NtOpenFile

最新推荐文章于 2021-10-03 12:06:28 发布

王cb

最新推荐文章于 2021-10-03 12:06:28 发布

阅读量960

点赞数

始于C#，精于C&C++，醉心于Windows内核与Com组件安全研究

本文链接：https://blog.csdn.net/oShuangYue12/article/details/88373130

版权

OBJECT_ATTRIBUTES vObjectAttributes;
		UNICODE_STRING ustrObjectName;
		WCHAR ptcsName[MAX_PATH] = { 0 };
		//WCHAR ptcsNameRet[MAX_PATH] = L"\\??\\";
		WCHAR ptcsNameRet[MAX_PATH] = L"\\??\\c:\\dl\\1.txt";
		
		RtlInitUnicodeString(&ustrObjectName, ptcsNameRet);
		InitializeObjectAttributes(&vObjectAttributes, &ustrObjectName, OBJ_CASE_INSENSITIVE, nullptr, nullptr);
		IO_STATUS_BLOCK IoStatusBlock;
		status = NtOpenFile(&pNTHandle, FILE_READ_ATTRIBUTES, &vObjectAttributes, &IoStatusBlock, 1 | 4, NULL);
		if (FAILED(status))
		{
			printf("[!] Error NtOpenFile :%d\n", GetLastError());
		}