Skip to content

C
ComWeChatRobot

life_007 / ComWeChatRobot
与 Fork 源项目一致

从无法访问的项目Fork

通知 1
Star 0
Fork 0
C
ComWeChatRobot

前往新版Gitcode，体验更适合开发者的 AI 搜索 >>

提交 cf93a682 编写于 作者: L ljc545w
浏览文件
操作

增加发送文章接口

上级 b446f286
隐藏空白更改
内联 并排
Showing with 300 addition and 119 deletion
CWeChatRobot/SendArticle.cpp 0 → 100644
浏览文件 @ cf93a682
#include "pch.h"
struct SendArticleStruct {
DWORD wxid;
DWORD title;
DWORD abstract;
DWORD url;
};
BOOL SendArticle(wchar_t* wxid, wchar_t* title, wchar_t* abstract, wchar_t* url) {
if (!hProcess)
return 0;
DWORD WeChatRobotBase = GetWeChatRobotBase();
DWORD dwId = 0;
DWORD dwWriteSize = 0;
SendArticleStruct params;
ZeroMemory(&params, sizeof(params));
DWORD SendArticleProcAddr = WeChatRobotBase + SendArticleOffset;
LPVOID wxidaddr = VirtualAllocEx(hProcess, NULL, 1, MEM_COMMIT, PAGE_READWRITE);
LPVOID titleaddr = VirtualAllocEx(hProcess, NULL, 1, MEM_COMMIT, PAGE_READWRITE);
LPVOID abstractaddr = VirtualAllocEx(hProcess, NULL, 1, MEM_COMMIT, PAGE_READWRITE);
LPVOID urladdr = VirtualAllocEx(hProcess, NULL, 1, MEM_COMMIT, PAGE_READWRITE);
SendArticleStruct* paramAndFunc = (SendArticleStruct*)::VirtualAllocEx(hProcess, 0, sizeof(SendArticleStruct), MEM_COMMIT, PAGE_READWRITE);
if (!wxidaddr || !titleaddr || !abstractaddr || !urladdr ||
!paramAndFunc || !WeChatRobotBase)
{
return 0;
}
if (wxidaddr)
WriteProcessMemory(hProcess, wxidaddr, wxid, wcslen(wxid) * 2 + 2, &dwWriteSize);
if (titleaddr)
WriteProcessMemory(hProcess, titleaddr, title, wcslen(title) * 2 + 2, &dwWriteSize);
if (abstractaddr)
WriteProcessMemory(hProcess, abstractaddr, abstract, wcslen(abstract) * 2 + 2, &dwWriteSize);
if (urladdr)
WriteProcessMemory(hProcess, urladdr, url, wcslen(url) * 2 + 2, &dwWriteSize);
params.wxid = (DWORD)wxidaddr;
params.title = (DWORD)titleaddr;
params.abstract = (DWORD)abstractaddr;
params.url = (DWORD)urladdr;
if (paramAndFunc)
WriteProcessMemory(hProcess, paramAndFunc, &params, sizeof(params), &dwId);
HANDLE hThread = ::CreateRemoteThread(hProcess, NULL, 0, (LPTHREAD_START_ROUTINE)SendArticleProcAddr, (LPVOID)paramAndFunc, 0, &dwId);
if (hThread) {
WaitForSingleObject(hThread, INFINITE);
CloseHandle(hThread);
}
VirtualFreeEx(hProcess, wxidaddr, 0, MEM_RELEASE);
VirtualFreeEx(hProcess, titleaddr, 0, MEM_RELEASE);
VirtualFreeEx(hProcess, abstractaddr, 0, MEM_RELEASE);
VirtualFreeEx(hProcess, urladdr, 0, MEM_RELEASE);
VirtualFreeEx(hProcess, paramAndFunc, 0, MEM_RELEASE);
return 1;
}
\ No newline at end of file
CWeChatRobot/SendArticle.h 0 → 100644
浏览文件 @ cf93a682
#pragma once
#include<windows.h>
BOOL SendArticle(wchar_t* wxid, wchar_t* title, wchar_t* abstract, wchar_t* url);
\ No newline at end of file
CWeChatRobot/WeChatRobot.cpp
浏览文件 @ cf93a682
......@@ -52,6 +52,18 @@ STDMETHODIMP CWeChatRobot::CSendFile(BSTR wxid, BSTR filepath, int* __result) {
return S_OK;
}
/*
* 参数1：接收人wxid
* 参数2：文章标题
* 参数3：文章摘要
* 参数4：文章链接
* 参数5：预返回的值，调用时无需提供
*/
STDMETHODIMP CWeChatRobot::CSendArticle(BSTR wxid, BSTR title,BSTR abstract,BSTR url, int* __result) {
*__result = SendArticle(wxid, title,abstract,url);
return S_OK;
}
/*
* 参数1：预返回的值，调用时无需提供
*/
......
