C/C++：Windows编程—Hook IE浏览器实现URL拦截及更改(下)

小鱼儿 2023-06-29 10:44 11阅读 0赞

# Hook IE浏览器实现URL拦截及更改(下) #

## 前言 ##

接上一篇 [C/C++：Windows编程—Hook IE浏览器实现URL拦截及更改(上)][C_C_Windows_Hook IE_URL]，**本节为了实现上一篇待优化部分**。实现IE进程时时监控，当有新的IE进程打开时注入我们的动态库。如何使用时时监控IE进程呢？笨方法就是 开一个线程 一直去遍历 IE进程 发现有新的IE进程就注入。这种方法有点low，笔者当然不想用，所以在网络上寻找，有说在驱动层去监控，笔者目前驱动还不怎么会 当然放弃驱动层了。后面在这篇博客 [https://blog.csdn.net/maoenpei002/article/details/5358601][https_blog.csdn.net_maoenpei002_article_details_5358601] 给了我思路使用 Windows 全局钩子！Windows钩子应该是最简单的hook方式，主要是针对GUI程序 带消息机制的程序。

## 运行效果 ##

笔者运行环境为 win10 64位 IE11  
[哔哩哔哩视频运行效果可以这里看][Link 1]

HOOK IE浏览器拦截URL效果(下)

## 代码 ##

这里代码就是根据我们需要时时监控IE进程写的 Windows全局钩子的DLL的代码。

#include "stdafx.h"
    #include "MsgHook.h"
    #include <Windows.h>
    
    HMODULE g_hModule ;
    HHOOK g_hook = NULL;
    
    LRESULT CALLBACK HookProc(
    	int code, // hook code
    	WPARAM wParam, // removal option
    	LPARAM lParam // message
    	)
    {
    	if(g_hook)
    	{
    		return CallNextHookEx(g_hook,code,wParam,lParam);
    	}
    	return 1;
    }
    
    void SetMsgHookOn()
    {
    	OutputDebugString(_T("===== SetMsgHookOn enter===== \n"));
    	g_hook = SetWindowsHookEx(WH_GETMESSAGE,HookProc,g_hModule,0);
    	if(g_hook == NULL )
    	{
    		DWORD errCode = GetLastError();
    		CString errMsg = CUtility::GetErrorMsg(errCode);
    		CString temp;
    		temp.Format(_T("SetWindowsHookEx false!!!errCode:%d,errMsg:%s\n"),errCode,errMsg);
    		OutputDebugString(temp);
    	}
    }
    
    
    
    void SetMsgHookOff()
    {
    	OutputDebugString(_T("===== SetMsgHookOff enter =====\n"));
    	CString temp;
    	temp.Format(_T("Cur Exe:%s\n"),CUtility::GetCurExeName());
    	OutputDebugString(temp);
    	BOOL ret = FALSE;
    	if(g_hook)
    	{
    		ret = UnhookWindowsHookEx(g_hook);
    	}
    	if(ret == FALSE)
    	{
    		DWORD errCode = GetLastError();
    		CString errMsg = CUtility::GetErrorMsg(errCode);
    		CString temp;
    		temp.Format(_T("UnhookWindowsHookEx false!!!errCode:%d,errMsg:%s\n"),errCode,errMsg);
    		OutputDebugString(temp);
    	}
    }
    
    // 下的全局钩子被系统强势注入到进程中后通知你的目标程序
    void NotifyYourApp(BOOL bTatch)
    {
    	HWND targetWnd = FindWindow(_T("#32770"),MAIN_APP_TITLE);
    	//HWND targetWnd = FindWindow(_T("Notepad"),NULL);
    	if(targetWnd == NULL)
    	{
    		OutputDebugString(_T("target exe not found"));
    		// 目标程序都没启动，捕获没用处，取消全局钩子
    		SetMsgHookOff();
    		return;
    	}
    
    	CString exeName = CUtility::GetCurExeName();
    	if(exeName.CompareNoCase(_T("iexplore.exe")) == 0)
    	{
    		if(bTatch)
    		{
    			OutputDebugString(_T("HookProcDll.dll Attach iexplore.exe"));
    		}
    		else
    		{
    			OutputDebugString(_T("HookProcDll.dll Detach iexplore.exe"));
    		}
    		
    		// 当前注入的进程为IE浏览器,通知目标程序,将进程ID发给目标程序
    		DWORD processId = GetProcessId(GetCurrentProcess());
    		BOOL ret = PostMessage(targetWnd,WM_IE_OPEN,bTatch,(LPARAM)processId);
    		if(ret == FALSE)
    		{
    			DWORD errCode = GetLastError();
    			CString errMsg = CUtility::GetErrorMsg(errCode);
    			CString temp;
    			temp.Format(_T("PostMessage failed!!!errCode:%d,errMsg:%s"),errCode,errMsg);
    			OutputDebugString(temp);
    		}
    	}
    }
    
    // DLL 入口
    BOOL APIENTRY DllMain( HMODULE hModule,
    	DWORD  ul_reason_for_call,
    	LPVOID lpReserved
    	)
    {
    	g_hModule = hModule;
    	switch (ul_reason_for_call)
    	{
    	case DLL_PROCESS_ATTACH:
    		{
    			NotifyYourApp(TRUE);
    		}
    		break;
    	case DLL_PROCESS_DETACH:
    		{
    			// 什么情况 钩子DLL会被卸载？当Windows全局钩子被卸载后 系统会卸载该DLL，程序主动退出也会卸载该DLL
    			NotifyYourApp(FALSE);
    		}
    		break;
    	}
    	return TRUE;
    }

## 完整项目 ##

[完整项目这里下载][Link 2]，[没分可以github下载最新代码(global\_hook分支)][github_global_hook]。

[C_C_Windows_Hook IE_URL]: https://blog.csdn.net/qq_29542611/article/details/103756071
[https_blog.csdn.net_maoenpei002_article_details_5358601]: https://blog.csdn.net/maoenpei002/article/details/5358601
[Link 1]: https://www.bilibili.com/video/av83086658/
[Link 2]: https://download.csdn.net/download/qq_29542611/12098926
[github_global_hook]: https://github.com/licongxing/HookIE.git