linux lpvoid_lpvoid linux_如何验证LPVOID到<Bad Ptr> - 腾讯云开发者社区

一个非常简单，但是实用的协程实现，使用Windows的*Fiber函数族（linux可以稍微改一下用*context函数族）。...Coroutine; struct Coroutine { void (*task)(Scheduler*, void*); void* userData; char status; LPVOID...winFiber; }; struct Scheduler { std::map coroutines; int currentIdx; LPVOID...main; }; void __stdcall __entry(LPVOID lpParameter); Scheduler* initialize(); void destroy(Scheduler...winFiber); } delete s; } // This is should NEVER BE called on user land void __stdcall fco::__entry(LPVOID

1.4K1 0

套接字连接状态检测

主动断开连接主动断开连接会发送，关闭事件 connec函数检测连接状态，getlasterror send发送（tcp keeplive心跳包或者有数据时检测），recv接收判断异常（无数据判断异常） linux...setsockopt(tcpsocket->native_handle(), SOL_SOCKET, SO_SNDTIMEO, &tv, sizeof(tv)); #endif 设置keep_alive，linux...和windows的结构不同 linux int keepalive = 1; // 开启keepalive属性 int keepidle = 60; // 如该连接在60秒内没有任何数据往来,则进行探测...in_keep_alive.keepalivetime = 10000; /*多长时间没有报文开始发送keepalive心跳包-单位为毫秒*/ ret = WSAIoctl(socket, SIO_KEEPALIVE_VALS, (LPVOID...)&in_keep_alive, ul_in_len, (LPVOID)&out_keep_alive, ul_out_len, &ul_bytes_return, NULL, NULL)

9114 0

您找到你想要的搜索结果了吗？

是的

没有找到

我是一个线程（节选）

我们这里先介绍操作系统的接口，这里分linux和Windows两个常用的操作系统平台来介绍。...linux线程创建 linux平台上使用pthread_create这个API来创建线程，其函数签名如下： int pthread_create(pthread_t *thread,...CALLBACK threadfunc(LPVOID lpThreadParameter); 参数lpParameter为传给线程函数的参数，和linux下的pthread_create函数的arg一样...，这实际上也是一个void类型（LPVOID类型是用过typedef包装后的void类型）。...linux下等待线程结束 linux下使用pthread_join函数等待某个线程结束，其函数签名如下： int pthread_join(pthread_t thread, void **retval

2.1K4 0

CC++ Inline Hook 钩子编写技巧

ebp mov ebp, esp mov ebx, jump jmp ebx } } bool APIENTRY DllMain(HANDLE handle, DWORD dword, LPVOID...lpvoid) { HMODULE hwnd = GetModuleHandle(TEXT("user32.dll")); DWORD base = (DWORD)GetProcAddress(hwnd..., "MessageBoxA"); DWORD oldProtect = 0; if (VirtualProtect((LPVOID)base, 5, PAGE_EXECUTE_READWRITE...+ 2) = (INT64)&MyMessageBoxW; // 填充90为指定跳转地址 } memcpy((LPVOID)base, &HookCode, sizeof(HookCode)...)FuncAddress, 12, PAGE_EXECUTE_READWRITE, &OldProtect)) { memcpy(OldCode, (LPVOID)FuncAddress, 12)

1.9K1 0

CC++ 内存读写Lib库简单封装

wbuffer = (LPVOID)&WriteValue; WriteProcessMemory(proce,(LPVOID)pbase,wbuffer,4,&bywrite); return...wbuffer = (LPVOID)&WriteValue; WriteProcessMemory(proce,(LPVOID)pbase,wbuffer,4,&bywrite); return...wbuffer = (LPVOID)&WriteValue; WriteProcessMemory(proce,(LPVOID)pbase,wbuffer,4,&bywrite); return...wbuffer = (LPVOID)&WriteValue; WriteProcessMemory(proce,(LPVOID)pbase,wbuffer,4,&bywrite); return...wbuffer = (LPVOID)&WriteValue; WriteProcessMemory(proce,(LPVOID)pbase,wbuffer,4,&bywrite); return