CWeChatRobot/WeChatRobot.h
浏览文件 @ cf93a682
......@@ -56,6 +56,7 @@ public:
STDMETHODIMP CSendImage(BSTR wxid, BSTR imagepath, int* __result);
STDMETHODIMP CSendText(BSTR wxid, BSTR wxmsg, int* __result);
STDMETHODIMP CSendFile(BSTR wxid, BSTR filepath, int* __result);
STDMETHODIMP CSendArticle(BSTR wxid, BSTR title, BSTR abstract, BSTR url, int* __result);
STDMETHODIMP CGetFriendList(BSTR* __result);
STDMETHODIMP CGetWxUserInfo(BSTR wxid, BSTR* __result);
STDMETHODIMP CGetSelfInfo(BSTR* __result);
......
CWeChatRobot/WeChatRobotCOM.idl
浏览文件 @ cf93a682
......@@ -21,9 +21,10 @@ interface IWeChatRobot : IDispatch
[id(3)] HRESULT CSendText([in] BSTR wxid, [in] BSTR wxmsg, [out, retval] int* __result);
[id(4)] HRESULT CSendImage([in] BSTR wxid, [in] BSTR imagepath, [out, retval] int* __result);
[id(5)] HRESULT CSendFile([in] BSTR wxid, [in] BSTR filepath, [out, retval] int* __result);
[id(6)] HRESULT CGetFriendList([out, retval] BSTR* __result);
[id(7)] HRESULT CGetWxUserInfo([in] BSTR wxid, [out, retval] BSTR* __result);
[id(8)] HRESULT CGetSelfInfo([out, retval] BSTR* __result);
[id(6)] HRESULT CSendArticle([in] BSTR wxid, [in] BSTR title, [in] BSTR abstract, [in] BSTR url, [out, retval] int* __result);
[id(7)] HRESULT CGetFriendList([out, retval] BSTR* __result);
[id(8)] HRESULT CGetWxUserInfo([in] BSTR wxid, [out, retval] BSTR* __result);
[id(9)] HRESULT CGetSelfInfo([out, retval] BSTR* __result);
};
[
uuid(721abb35-141a-4aa2-94f2-762e2833fa6c),
......
CWeChatRobot/WeChatRobotCOM.vcxproj
浏览文件 @ cf93a682
......@@ -218,6 +218,7 @@
<ClInclude Include="Resource.h" />
<ClInclude Include="robotdata.h" />
<ClInclude Include="SelfInfo.h" />
<ClInclude Include="SendArticle.h" />
<ClInclude Include="SendFile.h" />
<ClInclude Include="SendImage.h" />
<ClInclude Include="SendText.h" />
......@@ -237,6 +238,7 @@
<PrecompiledHeader Condition="'$(Configuration)|$(Platform)'=='Release|x64'">Create</PrecompiledHeader>
</ClCompile>
<ClCompile Include="SelfInfo.cpp" />
<ClCompile Include="SendArticle.cpp" />
<ClCompile Include="SendFile.cpp" />
<ClCompile Include="SendImage.cpp" />
<ClCompile Include="SendText.cpp" />
......
