DLL注入汇编代码

2009-10-22 10:05 906 0

摘要: 前几天无聊，想做点简单教程给新手门。所以写了一个最基本的DLL注入的例子 .386 &nb...

关键词： nbsp invoke 进程 32 masm eax addr hand include incincludelib

前几天无聊，想做点简单教程给新手门。所以写了一个最基本的DLL注入的例子 .386 .model flat, stdcall option casemap :noneinclude D:\masm32\include\windows.incinclude D:\masm32\include\gdi32.incincludelib D:\masm32\lib\gdi32.libinclude D:\masm32\include\user32.incincludelib D:\masm32\lib\user32.libinclude D:\masm32\include\kernel32.incincludelib D:\masm32\lib\kernel32.lib .data?ProcessID dd ?ThreadID dd ?hand dd ?lpLoad dd ?DllName dd ?Full db MAX_PATH dup (?).constszjsq db '计算器',0szdll db 'Kernel32.dll',0szLoad db 'LoadLibraryA',0szMDll db '\Dl.dll',0.codestart: invoke GetCurrentDirectory,MAX_PATH,addr Full;获取当前文件路径 invoke lstrcat,addr Full,addr szMDll;当前路径连接上我们的DLL文件名 invoke GetModuleHandle,addr szdll;获取模块 invoke GetProcAddress,eax,addr szLoad;获取LoadLibrary函数地址 mov lpLoad,eax;保存地址 invoke FindWindow,NULL,addr szjsq;获取计算器窗口句丙 invoke GetWindowThreadProcessId,eax,offset ProcessID;获取计算器的进程ID mov ThreadID,eax;保存ID invoke OpenProcess,PROCESS_CREATE_THREAD or PROCESS_VM_OPERATION or \ PROCESS_VM_WRITE,FALSE,ProcessID;打开指定进程 mov hand ,eax;保存返回句丙 invoke VirtualAllocEx,hand,NULL,MAX_PATH,MEM_COMMIT,PAGE_READWRITE;在目标进程申请内存 mov DllName,eax;保存申请的地址 invoke WriteProcessMemory,hand,eax,offset Full,MAX_PATH,NULL;把DLL写入目标进程 invoke CreateRemoteThread,hand,NULL,0,lpLoad,\ DllName,0,NULL;在目标进程中创建线程 invoke CloseHandle,eax;关闭句并 invoke CloseHandle,hand; invoke ExitProcess,NULLend start

声明：文章版权归原作者所有部分文章转自互联网如有侵权请联系 [邮箱地址] 删除