Asterisk Password Detection Tool-Simple application of code remote thread injection

Sneak in, see the snow forum above saw someone released a "Win7 Asterisk password Detection Tool", found that "there is a little" small use.

The reason is not very useful: This program's ability is quite limited, can only see a portion of the software is not high-security password box inside the program,

If you want to take it to see the QQ password, for granted, it is impossible.

The program uses a very old technique to get the contents of another process's password box: After a remote thread is injected, use the Wm_gettext message to get

Specifies the content of the edit. It is very old, because this method in 2003, as early as a man in the CodeProject published such an article,

A very classic article that leads many people to get started:

Three Ways to Inject Your Code into another Process

Most of my code for this program comes from the above article, but basically all I have to re-write, write only the core part, to achieve the function. Also considered

I learned to learn the methods of remote thread injection.

Working principle:

As we all know, in the current process by sending Wm_gettext messages to a control, you can get the text of the control, but when you get a not belonging to the current

Handle to the control of the process, do you think it is possible to get its text? As early as the Win98, it was possible, but to the back of Win2000, WinXP,

This method can also be used, however, if the edit control is added with the Es_password property, this method will fail ...

So the way the author mentions it is to inject a thread into a remote process, execute wm_gettext, and have the remote thread communicate with the current process process to get the password.

The reason to get the password is because the password work has been given to the remote thread, the remote thread is running in the remote process's address space, belongs to the same process, so no problem.

:

 

 

Program and source code download: http://files.cnblogs.com/nbsofer/asterisk.7z

Asterisk Password Detection Tool-Simple application of code remote thread injection