CWeChatRobot/WeChatRobotCOM.vcxproj.filters
浏览文件 @ cf93a682
......@@ -44,6 +44,9 @@
<Filter Include="个人信息">
<UniqueIdentifier>{82fef7e4-e819-4cb2-9087-40ae1f426e73}</UniqueIdentifier>
</Filter>
<Filter Include="发送消息\发送文章">
<UniqueIdentifier>{1986e9ed-7cd3-4ad3-b333-a1d74cc53c28}</UniqueIdentifier>
</Filter>
</ItemGroup>
<ItemGroup>
<ClInclude Include="framework.h">
......@@ -91,6 +94,9 @@
<ClInclude Include="SelfInfo.h">
<Filter>个人信息</Filter>
</ClInclude>
<ClInclude Include="SendArticle.h">
<Filter>发送消息\发送文章</Filter>
</ClInclude>
</ItemGroup>
<ItemGroup>
<ClCompile Include="WeChatRobotCOM.cpp">
......@@ -129,6 +135,9 @@
<ClCompile Include="SelfInfo.cpp">
<Filter>个人信息</Filter>
</ClCompile>
<ClCompile Include="SendArticle.cpp">
<Filter>发送消息\发送文章</Filter>
</ClCompile>
</ItemGroup>
<ItemGroup>
<ResourceCompile Include="WeChatRobotCOM.rc">
......
CWeChatRobot/WeChatRobotCOM_i.h
浏览文件 @ cf93a682
......@@ -110,6 +110,13 @@ EXTERN_C const IID IID_IWeChatRobot;
/* [in] */ BSTR filepath,
/* [retval][out] */ int *__result) = 0;
virtual /* [id] */ HRESULT STDMETHODCALLTYPE CSendArticle(
/* [in] */ BSTR wxid,
/* [in] */ BSTR title,
/* [in] */ BSTR abstract,
/* [in] */ BSTR url,
/* [retval][out] */ int *__result) = 0;
virtual /* [id] */ HRESULT STDMETHODCALLTYPE CGetFriendList(
/* [retval][out] */ BSTR *__result) = 0;
......@@ -205,6 +212,14 @@ EXTERN_C const IID IID_IWeChatRobot;
/* [in] */ BSTR filepath,
/* [retval][out] */ int *__result);
/* [id] */ HRESULT ( STDMETHODCALLTYPE *CSendArticle )(
IWeChatRobot * This,
/* [in] */ BSTR wxid,
/* [in] */ BSTR title,
/* [in] */ BSTR abstract,
/* [in] */ BSTR url,
/* [retval][out] */ int *__result);
/* [id] */ HRESULT ( STDMETHODCALLTYPE *CGetFriendList )(
IWeChatRobot * This,
/* [retval][out] */ BSTR *__result);
......@@ -269,6 +284,9 @@ EXTERN_C const IID IID_IWeChatRobot;
#define IWeChatRobot_CSendFile(This,wxid,filepath,__result) \
( (This)->lpVtbl -> CSendFile(This,wxid,filepath,__result) )
#define IWeChatRobot_CSendArticle(This,wxid,title,abstract,url,__result) \
( (This)->lpVtbl -> CSendArticle(This,wxid,title,abstract,url,__result) )
#define IWeChatRobot_CGetFriendList(This,__result) \
( (This)->lpVtbl -> CGetFriendList(This,__result) )
......
