代码比较乱 不过还是好用的 DLL注入

// fuck of.cpp : Defines the entry point for the application.
//

#include "stdafx.h"
#include <windows.h>
#include <stdlib.h>
#include <tlhelp32.h>
DWORD GetProcessId (LPSTR szProcName);
BOOL DllInject(DWORD dwProcessId, LPSTR lpszDllPath);
DWORD GetProcessId (LPSTR szProcName){
 PROCESSENTRY32 pProcess = {sizeof(PROCESSENTRY32)}; 
 HANDLE hSnapshot = CreateToolhelp32Snapshot (TH32CS_SNAPALL, NULL); 
 if(Process32First(hSnapshot, &pProcess) == NULL)  
 {return FALSE;} 
 do {if((strcmp(*(&szProcName), pProcess.szExeFile) == NULL))  
 {   CloseHandle(hSnapshot);   
 return pProcess.th32ProcessID;  
 } 
 }
 while (Process32Next(hSnapshot, &pProcess));  
 CloseHandle(hSnapshot); return FALSE;}
BOOL DllInject(DWORD dwProcessId, LPSTR lpszDllPath){  
 HMODULE hmKernel = GetModuleHandle("Kernell32.dll");  
 if(dwProcessId == NULL)    {    return FALSE;   }  
 HANDLE hProcess = OpenProcess(PROCESS_ALL_ACCESS, FALSE, dwProcessId);  
 if(hProcess == NULL)    {    return FALSE;   }   
 CHAR szPath[_MAX_PATH] = "";   
 GetCurrentDirectoryA(_MAX_PATH, szPath);
 strcat(szPath,  "//");   
 strcat(szPath,  lpszDllPath);   
 int nPathLen = strlen(szPath);   
 LPVOID lpvMem = (PVOID)VirtualAllocEx( hProcess, NULL, strlen(szPath), MEM_RESERVE | MEM_COMMIT, PAGE_READWRITE);   
 WriteProcessMemory(hProcess, (PVOID)lpvMem, szPath, strlen(szPath), NULL);   
 HANDLE hThread = CreateRemoteThread(hProcess, NULL, NULL, (LPTHREAD_START_ROUTINE)LoadLibraryA, (PVOID)lpvMem, 0, NULL);   
 DWORD dwWaitResult = 0, dwExitResult = 0; 
 if(hThread == NULL) {  return FALSE; }    
 dwWaitResult = WaitForSingleObject(hThread, 10000);   
 GetExitCodeThread(hThread, &dwExitResult);   
 CloseHandle(hThread);   
 VirtualFreeEx(hProcess, lpvMem, strlen(lpszDllPath), MEM_DECOMMIT | MEM_RELEASE); 
 CloseHandle(hProcess);    return ((dwWaitResult != WAIT_TIMEOUT) && (dwExitResult > 0));}
int APIENTRY WinMain(HINSTANCE hInstance,
                     HINSTANCE hPrevInstance,
                     LPSTR     lpCmdLine,
                     int       nCmdShow)
{
  // TODO: Place code here.
 DWORD dwProcess = GetProcessId("calc.exe");   
 DllInject(dwProcess, "inject.dll");  
 return 0;
}

 

大家不要干坏事呀！