)內(nèi)容里面會(huì)有圖紙預(yù)覽,若沒(méi)有圖紙預(yù)覽就沒(méi)有圖紙。
- 4. 未經(jīng)權(quán)益所有人同意不得將文件中的內(nèi)容挪作商業(yè)或盈利用途。
- 5. 人人文庫(kù)網(wǎng)僅提供信息存儲(chǔ)空間,僅對(duì)用戶上傳內(nèi)容的表現(xiàn)方式做保護(hù)處理,對(duì)用戶上傳分享的文檔內(nèi)容本身不做任何修改或編輯,并不能對(duì)任何下載內(nèi)容負(fù)責(zé)。
- 6. 下載文件中如有侵權(quán)或不適當(dāng)內(nèi)容,請(qǐng)與我們聯(lián)系,我們立即糾正。
- 7. 本站不保證下載資源的準(zhǔn)確性、安全性和完整性, 同時(shí)也不承擔(dān)用戶因使用這些下載資源對(duì)自己和他人造成任何形式的傷害或損失。
最新文檔
- 消防水電工程合同
- 辦公室行政人員聘用合同
- 聘用至退休合同續(xù)簽書(shū)
- 小區(qū)智能化系統(tǒng)工程合同書(shū)
- 電信行業(yè)通信設(shè)備維護(hù)服務(wù)合同
- 9 種豆子 教學(xué)設(shè)計(jì)-2023-2024學(xué)年科學(xué)二年級(jí)下冊(cè)冀人版
- 第6課 從隋唐盛世到五代十國(guó) 教學(xué)設(shè)計(jì)-2023-2024學(xué)年統(tǒng)編版(2019)高中歷史必修中外歷史綱要上冊(cè)
- Unit 6 Nurturing Nature Developing ideas The best job in the world 教學(xué)設(shè)計(jì) -2024-2025學(xué)年高二英語(yǔ)外研版(2019)選擇性必修第一冊(cè)
- 石家莊水泥檢查井施工方案
- 小學(xué)四年級(jí)數(shù)學(xué)幾百幾十?dāng)?shù)乘以一位數(shù)質(zhì)量作業(yè)習(xí)題大全附答案
- 2023新一代變電站二次系統(tǒng)技術(shù)規(guī)范第3部分:綜合應(yīng)用主機(jī)
- 2024年高考真題-英語(yǔ)(新高考Ⅰ卷) 含解析
- TSHJX 061-2024 上海市域鐵路工程施工監(jiān)測(cè)技術(shù)規(guī)范
- 行為矯正原理與方法課件
- 蛇膽川貝液在動(dòng)物模型中的藥理作用研究
- GB/T 44260-2024虛擬電廠資源配置與評(píng)估技術(shù)規(guī)范
- 腫瘤科醫(yī)生年度工作總結(jié)報(bào)告
- AQ 1064-2008 煤礦用防爆柴油機(jī)無(wú)軌膠輪車(chē)安全使用規(guī)范(正式版)
- 比亞迪公司應(yīng)收賬款管理的問(wèn)題及對(duì)策分析
- 【高考真題】2024年新課標(biāo)全國(guó)Ⅱ卷高考語(yǔ)文真題試卷(含答案)
- 旅游服務(wù)質(zhì)量評(píng)價(jià)體系
評(píng)論
0/150
提交評(píng)論