CWeChatRobot/WeChatRobotCOM_p.c
浏览文件 @ cf93a682
......@@ -49,7 +49,7 @@
#include "WeChatRobotCOM_i.h"
#define TYPE_FORMAT_STRING_SIZE 71
#define PROC_FORMAT_STRING_SIZE 337
#define PROC_FORMAT_STRING_SIZE 397
#define EXPR_FORMAT_STRING_SIZE 1
#define TRANSMIT_AS_TABLE_SIZE 0
#define WIRE_MARSHAL_TABLE_SIZE 1
......@@ -304,100 +304,155 @@ static const WeChatRobotCOM_MIDL_PROC_FORMAT_STRING WeChatRobotCOM__MIDL_ProcFor
/* 220 */ 0x8, /* FC_LONG */
0x0, /* 0 */
/* Procedure CGetFriendList */
/* Procedure CSendArticle */
/* 222 */ 0x33, /* FC_AUTO_HANDLE */
0x6c, /* Old Flags: object, Oi2 */
/* 224 */ NdrFcLong( 0x0 ), /* 0 */
/* 228 */ NdrFcShort( 0xc ), /* 12 */
/* 230 */ NdrFcShort( 0xc ), /* x86 Stack size/offset = 12 */
/* 230 */ NdrFcShort( 0x1c ), /* x86 Stack size/offset = 28 */
/* 232 */ NdrFcShort( 0x0 ), /* 0 */
/* 234 */ NdrFcShort( 0x8 ), /* 8 */
/* 236 */ 0x45, /* Oi2 Flags: srv must size, has return, has ext, */
0x2, /* 2 */
/* 234 */ NdrFcShort( 0x24 ), /* 36 */
/* 236 */ 0x46, /* Oi2 Flags: clt must size, has return, has ext, */
0x6, /* 6 */
/* 238 */ 0x8, /* 8 */
0x43, /* Ext Flags: new corr desc, clt corr check, has range on conformance */
/* 240 */ NdrFcShort( 0x1 ), /* 1 */
/* 242 */ NdrFcShort( 0x0 ), /* 0 */
0x45, /* Ext Flags: new corr desc, srv corr check, has range on conformance */
/* 240 */ NdrFcShort( 0x0 ), /* 0 */
/* 242 */ NdrFcShort( 0x1 ), /* 1 */
/* 244 */ NdrFcShort( 0x0 ), /* 0 */
/* Parameter __result */
/* Parameter wxid */
/* 246 */ NdrFcShort( 0x2113 ), /* Flags: must size, must free, out, simple ref, srv alloc size=8 */
/* 246 */ NdrFcShort( 0x8b ), /* Flags: must size, must free, in, by val, */
/* 248 */ NdrFcShort( 0x4 ), /* x86 Stack size/offset = 4 */
/* 250 */ NdrFcShort( 0x3c ), /* Type Offset=60 */
/* 250 */ NdrFcShort( 0x26 ), /* Type Offset=38 */
/* Return value */
/* Parameter title */
/* 252 */ NdrFcShort( 0x70 ), /* Flags: out, return, base type, */
/* 252 */ NdrFcShort( 0x8b ), /* Flags: must size, must free, in, by val, */
/* 254 */ NdrFcShort( 0x8 ), /* x86 Stack size/offset = 8 */
/* 256 */ 0x8, /* FC_LONG */
/* 256 */ NdrFcShort( 0x26 ), /* Type Offset=38 */
/* Parameter abstract */
/* 258 */ NdrFcShort( 0x8b ), /* Flags: must size, must free, in, by val, */
/* 260 */ NdrFcShort( 0xc ), /* x86 Stack size/offset = 12 */
/* 262 */ NdrFcShort( 0x26 ), /* Type Offset=38 */