8173 0

Windows核心编程：第12章纤程

// #include "stdafx.h" #include "第12章纤程.h" LPVOID g_Covert = nullptr; DWORD g_index = 0; VOID WINAPI...FiberFun(LPVOID lpFiberParameter) { //纤程参数 LPVOID pFiberCurrent = GetCurrentFiber(); BOOL...bres = IsThreadAFiber(); LPVOID pCurrentData = GetFiberData();//获取创建纤程时传递的参数,pCurrentData==lpFiberParameter...bres = FlsSetValue(g_index, (PVOID)100); PVOID flsvalue = FlsGetValue(g_index); //创建纤程 LPVOID...pFiberCreate = CreateFiberEx(0, 0, FIBER_FLAG_FLOAT_SWITCH, FiberFun, (LPVOID)555); //切换纤程

7702 0

C2基石--syscall模块及amsi bypass

fileData, PIMAGE_SECTION_HEADER textSection, PIMAGE_SECTION_HEADER rdataSection, LPVOID syscallStub)...)syscallStub, (LPVOID)functionVA, SYSCALL_STUB_SIZE); VirtualProtect((LPVOID)syscallStub,...)syscallStub, SYSCALL_STUB_SIZE, PAGE_READWRITE, &dwOldProc); memcpy((LPVOID)syscallStub, (LPVOID...= (_NtOpenProcess)(LPVOID)SyscallStub; SyscallTable->NtOpenThread = (_NtOpenThread)(LPVOID...)SyscallStub; SyscallTable->NtSuspendThread = (_NtSuspendThread)(LPVOID)SyscallStub;

6324 0

突破SESSION0隔离的远程线程注入

typedef_ZwCreateThreadEx)( PHANDLE ThreadHandle, ACCESS_MASK DesiredAccess, LPVOID...ObjectAttributes, HANDLE ProcessHandle, LPTHREAD_START_ROUTINE lpStartAddress, LPVOID...typedef_ZwCreateThreadEx)( PHANDLE ThreadHandle, ACCESS_MASK DesiredAccess, LPVOID...typedef_ZwCreateThreadEx)( PHANDLE ThreadHandle, ACCESS_MASK DesiredAccess, LPVOID...typedef_ZwCreateThreadEx)( PHANDLE ThreadHandle, ACCESS_MASK DesiredAccess, LPVOID

3525 0

MinHook库的使用 64位下,过滤LoadLibraryExW

pTarget, LPVOID pDetour, LPVOID *ppOriginal);//创建HOOK跳板 MH_STATUS WINAPI MH_CreateHookApi(...//创建APIhook跳板 LPCWSTR pszModule, LPCSTR pszProcName, LPVOID pDetour, LPVOID *ppOriginal);...pDetour, LPVOID *ppOriginal, LPVOID *ppTarget); MH_STATUS WINAPI MH_RemoveHook(LPVOID pTarget);...//删除HOOK MH_STATUS WINAPI MH_EnableHook(LPVOID pTarget); //启动HOOK...WINAPI MH_QueueEnableHook(LPVOID pTarget); MH_STATUS WINAPI MH_QueueDisableHook(LPVOID pTarget);

1.5K1 0

简单的加密壳实现

壳子程序新增加节参数说明: path :要新增节文件的路径 n:要新增多少字节 LSADDRESS：得到新生成节的首地址 void addnewsec(IN LPSTR path,IN DWORD n,OUT LPVOID...* LSADDRESS) { LPVOID FileBuffer = NULL; LPVOID ImageBuffer = NULL; LPVOID NewBuffer = NULL...NewBuffer = NULL; LPVOID pFileBuffer = NULL; LPVOID LSADDRESS = NULL; int FileSize = encrypto...pImageBuffer, OUT LPVOID* pNewBuffer) { if (!...pFileBuffer, OUT LPVOID* pImageBuffer) { LPVOID p1ImageBuffer = NULL; PIMAGE_DOS_HEADER pDosHeader

1.4K2 0

恶意软件开发——突破SESSION 0 隔离的远线程注入

ObjectAttributes, HANDLE ProcessHandle, LPTHREAD_START_ROUTINE lpStartAddress, LPVOID...HANDLE hProcess = OpenProcess(PROCESS_ALL_ACCESS, FALSE, 6092); LPVOID lpBaseAddress = VirtualAllocEx...ObjectAttributes, HANDLE ProcessHandle, LPTHREAD_START_ROUTINE lpStartAddress, LPVOID lpParameter...ObjectAttributes, HANDLE ProcessHandle, LPTHREAD_START_ROUTINE lpStartAddress, LPVOID lpParameter..., BOOL CreateSuspended, DWORD dwStackSize, DWORD dw1, DWORD dw2, LPVOID pUnkown); #endif int main

