远程注入DLL代码,C代码库,德仔网

代码语言

代码分类

【C】远程注入DLL

作者:一如当初 / 发布于2014/6/17/ 880

通过CreateRemoteThread注入DLL文件到目标进程。


	static bool InjectDll(DWORD pid, LPCWSTR dllFilePath)
	{
	 bool result = false;
	 HANDLE hProcess = OpenProcess(PROCESS_ALL_ACCESS, FALSE, pid);
	 if (hProcess != 0)
	 {
	 size_t len = wcslen(dllFilePath);
	 LPVOID address = VirtualAllocEx(hProcess, nullptr, len + sizeof(WCHAR), MEM_COMMIT, PAGE_EXECUTE_READWRITE);
	 if (address != nullptr)
	 {
	 if (WriteProcessMemory(hProcess, address, dllFilePath, len, nullptr))
	 {
	 FARPROC proc = GetProcAddress(GetModuleHandleW(L"kernel32"), "LoadLibraryW");
	 if (proc != nullptr)
	 {
	 HANDLE thread = CreateRemoteThread(hProcess, nullptr, 0, (LPTHREAD_START_ROUTINE)proc, address, 0, nullptr);
	 if (thread != 0)
	 {
	 if (WaitForSingleObject(thread, INFINITE) == WAIT_OBJECT_0)
	 {
	 result = true;
	 }
	 CloseHandle(thread);
	 }
	 }
	 }
	 VirtualFreeEx(hProcess, address, 0, MEM_RELEASE);
	 }
	 CloseHandle(hProcess);
	 }
	 return result;
	}

试试其它关键字

　远程注入　　注入DLL　

同语言下

可能有用的

一如当初贡献的其它代码(2)