/* Parameter url */
/* 264 */ NdrFcShort( 0x8b ), /* Flags: must size, must free, in, by val, */
/* 266 */ NdrFcShort( 0x10 ), /* x86 Stack size/offset = 16 */
/* 268 */ NdrFcShort( 0x26 ), /* Type Offset=38 */
/* Parameter __result */
/* 270 */ NdrFcShort( 0x2150 ), /* Flags: out, base type, simple ref, srv alloc size=8 */
/* 272 */ NdrFcShort( 0x14 ), /* x86 Stack size/offset = 20 */
/* 274 */ 0x8, /* FC_LONG */
0x0, /* 0 */
/* Return value */
/* 276 */ NdrFcShort( 0x70 ), /* Flags: out, return, base type, */
/* 278 */ NdrFcShort( 0x18 ), /* x86 Stack size/offset = 24 */
/* 280 */ 0x8, /* FC_LONG */
0x0, /* 0 */
/* Procedure CGetFriendList */
/* 282 */ 0x33, /* FC_AUTO_HANDLE */
0x6c, /* Old Flags: object, Oi2 */
/* 284 */ NdrFcLong( 0x0 ), /* 0 */
/* 288 */ NdrFcShort( 0xd ), /* 13 */
/* 290 */ NdrFcShort( 0xc ), /* x86 Stack size/offset = 12 */
/* 292 */ NdrFcShort( 0x0 ), /* 0 */
/* 294 */ NdrFcShort( 0x8 ), /* 8 */
/* 296 */ 0x45, /* Oi2 Flags: srv must size, has return, has ext, */
0x2, /* 2 */
/* 298 */ 0x8, /* 8 */
0x43, /* Ext Flags: new corr desc, clt corr check, has range on conformance */
/* 300 */ NdrFcShort( 0x1 ), /* 1 */
/* 302 */ NdrFcShort( 0x0 ), /* 0 */
/* 304 */ NdrFcShort( 0x0 ), /* 0 */
/* Parameter __result */
/* 306 */ NdrFcShort( 0x2113 ), /* Flags: must size, must free, out, simple ref, srv alloc size=8 */
/* 308 */ NdrFcShort( 0x4 ), /* x86 Stack size/offset = 4 */
/* 310 */ NdrFcShort( 0x3c ), /* Type Offset=60 */
/* Return value */
/* 312 */ NdrFcShort( 0x70 ), /* Flags: out, return, base type, */
/* 314 */ NdrFcShort( 0x8 ), /* x86 Stack size/offset = 8 */
/* 316 */ 0x8, /* FC_LONG */
0x0, /* 0 */
/* Procedure CGetWxUserInfo */
/* 258 */ 0x33, /* FC_AUTO_HANDLE */
/* 318 */ 0x33, /* FC_AUTO_HANDLE */
0x6c, /* Old Flags: object, Oi2 */
/* 260 */ NdrFcLong( 0x0 ), /* 0 */
/* 264 */ NdrFcShort( 0xd ), /* 13 */
/* 266 */ NdrFcShort( 0x10 ), /* x86 Stack size/offset = 16 */
/* 268 */ NdrFcShort( 0x0 ), /* 0 */
/* 270 */ NdrFcShort( 0x8 ), /* 8 */
/* 272 */ 0x47, /* Oi2 Flags: srv must size, clt must size, has return, has ext, */
/* 320 */ NdrFcLong( 0x0 ), /* 0 */
/* 324 */ NdrFcShort( 0xe ), /* 14 */
/* 326 */ NdrFcShort( 0x10 ), /* x86 Stack size/offset = 16 */
/* 328 */ NdrFcShort( 0x0 ), /* 0 */
/* 330 */ NdrFcShort( 0x8 ), /* 8 */
/* 332 */ 0x47, /* Oi2 Flags: srv must size, clt must size, has return, has ext, */
