CreateRemoteThread 远程注入

 

反编译用

跟钩子写在同一个dll了 钩子篇:SetWindowsHookEx

 

pch.h

#ifndef PCH_H
#define PCH_H
#define _DLLAPI
#define _CRT_SECURE_NO_WARNINGS
// 添加要在此处预编译的标头
#include "te.h"
#include <stdio.h>

 

dll :

te.h

#pragma once

#ifdef  _DLLAPI
	#define DLLAPI extern "C"  __declspec(dllexport)
#else
	#define DLLAPI extern "C"  __declspec(dllimport)
#endif

DLLAPI BOOL install_hook();

DLLAPI BOOL uninstall_hook();


DLLAPI int enableDebugPriv(const TCHAR * name);

DLLAPI int fuck_it(DWORD pid);

te.cpp

#include "pch.h"
#include <stdlib.h>

#pragma data_seg("shared_data")
HHOOK hook = 0;
FILE* pFile = 0;
#pragma data_seg()
#pragma comment(linker,"/section:s