*号密码查看器是如何查看密码的

[zteclx]

很厉害，鼠标拖动到密码框上方就可以显示出密码，大家从原理上分析

[gust2012]

WM_GETTEXT

[一笑拔剑]

具体点说
sendmessage WM_GETTEXT

[「已注销」]

能不能详细点，我也想知道。

[光宇广贞]

把消息号都给出来了……很详细了……

[zteclx]

从这个意义上说，可以得到任何密码了

[BaihowFF]

就是有这个消息嘛...wParam里的参数是多少个字符...lParam里的参数是个指针...Over~~~


MSDN said:

WM_GETTEXT
An application sends a WM_GETTEXT message to copy the text that corresponds to a window into a buffer provided by the caller.

WM_GETTEXT
wParam = (WPARAM) cchTextMax; // number of characters to copy
lParam = (LPARAM) lpszText; // address of buffer for text

Parameters
cchTextMax
Value of wParam. Specifies the maximum number of characters to be copied, including the terminating null character.
lpszText
Value of lParam. Pointer to the buffer that is to receive the text.
Return Values
The return value is the number of characters copied.

[luckyboy101]

void CDlgDlg::OnMouseMove(UINT nFlags, CPoint point)
{
ClientToScreen(&point);
//CWnd* pWnd = CWnd::WindowFromPoint(point);
// CWnd*
// pWnd = CWnd::ChildWindowFromPoint(point);
// SetCapture();
// CWnd*
pWnd=CWnd::WindowFromPoint(point);

//SetCapture();
char p[255];
CString kp;


hwnd=pWnd->GetSafeHwnd();
::GetWindowThreadProcessId(hwnd,NULL);
// ::GetClassName(hwnd,k,255);
//AfxMessageBox(k);
LONG lStyle = ::GetWindowLong(hwnd, GWL_STYLE);
if (lStyle & ES_PASSWORD)
{::SendMessage(hwnd,WM_GETTEXT,255,(LPARAM)p);
//m_ed.SetWindowText(k);
m_edit.SetWindowText(p);}
//SetCursor(m_hMagGlassIcon);
UpdateData(TRUE);
// TODO: Add your message handler code here and/or call default

CDialog::OnMouseMove(nFlags, point);
}

//BOOL CDlgDlg::PreTranslateMessage(MSG* pMsg)
//{
// return CDialog::PreTranslateMessage(pMsg);
//}

void CDlgDlg::OnLButtonDown(UINT nFlags, CPoint point)
{
// TODO: Add your message handler code here and/or call default
CWnd* pWnd = CWnd::ChildWindowFromPoint(point);
SetCapture();
// Hook_Start(this->m_hWnd);
SetCursor(m_hMagGlassIcon);
CDialog::OnLButtonDown(nFlags, point);
}

void CDlgDlg::OnLButtonUp(UINT nFlags, CPoint point)
{//::CloseWindow(hwnd);
// Hook_Stop()
ReleaseCapture();
// TODO: Add your message handler code here and/or call default

CDialog::OnLButtonUp(nFlags, point);
}

[wltg2001]

WM_GETTEXT
==========
这个方法现在不行了，对于NT4或是9x下的程序用这个方法是可以的，但是在2000以后对别的进程的窗口发这个消息的话只会返回ERROR_ACCESS_DENIED，它只对本进程内的有作用了，所以还要加全局钩子，将DLL注入到目标进程中去才能骗过系统。

[ahao]

注入进程，然后该干啥干啥

[dfen2008]

看ADSL的密码还可以，看来ADSL还没有与时俱进

[jiujiu45]

顶一下！