0x3, /* 3 */
/* 274 */ 0x8, /* 8 */
/* 334 */ 0x8, /* 8 */
0x47, /* Ext Flags: new corr desc, clt corr check, srv corr check, has range on conformance */
/* 276 */ NdrFcShort( 0x1 ), /* 1 */
/* 278 */ NdrFcShort( 0x1 ), /* 1 */
/* 280 */ NdrFcShort( 0x0 ), /* 0 */
/* 336 */ NdrFcShort( 0x1 ), /* 1 */
/* 338 */ NdrFcShort( 0x1 ), /* 1 */
/* 340 */ NdrFcShort( 0x0 ), /* 0 */
/* Parameter wxid */
/* 282 */ NdrFcShort( 0x8b ), /* Flags: must size, must free, in, by val, */
/* 284 */ NdrFcShort( 0x4 ), /* x86 Stack size/offset = 4 */
/* 286 */ NdrFcShort( 0x26 ), /* Type Offset=38 */
/* 342 */ NdrFcShort( 0x8b ), /* Flags: must size, must free, in, by val, */
/* 344 */ NdrFcShort( 0x4 ), /* x86 Stack size/offset = 4 */
/* 346 */ NdrFcShort( 0x26 ), /* Type Offset=38 */
/* Parameter __result */
/* 288 */ NdrFcShort( 0x2113 ), /* Flags: must size, must free, out, simple ref, srv alloc size=8 */
/* 290 */ NdrFcShort( 0x8 ), /* x86 Stack size/offset = 8 */
/* 292 */ NdrFcShort( 0x3c ), /* Type Offset=60 */
/* 348 */ NdrFcShort( 0x2113 ), /* Flags: must size, must free, out, simple ref, srv alloc size=8 */
/* 350 */ NdrFcShort( 0x8 ), /* x86 Stack size/offset = 8 */
/* 352 */ NdrFcShort( 0x3c ), /* Type Offset=60 */
/* Return value */
/* 294 */ NdrFcShort( 0x70 ), /* Flags: out, return, base type, */
/* 296 */ NdrFcShort( 0xc ), /* x86 Stack size/offset = 12 */
/* 298 */ 0x8, /* FC_LONG */
/* 354 */ NdrFcShort( 0x70 ), /* Flags: out, return, base type, */
/* 356 */ NdrFcShort( 0xc ), /* x86 Stack size/offset = 12 */
/* 358 */ 0x8, /* FC_LONG */
0x0, /* 0 */
/* Procedure CGetSelfInfo */
/* 300 */ 0x33, /* FC_AUTO_HANDLE */
/* 360 */ 0x33, /* FC_AUTO_HANDLE */
0x6c, /* Old Flags: object, Oi2 */
/* 302 */ NdrFcLong( 0x0 ), /* 0 */
/* 306 */ NdrFcShort( 0xe ), /* 14 */
/* 308 */ NdrFcShort( 0xc ), /* x86 Stack size/offset = 12 */
/* 310 */ NdrFcShort( 0x0 ), /* 0 */
/* 312 */ NdrFcShort( 0x8 ), /* 8 */
/* 314 */ 0x45, /* Oi2 Flags: srv must size, has return, has ext, */
/* 362 */ NdrFcLong( 0x0 ), /* 0 */
/* 366 */ NdrFcShort( 0xf ), /* 15 */
/* 368 */ NdrFcShort( 0xc ), /* x86 Stack size/offset = 12 */
/* 370 */ NdrFcShort( 0x0 ), /* 0 */
/* 372 */ NdrFcShort( 0x8 ), /* 8 */
/* 374 */ 0x45, /* Oi2 Flags: srv must size, has return, has ext, */
0x2, /* 2 */
/* 316 */ 0x8, /* 8 */
/* 376 */ 0x8, /* 8 */
