VB创建SYSTEM用户进程(第二种方法)

最新推荐文章于 2021-02-19 21:21:01 发布

chenhui530

最新推荐文章于 2021-02-19 21:21:01 发布

阅读量3.7k

点赞数

CC 4.0 BY-SA版权

分类专栏： VB原创文章标签： system vb function attributes access object

本文链接：https://blog.youkuaiyun.com/chenhui530/article/details/1807937

这篇博客介绍了如何在VB中利用NTDLL.DLL库的NtCreateProcessEx函数创建一个SYSTEM权限级别的用户进程。通过声明并调用相关API，设置访问权限，并利用回调函数来实现这一过程。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

Attribute VB_Name = "modHook"
Private Declare Function NtCreateProcessEx Lib "NTDLL.DLL" (ByRef ProcessHandle As Long, ByVal AccessMask As Long, ByVal ObjectAttributes As Long, ByVal hParentProcess As Long, ByVal InheritHandles As Long, ByVal hSection As Long, ByVal hDebugPort As Long, ByVal hExceptionPort As Long, ByVal reserv As Long) As Long
Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As Long
Private Declare Function GetCurrentProcessId Lib "kernel32" () As Long
Private Declare Function OpenProcess Lib "kernel32.dll" (ByVal dwDesiredAccessas As Long, ByVal bInheritHandle As Long, ByVal dwProcId As Long) As Long
Private Const PROCESS_QUERY_INFORMATION As Long = (&H400)
Private Const STANDARD_RIGHTS_REQUIRED As Long = &HF0000
Private Const SYNCHRONIZE As Long = &H100000
Private Const PROCESS_ALL_ACCESS As Long = (STANDARD_RIGHTS_REQUIRED Or SYNCHRONIZE Or &HFFF)
Private Type OBJECT_ATTRIBUTES