hookQQ-API拦截QQ聊天记录.docVIP

【原创】hookQQ-API拦截QQ聊天记录作 者: yinchengak时 间: 2012-06-13,20:37:56链 接: /showthread.php?t=152085大家先对QQ采用ollydbg调试QQ，分析出相关QQ内部函数//?GetMsgTime@Msg@Util@@YA_JPAUITXMsgPack@@@Z//?GetSelfUin@Contact@Util@@YAKXZ//?GetGroupName@Group@Util@@YA?AVCTXStringW@@K@Z//?GetDiscussName@Group@Util@@YA?AVCTXStringW@@K@Z//?GetGroupMemLongNickname@Group@Util@@YAHKKAAVCTXStringW@@@Z//?GetGroupMemShowName@Group@Util@@YA?AVCTXStringW@@KK@Z//?GetSelfUin@Contact@Util@@YAKXZ然后我们写一个ＤＬＬ来注射到ＱＱ内部，调用ＱＱ相关函数，获取相关QQ聊天记录信息，然后将QQ聊天记录用sendmessage发送出来。DLL代码如下 代码: #include?stdafx.h #include?QQspy.h #include?detours.h #pragma?comment?(lib,?detours.lib) #include?set #include?shlwapi.h #pragma?comment?(lib,?shlwapi.lib) #ifdef?_DEBUG #define?new?DEBUG_NEW #undef?THIS_FILE static?char?THIS_FILE[]??__FILE__; #endif // //牋Note! // //牋牋If爐his燚LL爄s燿ynamically爈inked燼gainst爐he燤FC //牋牋DLLs,燼ny爁unctions爀xported爁rom爐his燚LL爓hich //牋牋call爄nto燤FC爉ust爃ave爐he燗FX_MANAGE_STATE爉acro //牋牋added燼t爐he爒ery燽eginning爋f爐he爁unction. // //牋牋For爀xample: // //牋牋extern?C燘OOL燩ASCAL燛XPORT燛xportedFunction() //牋牋{ //牋牋牋AFX_MANAGE_STATE(AfxGetStaticModuleState()); //牋牋牋//爊ormal爁unction燽ody爃ere //牋牋} // //牋牋It爄s爒ery爄mportant爐hat爐his爉acro燼ppear爄n爀ach //牋牋function,爌rior爐o燼ny燾alls爄nto燤FC.牋This爉eans爐hat //牋牋it爉ust燼ppear燼s爐he爁irst爏tatement爓ithin爐he?//牋牋function,爀ven燽efore燼ny爋bject爒ariable燿eclarations //牋牋as爐heir燾onstructors爉ay爂enerate燾alls爄nto爐he燤FC //牋牋DLL. // //牋牋Please爏ee燤FC燭echnical燦otes?3燼nd?8爁or燼dditional //牋牋details. // ///////////////////////////////////////////////////////////////////////////// //燙QQMonApp BEGIN_MESSAGE_MAP(CQQMonApp,燙WinApp) 牋//{{AFX_MSG_MAP(CQQMonApp) 牋牋//燦OTE?爐he燙lassWizard爓ill燼dd燼nd爎emove爉apping爉acros爃ere. 牋牋//牋牋DO燦OT燛DIT爓hat爕ou爏ee爄n爐hese燽locks爋f爂enerated燾ode! 牋//}}AFX_MSG_MAP END_MESSAGE_MAP() /////////////////////////////////////////////////////////////