0x43, /* Ext Flags: new corr desc, clt corr check, has range on conformance */
/* 318 */ NdrFcShort( 0x1 ), /* 1 */
/* 320 */ NdrFcShort( 0x0 ), /* 0 */
/* 322 */ NdrFcShort( 0x0 ), /* 0 */
/* 378 */ NdrFcShort( 0x1 ), /* 1 */
/* 380 */ NdrFcShort( 0x0 ), /* 0 */
/* 382 */ NdrFcShort( 0x0 ), /* 0 */
/* Parameter __result */
/* 324 */ NdrFcShort( 0x2113 ), /* Flags: must size, must free, out, simple ref, srv alloc size=8 */
/* 326 */ NdrFcShort( 0x4 ), /* x86 Stack size/offset = 4 */
/* 328 */ NdrFcShort( 0x3c ), /* Type Offset=60 */
/* 384 */ NdrFcShort( 0x2113 ), /* Flags: must size, must free, out, simple ref, srv alloc size=8 */
/* 386 */ NdrFcShort( 0x4 ), /* x86 Stack size/offset = 4 */
/* 388 */ NdrFcShort( 0x3c ), /* Type Offset=60 */
/* Return value */
/* 330 */ NdrFcShort( 0x70 ), /* Flags: out, return, base type, */
/* 332 */ NdrFcShort( 0x8 ), /* x86 Stack size/offset = 8 */
/* 334 */ 0x8, /* FC_LONG */
/* 390 */ NdrFcShort( 0x70 ), /* Flags: out, return, base type, */
/* 392 */ NdrFcShort( 0x8 ), /* x86 Stack size/offset = 8 */
/* 394 */ 0x8, /* FC_LONG */
0x0, /* 0 */
0x0
......@@ -500,8 +555,9 @@ static const unsigned short IWeChatRobot_FormatStringOffsetTable[] =
126,
174,
222,
258,
300
282,
318,
360
};
static const MIDL_STUBLESS_PROXY_INFO IWeChatRobot_ProxyInfo =
......@@ -525,7 +581,7 @@ static const MIDL_SERVER_INFO IWeChatRobot_ServerInfo =
0,
0,
0};
CINTERFACE_PROXY_VTABLE(15) _IWeChatRobotProxyVtbl =
CINTERFACE_PROXY_VTABLE(16) _IWeChatRobotProxyVtbl =
{
&IWeChatRobot_ProxyInfo,
&IID_IWeChatRobot,
......@@ -541,6 +597,7 @@ CINTERFACE_PROXY_VTABLE(15) _IWeChatRobotProxyVtbl =
(void *) (INT_PTR) -1 /* IWeChatRobot::CSendText */ ,
(void *) (INT_PTR) -1 /* IWeChatRobot::CSendImage */ ,
(void *) (INT_PTR) -1 /* IWeChatRobot::CSendFile */ ,
(void *) (INT_PTR) -1 /* IWeChatRobot::CSendArticle */ ,
(void *) (INT_PTR) -1 /* IWeChatRobot::CGetFriendList */ ,
(void *) (INT_PTR) -1 /* IWeChatRobot::CGetWxUserInfo */ ,
(void *) (INT_PTR) -1 /* IWeChatRobot::CGetSelfInfo */
......@@ -560,6 +617,7 @@ static const PRPC_STUB_FUNCTION IWeChatRobot_table[] =
NdrStubCall2,
NdrStubCall2,
NdrStubCall2,
NdrStubCall2,
NdrStubCall2
};
......@@ -567,7 +625,7 @@ CInterfaceStubVtbl _IWeChatRobotStubVtbl =
{
&IID_IWeChatRobot,
&IWeChatRobot_ServerInfo,
15,
16,
&IWeChatRobot_table[-3],
CStdStubBuffer_DELEGATING_METHODS
};
......