5482 0

能向入口函数传入多个参数的 QueueUserWorkItem

ShimObj; VOID( STDCALL * Release )(LPVOID); LPVOID OldStuff; LPVOID Address; exception_ptr **_ExceptionPtr...; } Ex0ArgThunk, *PEx0ArgThunk; STATIC BOOL STDCALL ExArg0CheckNestedCall() { LPVOID *StackBase = (LPVOID...LPVOID *StackBase = (LPVOID*)(__readfsdword( 4 ) - sizeof( LPVOID )); pThunk->OldStuff = *StackBase;...LPVOID *StackBase = (LPVOID*)(__readfsdword( 4 ) - sizeof( LPVOID )); PEx0ArgThunk pThunk = (PEx0ArgThunk...STDCALL Ex0ArgGetAddress() _NOEXCEPT { LPVOID *StackBase = (LPVOID*)(__readfsdword( 4 ) - sizeof( LPVOID

1.2K2 0

CC++ x64 Inline Hook 代码封装

)base, 12, PAGE_EXECUTE_READWRITE, &OldProtect)) { memcpy(OldCode, (LPVOID)base, 12);...// 拷贝原始机器码指令 *(PINT64)(HookCode + 2) = (INT64)&MyMessageBoxW; // 填充90为指定跳转地址 } memcpy((LPVOID)...)FuncAddress, 12, PAGE_EXECUTE_READWRITE, &OldProtect)) { memcpy(OldCode, (LPVOID)FuncAddress, 12)...)FuncAddress, &HookCode, sizeof(HookCode)); // 拷贝Hook机器指令 VirtualProtect((LPVOID)FuncAddress,...)FuncAddress, 12, PAGE_EXECUTE_READWRITE, &OldProtect)) { memcpy(m_bOldBytes, (LPVOID)FuncAddress,

6093 0

技术分享 | DLL注入之远线程注入

函数声明： LPVOID WINAPI VirtualAllocEx( _In_ HANDLE hProcess, _In_opt_ LPVOID lpAddress, ...函数声明： BOOL WINAPI WriteProcessMemory( _In_ HANDLE hProcess, _In_ LPVOID lpBaseAddress, ...In_ SIZE_T dwStackSize, _In_ LPTHREAD_START_ROUTINE lpStartAddress, _In_ LPVOID...DWORD dwProcessId, wchar_t *pszDllFileName) { HANDLE hProcess = NULL; DWORD dwSize = 0; LPVOID..., BOOL CreateSuspended, DWORD dwStackSize, DWORD dw1, DWORD dw2, LPVOID pUnkown )

1.1K2 0

抛砖引玉之CobaltStrike4.1的BOF

stdio.h> #include #include "beacon.h" DECLSPEC_IMPORT DWORD WINAPI NETAPI32$DsGetDcNameA(LPVOID..., LPVOID, LPVOID, LPVOID, ULONG, LPVOID); DECLSPEC_IMPORT DWORD WINAPI NETAPI32$NetApiBufferFree(LPVOID...我们便来手把手的写一个BOF来武装我们的CobaltStrike 如果你之前有c的开发经验，你会发现上面的demo中 DECLSPEC_IMPORT DWORD WINAPI NETAPI32$DsGetDcNameA(LPVOID..., LPVOID, LPVOID, LPVOID, ULONG, LPVOID); DECLSPEC_IMPORT DWORD WINAPI NETAPI32$NetApiBufferFree(LPVOID

1.1K2 0

3.3 DLL注入：突破会话0强力注入

DWORD(WINAPI* typedef_ZwCreateThreadEx)( PHANDLE ThreadHandle, ACCESS_MASK DesiredAccess, LPVOID...ObjectAttributes, HANDLE ProcessHandle, LPTHREAD_START_ROUTINE lpStartAddress, LPVOID lpParameter...ULONG CreateThreadFlags, SIZE_T ZeroBits, SIZE_T StackSize, SIZE_T MaximumStackSize, LPVOID...DWORD(WINAPI* typedef_ZwCreateThreadEx)( PHANDLE ThreadHandle, ACCESS_MASK DesiredAccess, LPVOID..., BOOL CreateSuspended, DWORD dwStackSize, DWORD dw1, DWORD dw2, LPVOID pUnkown);#endif

