当前位置:网站首页>游戏安全丨喊话CALL分析-写代码
游戏安全丨喊话CALL分析-写代码
2022-06-23 21:01:00 【极安御信安全研究院】
作者:小阿栗
写代码调用一下call,写一个动态链接库注入进去
1.新建mfc动态链接库
2.选择静态链接
3.改成x64
4.配置
4.1属性
4.2 spectre缓解库禁用,应用
5.解决方案-生成依赖项-生成自定义
6.点击masm,确定,有了编写64位汇编的功能
7.因为在vs默认编辑器中不能直接编写64位内联汇编,所以需要新建asm源文件
8.需要手动加 .asm才能确定是汇编文件
9.在汇编文件里,把名字改为”meditation”(打坐)
10.把源文件中声明和调用的函数名字改为“meditation”
声明:
调用:
11.返回汇编,写开辟堆栈、平栈、返回的函数
12.参数处理
13.进行声明
14.1添加资源
14.2新建Dialog
14.3操作界面-添加一个Edit control作为编辑发送文本和Button
14.4 Button属性
改为喊话CALL
15.给编辑框添加变量
16.修改控件-类别-名称-变量类型
17.双击喊话CALL按钮,添加事件处理
18.打开所在文件-复制dll到桌面
19.打开服务器,注入dll
20.喊话
输入:
成功喊话:
边栏推荐
- Machine learning related
- Configure two databases in master-slave database mode (master and slave)
- What is the role of computer auto audit audio? What content failed to pass the audit?
- Emmet syntax specification
- What are the server host security risks? How to prevent safety risks?
- 数字化采购转型解决方案:SaaS采购管理平台推进企业阳光采购
- [golang] use go language to operate etcd - configuration center
- [golang] type conversion summary
- Short video intelligent audit software intelligent audit or manual audit
- How does the fortress machine connect to the server? Novice must know operation steps
猜你喜欢

重庆 奉节耀奎塔,建成后当地连中五名进士,是川江航运的安全塔

Ugeek's theory 𞓜 application and design of observable hyperfusion storage system

Use of the vs2022scanf function. An error is reported when using scanf - the return value is ignored: Solutions

3000 frame animation illustrating why MySQL needs binlog, redo log and undo log

JS advanced programming version 4: generator learning

Applet development framework recommendation

Importance and purpose of test

Yaokui tower in Fengjie, Chongqing, after its completion, will be the safety tower for Sichuan river shipping with five local scholars in the company
Implementing MySQL fuzzy search with node and express
Application of JDBC in performance test
随机推荐
Row height, (top line, middle line, baseline, bottom line), vertical align
Disaster recovery series (VII) -- hybrid cloud public network export disaster recovery construction
3000 frame animation illustrating why MySQL needs binlog, redo log and undo log
Excel text function
网上证券开户安全还是去营业部安全
SAP FICO as03 display fixed assets master data
How to convert []byte to io. in go Reader?
How to build a cloud game platform? Disadvantages of traditional games
【Golang】深究字符串——从byte rune string到Unicode与UTF-8
[golang] quick review guide quickreview (III) - Map
Implementing MySQL fuzzy search with node and express
How to deal with unclear pictures? How to deal with color balance?
CPS 22 January additional incentive rules
【Golang】怎样优雅的清空切片
How to make a commodity price tag
What is the role of computer auto audit audio? What content failed to pass the audit?
JS naming conventions
The substring() method in. JS can be used to intercept all characters after the specified string
What is the process of setting up local cloud on demand? Can cloud on demand audit videos?
. Net Core 3. X MVC built-in log extension log4net