非常简单的利用CreateProcess注入DLL的方法

最新推荐文章于 2025-02-24 13:39:58 发布

zwfgdlc

最新推荐文章于 2025-02-24 13:39:58 发布

阅读量5.1k

点赞数 1

分类专栏： C/C++

本文链接：https://blog.youkuaiyun.com/zwfgdlc/article/details/8827116

版权

C/C++ 专栏收录该内容

10 篇文章

订阅专栏

TCHAR szDll[] = TEXT("d:\\test.dll");
STARTUPINFO si = {0};
PROCESS_INFORMATION pi = {0};
si.cb = sizeof(si);
si.dwFlags = STARTF_USESHOWWINDOW;
si.wShowWindow = SW_SHOW;
TCHAR szCommandLine[MAX_PATH] = TEXT("C:\\WINDOWS\\notepad.exe");

CreateProcess(NULL, szCommandLine, NULL, NULL, FALSE, CREATE_SUSPENDED, NULL, NULL, &si, &pi);
LPVOID Param = VirtualAllocEx(pi.hProcess, NULL, MAX_PATH, MEM_COMMIT, PAGE_EXECUTE_READWRITE);
WriteProcessMemory(pi.hProcess, Param, (LPVOID)szDll, _tcslen(szDll)*2+sizeof(TCHAR), NULL);

HANDLE hThread = CreateRemoteThread(pi.hProcess, NULL, NULL, (LPTHREAD_START_ROUTINE)LoadLibraryW,Param, CREATE_SUSPENDED, NULL);
ResumeThread(pi.hThread);

if (hThread)
{
	ResumeThread(hThread);
	WaitForSingleObject(hThread, INFINITE);
}