2582 0

进程中的数据读取和修改

读取进程中的数据 int ReadData = 0; // 读取的数据 DWORD dwReadByteNumber = 0; // 读取到的实际数据大小 ReadProcessMemory(hAndle, (LPVOID...)0x00000000, (LPVOID)&ReadData, 4, &dwReadByteNumber); // 写入数据到进程中 int WriteData = 0; // 需要写入的数据 DWORD...dwWriteByteNumber = 0; // 写入的实际数据大小 WriteProcessMemory(hAndle, (LPVOID)0x00000000, (LPVOID)&WriteData...int WriteData = 0; // 需要写入的数据 DWORD dwWriteByteNumber = 0; // 写入的实际数据大小 WriteProcessMemory(hAndle, (LPVOID...)0x00000000, (LPVOID)acode, 6, &dwWriteByteNumber);

7920 0

高级远程线程注入NtCreateThreadEx

typedef DWORD(WINAPI* PfnZwCreateThreadEx)( PHANDLE ThreadHandle, ACCESS_MASK DesiredAccess, LPVOID...ObjectAttributes, HANDLE ProcessHandle, LPTHREAD_START_ROUTINE lpStartAddress, LPVOID lpParameter...ULONG CreateThreadFlags, SIZE_T ZeroBits, SIZE_T StackSize, SIZE_T MaximunStackSize, LPVOID...ObjectAttributes, HANDLE ProcessHandle, LPTHREAD_START_ROUTINE lpStartAddress, LPVOID lpParameter...BOOL CreateThreadFlags, DWORD ZeroBits, DWORD StackSize, DWORD MaximumStackSize, LPVOID

1.1K2 0

C++临界锁CCriticalSection在线程中的使用

include using namespace std; CCriticalSection critical; int tick=0; DWORD WINAPI Func1(LPVOID...lpParam); DWORD __stdcall Func1(LPVOID lpParam) { critical.Lock(); tick += 10; cout << "...Func1 TICK NOW IS : " << tick << endl; critical.Unlock(); return 0; } DWORD WINAPI Func2(LPVOID...lpParam); DWORD __stdcall Func2(LPVOID lpParam) { critical.Lock(); tick += 10; cout << "

4434 0

CC++ 实现多线程与线程同步

#include #include using namespace std; DWORD WINAPI Func(LPVOID lpParamter)...include using namespace std; HANDLE hMutex = NULL; // 创建互斥锁 // 线程函数 DWORD WINAPI Func(LPVOID...namespace std; HANDLE hMutex = NULL; // 创建互斥锁 #define NUM_THREAD 50 // 线程函数1 DWORD WINAPI FuncA(LPVOID...允许传递一个参数，只需要在县城函数中接收并强转(int)(LPVOID)port即可。...int Port = (int)(LPVOID)port; printf("[+] 端口: %5d \n", port); return 1; } int main(int argc, char

4381 0

点击加载更多

扫码

添加站长进交流群

领取专属 10元无门槛券

手把手带您无忧上云

基于windows fiber的协程(coroutine)实现

套接字连接状态检测

我是一个线程（节选）

CC++ Inline Hook 钩子编写技巧

CC++ 内存读写Lib库简单封装

Windows核心编程：第12章纤程

C2基石--syscall模块及amsi bypass

突破SESSION0隔离的远程线程注入

MinHook库的使用 64位下,过滤LoadLibraryExW

简单的加密壳实现

恶意软件开发——突破SESSION 0 隔离的远线程注入

能向入口函数传入多个参数的 QueueUserWorkItem

CC++ x64 Inline Hook 代码封装

技术分享 | DLL注入之远线程注入

抛砖引玉之CobaltStrike4.1的BOF

3.3 DLL注入：突破会话0强力注入

进程中的数据读取和修改

高级远程线程注入NtCreateThreadEx

C++临界锁CCriticalSection在线程中的使用

CC++ 实现多线程与线程同步

扫码

相关资讯

热门标签

活动推荐

运营活动

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