能力值：
![]()
(RANK：500 )
|
-
-
2 楼
代码如下:
#include "stdafx.h"
#include "windows.h"
int main(int argc, char* argv[])
{
HWND hWin = NULL;
hWin = FindWindow(NULL,"CrackMeApp");//得到窗口句柄
SetForegroundWindow(hWin);//设置为当前窗口
keybd_event(0x011b,0,KEYEVENTF_EXTENDEDKEY,0); //模拟键盘ESC键使其关闭
return 0;
}
|
能力值：
![]()
(RANK：500 )
|
-
-
3 楼
代码如下:
#include "stdafx.h"
#include "windows.h"
int main(int argc, char* argv[])
{
HWND hWin = NULL;
hWin = FindWindow(NULL,"CrackMeApp");
SetForegroundWindow(hWin);
keybd_event(VK_MENU,0,0,0);
keybd_event(VK_F4,0,0,0);
keybd_event(VK_MENU,0,KEYEVENTF_KEYUP,0);
keybd_event(VK_F4,0,KEYEVENTF_KEYUP,0);//按下alt+f4关闭程序
return 0;
}
本来我以为不算,问了下程序作者老Y 他说可以 和按esc的不重复.所以就发了.呵呵
|
能力值：
![]()
(RANK：500 )
|
-
-
4 楼
代码如下:
#include "stdafx.h"
#include "windows.h"
int main(int argc, char* argv[])
{
HWND hWin = NULL;
hWin = FindWindow(NULL,"CrackMeApp");
SetForegroundWindow(hWin);
keybd_event(VK_MENU,0,0,0);
keybd_event(0x20,0,0,0);
keybd_event(0x43,0,0,0);
keybd_event(VK_MENU,0,KEYEVENTF_KEYUP,0);
keybd_event(0x20,0,KEYEVENTF_KEYUP,0);
keybd_event(0x43,0,KEYEVENTF_KEYUP,0);//按下alt+空格+C使其关闭
return 0;
}
既然按键盘esc和alt+f4不重复
那么这个alt+space+c也不重复了 呵呵
|
能力值：
![]()
(RANK：500 )
|
-
-
5 楼
代码如下:
#include "stdafx.h"
#include "windows.h"
int main(int argc, char* argv[])
{
HWND hWin = NULL;
RECT Rect;
hWin = FindWindow(NULL,"CrackMeApp");
GetWindowRect(hWin,&Rect);
SetForegroundWindow(hWin); //设为当前窗口
Sleep(100); //这里延迟一会
SetCursorPos(Rect.right-7,Rect.top+7); //设置叉号的坐标
mouse_event(MOUSEEVENTF_LEFTDOWN,0,0,0,0);
mouse_event(MOUSEEVENTF_LEFTUP,0,0,0,0);//按下左键并松开使完成关闭
return 0;
}
其实这个就是模拟鼠标左键点那个叉.:)
|
能力值：
![]()
(RANK：500 )
|
-
-
6 楼
代码如下:
#include "stdafx.h"
#include "windows.h"
int main(int argc, char* argv[])
{
HWND hWin = NULL;
RECT Rect;
hWin = FindWindow(NULL,"CrackMeApp");
GetWindowRect(hWin,&Rect);
SetForegroundWindow(hWin); //设为当前窗口
Sleep(100); //这里延迟一会
SetCursorPos(Rect.left+7,Rect.top+7); //设置坐上角LOGO的坐标
mouse_event(MOUSEEVENTF_LEFTDOWN,0,0,0,0);
mouse_event(MOUSEEVENTF_LEFTUP,0,0,0,0);
mouse_event(MOUSEEVENTF_LEFTDOWN,0,0,0,0);
mouse_event(MOUSEEVENTF_LEFTUP,0,0,0,0);//按双击左键完成关闭
return 0;
}
就是双击左上角那个logo那地方使其关闭
|
能力值：
![]()
(RANK：500 )
|
-
-
7 楼
代码如下:
#include "stdafx.h"
#include <windows.h>
int main(int argc, char* argv[])
{
ExitWindows(0,0); //第一个参数分别为0,1,2时 分别是注销,关机,重起.所以是3种
return 0;
}
编译的程序不上传了.
由于我也想不出15种 所以用这3种充数.
因为新规则写了:是否给分 看评委,那就看看吧 呵呵
|
能力值：
![]()
(RANK：500 )
|
-
-
8 楼
#include "stdafx.h"
#include "windows.h"
int main(int argc, char* argv[])
{
HWND hWin = NULL;
DWORD ProcessId;
hWin = FindWindow(NULL,"CrackMeApp");
GetWindowThreadProcessId(hWin,&ProcessId);
CreateRemoteThread(OpenProcess(PROCESS_VM_OPERATION|PROCESS_CREATE_THREAD,FALSE,ProcessId),NULL,0,(unsigned long (__stdcall *)(void *))GetProcAddress(LoadLibrary("Kernel32.dll"),"ExitProcess"),0,0,0);
return 0;
}
远程插入线程 用ExitProcess函数来结束
代码比较简单 评委估计都看的懂:)
|
能力值：
![]()
(RANK：500 )
|
-
-
9 楼
得到 CrackMe驱动的卸载函数，然后call一下 就卸载了
然后再关就好办了
压缩包里 一个test.sys
一个guanbi11.exe
先加载驱动test.sys 再执行guanbi11.exe就可以关掉了.
|
能力值：
![]()
(RANK：500 )
|
-
-
10 楼
|
|
|
