tool.cpp

缓冲区溢出攻击

#include <stdio.h>
#include <windows.h>
#include <winbase.h>

typedef void (*CusFunc)(LPTSTR);

int main()
{
	HINSTANCE LibHandle, LibHandle2;
	CusFunc Proc, Proc2;
	LibHandle = LoadLibrary("msvcrt.dll");
	Proc = (CusFunc) GetProcAddress(LibHandle, "system");
	printf("system: %x\n", (long)Proc);
	
	LibHandle2 = LoadLibrary("kernel32.dll");
	Proc2 = (CusFunc) GetProcAddress(LibHandle2, "LoadLibraryA");
	printf("LoadLibraryA: %x\n", (long)Proc2);

	printf("\n\n");
	getchar();
	//system("command.com");
	//Proc("command.com");
	return 0;
}