枚举进程

枚举进程

1、通过系统快照完成枚举系统进程

#include <Windows.h>
#include <TlHelp32.h>
#include <stdio.h>

int main()
{
	PROCESSENTRY32 processEntry = {0};
	HANDLE hProcessSnap = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS,0);	//创建进程（TH32CS_SNAPPROCESS）的快照，并返回句柄
	if (hProcessSnap == INVALID_HANDLE_VALUE)			//如果非法
		return -1;
	processEntry.dwSize = sizeof(PROCESSENTRY32);
	BOOL bRet = Process32First(hProcessSnap,&processEntry);
	while (bRet)
	{
		printf("%s,进程ID:%d\n",  processEntry.szExeFile,processEntry.th32ProcessID);
		bRet = Process32Next(hProcessSnap, &processEntry);
	}
	printf("hello World!\n");
	system("pause");
	return 0;
}

2、通过枚举进程

/*记得要添加在工程->配置属性->链接器->输入->附加依赖项->增加psapi.lib*/
#include <Windows.h>
#include <stdio.h>
#include <Psapi.h>
#include <stdlib.h>

BOOL UpdateProcessPrivilege(HANDLE hProcess,LPCTSTR lpPrivilegeName = SE_DEBUG_NAME);//提供权限函数声明

int main()
{
	//提示权限
	UpdateProcessPrivilege(GetCurrentProcess());
	DWORD ProcessId[1024];
	DWORD cbNeeded;
	DWORD processcount;

	if (!EnumProcesses(ProcessId, sizeof(ProcessId), &cbNeeded))
	{
		printf("Failed\n");
		return -1;
	}
	processcount = cbNeeded / sizeof(DWORD);	//计算一共有几个进程
	printf("当前一共有%d个进程\n\n", processcount);

	for (DWORD i = 0; i < processcount;i++)
	{
		HANDLE hProcess = OpenProcess(PROCESS_QUERY_INFORMATION|PROCESS_VM_READ,FALSE,ProcessId[i]);//要打开进程，就要提高本身的权限
		if (hProcess)
		{
			printf("\nProcessID:%d打开成功\n",ProcessId[i]);
		}else
		{
			printf("\nProcessID:%d打开失败\n", ProcessId[i]);
			}
	}
	system("pause");
	return 0;
}

BOOL UpdateProcessPrivilege(HANDLE hProcess, LPCTSTR lpPrivilegeName)
{
	HANDLE hToken;
	int iResult;
	TOKEN_PRIVILEGES TokenPrivileges;

	if (OpenProcessToken(hProcess, TOKEN_ALL_ACCESS, &hToken))
	{
		LUID destLuid;
		if (LookupPrivilegeValue(NULL, lpPrivilegeName, &destLuid))
		{
			TokenPrivileges.PrivilegeCount = 1;
			TokenPrivileges.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;
			TokenPrivileges.Privileges[0].Luid = destLuid;

			if (iResult = AdjustTokenPrivileges(hToken, FALSE, &TokenPrivileges, 0, NULL, NULL)){
				return TRUE;
			}
		}
	}
	return FALSE;
}