密码查看器(线程注入)

最新推荐文章于 2024-06-04 12:07:31 发布

stackoverlow

最新推荐文章于 2024-06-04 12:07:31 发布

阅读量1k

点赞数

分类专栏：程序编年史文章标签： listview null callback winapi hook dependencies

本文链接：https://blog.csdn.net/xiaokint3/article/details/8100276

版权

本文介绍了一种利用远程线程注入技术来获取密码框中隐藏字符的方法。通过DLL实现，结合WinAPI、Hook及Callback机制，详细探讨了如何在不影响程序正常运行的情况下读取密码数据。

摘要由CSDN通过智能技术生成

采用远程线程注入技术，获得一般的密码框*号下的数据

DLL实现：

#ifdef __cplusplus
#define EXPORT extern "C" __declspec (dllexport)
#else
#define EXPORT __declspec (dllexport)
#endif

extern "C" void ThreadProc (PVOID pvoid);
extern "C" BOOL CALLBACK WndProc (HWND hwnd, UINT message, WPARAM wParam, LPARAM lParam);

EXPORT BOOL Set_Hook(DWORD dwThreadId, DWORD dwMessageId, BOOL bInstall);

#include <windows.h>
#include <process.h>
#include "resource.h"
#include "Dll.h"

HINSTANCE hInst;
HHOOK	g_hhook;	//hook handle
TCHAR   g_szPassWord[MAX_PATH];//密码框数据

#pragma comment(linker,"/manifestdependency:\"type='win32' name='Microsoft.Windows.Common-Controls' version='6.0.0.0'\
						processorArchitecture='x86' publicKeyToken='6595b64144ccf1df' language='*'\"")

#define WM_HOOK WM_USER+0x100		//钩子和主窗口通信的消息(这里没用到，钩子如果放在DLL中就需要了)

BOOL Set_Hook(DWORD dwThreadId, DWORD dwMessageId, BOOL bInstall);
static LRESULT WINAPI HookProc(int code, WPARAM wParam, LPARAM lParam) ;

int WINAPI DllMain (HINSTANCE hInstance, DWORD fdwReason, PVOID pvReserved)
{
	if ( fdwReason == DLL_PROCESS_ATTACH)
	{
		hInst	= hInstance;
	}
    return TRUE ;
}

extern "C" void ThreadProc (PVOID pvoid)
{
	DialogBoxParam (hInst, MAKEINTRESOURCE (IDD_DIALOG), NULL, WndProc, NULL);
}

extern "C" BOOL CALLBACK WndProc (HWND hwnd, UINT message, WPARAM wParam, LPARAM lParam)
{
     static TCHAR pText[MAX_PATH] ;
     HGLOBAL      hGlobal ;
     PTSTR        pGlobal ;

	switch (message)
	{
		case WM_INITDIALOG:
			SetDlgItemText(hwnd, IDC_EDIT, g_szPassWord);
			SetWindowPos(hwnd,HWND_TOPMOST, 0, 0, 0, 0, SWP_NOMOVE | SWP_NOSIZE);
			return true;

		case WM_COMMAND:
			switch (LOWORD(wParam) )
			{

				case IDOK:  //复制数据
					if (!pText)
					    return 0 ;
					GetDlgItemText(hwnd, IDC_EDIT, pText, sizeof(pText) );
					hGlobal = GlobalAlloc (GHND | GMEM_SHARE, 
                                      (lstrlen (pText) + 1) * sizeof (TCHAR)) ;
					pGlobal = (PTSTR)GlobalLock (hGlobal) ;
				    lstrcpy (pGlobal, pText) ;
					GlobalUnlock (hGlobal) ;

					OpenClipboard (hwnd) ;
					EmptyClipboard () ;
					if (SetClipboardData (CF_UNICODETEXT, hGlobal)  )
						MessageBox(hwnd, L"数据复制成功", L"恭喜", NULL);
					CloseClipboard () ;
					break;

				case IDCANCEL:
					EndDialog (hwnd, 0);