<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[Boss__Y的专栏]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/Boss__Y</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; Boss__Y]]></copyright><item><title><![CDATA[DLL劫持技术详解(lpk.dll)]]></title><link>https://blog.youkuaiyun.com/Boss__Y/article/details/45247605</link><guid>https://blog.youkuaiyun.com/Boss__Y/article/details/45247605</guid><author>Boss__Y</author><pubDate>Fri, 24 Apr 2015 15:53:38 +0800</pubDate><description><![CDATA[说起DLL劫持技术，相信大家都不会陌生，因为这种技术的应用比较广泛，比如木马后门的启动、破解程序的内存补丁、外挂插件的注入以及加密狗的模拟等。之所以DLL劫持技术深受黑客们的喜爱，主要是因为该技术可以有效的躲过大部分杀软，并且实现起来技术难度不大。DLL劫持技术也不是什么新技术，记得在《Windows核心编程》中也有提及相关技术。可是对我们广大初学者来说，DLL劫持技术就显得很神秘了，本系列教程将]]></description><category></category></item><item><title><![CDATA[查看进程启动参数]]></title><link>https://blog.youkuaiyun.com/Boss__Y/article/details/38945899</link><guid>https://blog.youkuaiyun.com/Boss__Y/article/details/38945899</guid><author>Boss__Y</author><pubDate>Sat, 30 Aug 2014 18:05:33 +0800</pubDate><description><![CDATA[有时候为了跟踪一些程序的行为，需要查看程序运行的启动参数

1. 启动游戏
2.在开始-->运行-->输入 cmd  回车
3.输入：WMIC  出来提示后 输入： process  就会显示所有的进程命令行信息了

以上，如果进程的启动参数很多，后面的看不到，可以使用以下办法

wmic process > process.txt]]></description><category></category></item><item><title><![CDATA[HOOK----send]]></title><link>https://blog.youkuaiyun.com/Boss__Y/article/details/32307271</link><guid>https://blog.youkuaiyun.com/Boss__Y/article/details/32307271</guid><author>Boss__Y</author><pubDate>Thu, 19 Jun 2014 08:34:04 +0800</pubDate><description><![CDATA[DWORD sendCode = 0x609E2FDA;//要写入的地址
DWORD sendNR;
DWORD JmpNextAddr = sendCode+5;//跳回地址
PBYTE pbData;

void DumpBuffer(PBYTE pBuffer,DWORD dwBufLen)
{
	CString sMessage; //最终结果
	sMessage.Empty();
	fo]]></description><category></category></item><item><title><![CDATA[远程线程注入]]></title><link>https://blog.youkuaiyun.com/Boss__Y/article/details/31729223</link><guid>https://blog.youkuaiyun.com/Boss__Y/article/details/31729223</guid><author>Boss__Y</author><pubDate>Tue, 17 Jun 2014 08:53:15 +0800</pubDate><description><![CDATA[DWORD GetProcessID(char *FileName)
{
HANDLE myhProcess;
PROCESSENTRY32 mype;
mype.dwSize = sizeof(PROCESSENTRY32); 
BOOL mybRet;
//进行进程快照
myhProcess=CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS,0); //T]]></description><category></category></item><item><title><![CDATA[封装CTabCtrl--->CTabSheet]]></title><link>https://blog.youkuaiyun.com/Boss__Y/article/details/30987347</link><guid>https://blog.youkuaiyun.com/Boss__Y/article/details/30987347</guid><author>Boss__Y</author><pubDate>Sun, 15 Jun 2014 14:50:47 +0800</pubDate><description><![CDATA[MFC中的CTabCtrl控件用起来特别麻烦分装]]></description><category></category></item><item><title><![CDATA[钩子DLL注入]]></title><link>https://blog.youkuaiyun.com/Boss__Y/article/details/30869095</link><guid>https://blog.youkuaiyun.com/Boss__Y/article/details/30869095</guid><author>Boss__Y</author><pubDate>Sun, 15 Jun 2014 00:36:50 +0800</pubDate><description><![CDATA[//1.新建mfc工程dll
//2.给工程添加窗体资源IDD_DIALOG1
//3.给窗体添加基于Cdialog的一个类CZRDlg
//4.给ZRDlg.h加上#include "resource.h"头文件，否则类中添加了资源编译会不通过
//5.在工程的def文件中导出StartHook

CZRDlg *dlg=NULL;

LRESULT CALLBACK HookPro(int n]]></description><category></category></item><item><title><![CDATA[标准动态dll编写和调用]]></title><link>https://blog.youkuaiyun.com/Boss__Y/article/details/30773687</link><guid>https://blog.youkuaiyun.com/Boss__Y/article/details/30773687</guid><author>Boss__Y</author><pubDate>Sat, 14 Jun 2014 19:14:52 +0800</pubDate><description><![CDATA[#include "stdafx.h"
#include "stdio.h"

BOOL APIENTRY DllMain( HANDLE hModule, 
                       DWORD  ul_reason_for_call, 
                       LPVOID lpReserved
					 )
{   
	switch(ul_reas]]></description><category></category></item></channel></rss>