[转载]Adding Functionality to Windows Binaries

原始连接：http://www.craigheffner.com/win_mod.html

Custom Windows EXEs

In this multipart tutorial, I will be presenting several ways in which you can add functionality to closed source Windows executables through DLLs, PE header modification, and good old assembly code. It is suggested that you read the tutorials sequentially, as each tutorial builds off of the information covered in the previous tutorials:

[~] Part 1 - Detour notepad's execution flow and add a call to the MessageBeep API.
[~] Part 2 - Modify notepad's PE headers and add a backdoor via reverse shellcode.
[~] Part 3 - Write a custom DLL and modify notepad's PE headers to load it.
[~] Part 4 - Add plugin functionality to notepad, allowing the easy addition of multiple
DLL files

Notepad Plugins

This part of the tutorial will be divided into several sub-sections as some of the material has not previously been covered. It is assumed that you are familiar with the applications and techniques presented in the previous sections of this tutorial, as any steps which are related to previous sections are not covered in detail. The objectives for adding plugin functionality are:

1) Add a 'Plugins' menu option which will hold the options for each plugin.
2) Enumerate all DLL files in a certian folder, then load them and run a predefined function
in each.
3) Intercept WM_COMMAND messages and allow each plugin to process the message
to determine if its option has been selected.
4) Allow plugins to specify if they want notepad to furthur process the WM_COMMAND
message or not.

[~] Section A - Modify the menu bar via import functions.
[~] Section B - Calling the imported function at the right place.
[~] Section C - Writing the primary DLL.
[~] Section D - Writing a plugin DLL.

The binaries and source code can be downloaded here.

附件

Custom Windows EXEs.rar (6.86 MB)

2006-7-2 02:32, 下载次数: 321

Adding Functionality to Windows Binaries的全部文章

曾几何时，有人对我说：装B遭雷劈。我说：去你妈的。于是，这个人又对我说：如果再说脏话，上帝会惩罚你的。我说：我操上帝。结论：彪悍的人生不需要上帝。

TOP