CWeChatRobot/pch.cpp
浏览文件 @ cf93a682
......@@ -6,6 +6,7 @@
DWORD SendImageOffset = 0x0;
DWORD SendTextOffset = 0x0;
DWORD SendFileOffset = 0x0;
DWORD SendArticleOffset = 0x0;
DWORD GetFriendListInitOffset = 0x0;
DWORD GetFriendListRemoteOffset = 0x0;
......@@ -81,6 +82,8 @@ void GetProcOffset(wchar_t* workPath) {
SendTextOffset = SendTextProcAddr - WeChatBase;
DWORD SendFileProcAddr = (DWORD)GetProcAddress(hd, SendFileRemote);
SendFileOffset = SendFileProcAddr - WeChatBase;
DWORD SendArticleProcAddr = (DWORD)GetProcAddress(hd, SendArticleRemote);
SendArticleOffset = SendArticleProcAddr - WeChatBase;
DWORD GetFriendListInitProcAddr = (DWORD)GetProcAddress(hd, GetFriendListInit);
GetFriendListInitOffset = GetFriendListInitProcAddr - WeChatBase;
......
CWeChatRobot/robotdata.h
浏览文件 @ cf93a682
......@@ -3,6 +3,7 @@
#include "SendImage.h"
#include "SendText.h"
#include "SendFile.h"
#include "SendArticle.h"
#include "FriendList.h"
#include "UserInfo.h"
#include "SelfInfo.h"
......@@ -11,6 +12,7 @@ extern HANDLE hProcess;
extern DWORD SendImageOffset;
extern DWORD SendTextOffset;
extern DWORD SendFileOffset;
extern DWORD SendArticleOffset;
extern DWORD GetFriendListInitOffset;
extern DWORD GetFriendListRemoteOffset;
......@@ -28,6 +30,7 @@ extern wstring SelfInfoString;
#define SendTextRemote "SendTextRemote"
#define SendImageRemote "SendImageRemote"
#define SendFileRemote "SendFileRemote"
#define SendArticleRemote "SendArticleRemote"
#define GetFriendListInit "GetFriendListInit"
#define GetFriendListRemote "GetFriendListRemote"
......
DWeChatRobot/SelfInfo.cpp
浏览文件 @ cf93a682
......@@ -8,6 +8,7 @@ struct SelfInfoStruct {
DWORD length;
} ret;
// дBUG
DWORD GetSelfInfoRemote() {
DWORD WeChatWinBase = GetWeChatWinBase();
vector<DWORD> SelfInfoAddr = {
......@@ -35,14 +36,24 @@ DWORD GetSelfInfoRemote() {
L"\"wxCity\"",
L"\"PhoneNumber\""
};
#ifdef _DEBUG
wcout.imbue(locale("chs"));
#endif
selfinfo = selfinfo + L"{";
for (unsigned int i = 0; i < SelfInfoAddr.size(); i++) {
selfinfo = selfinfo + SelfInfoKey[i] + L":";
selfinfo = selfinfo + L"\"";
char* temp = (*((DWORD*)SelfInfoAddr[i]) != 0) ? (char*)SelfInfoAddr[i] : (char*)"null";
#ifdef _DEBUG
cout << temp << endl;
#endif
continue;
wchar_t* wtemp = new wchar_t[strlen(temp) + 1];
ZeroMemory(wtemp, (strlen(temp) + 1) * 2);
MultiByteToWideChar(CP_UTF8, MB_COMPOSITE, temp, -1, wtemp, strlen(temp) + 1);
#ifdef _DEBUG
wcout << wtemp << endl;
#endif
selfinfo = selfinfo + wtemp;
selfinfo = selfinfo + L"\"";
if(i!= SelfInfoAddr.size() - 1)
......@@ -54,7 +65,6 @@ DWORD GetSelfInfoRemote() {
ret.message = (DWORD)selfinfo.c_str();
ret.length = selfinfo.length();
#ifdef _DEBUG
wcout.imbue(locale("chs"));
wcout << selfinfo << endl;
DeleteSelfInfoCacheRemote();
#endif
......
DWeChatRobot/SendArticle.cpp
浏览文件 @ cf93a682
#include "pch.h"
struct SendArticleStruct {
DWORD wxid;
DWORD title;
DWORD abstract;
DWORD wxid;
DWORD url;
};
struct WxSendXmlStruct
{
wchar_t* buffer;
DWORD length;
DWORD maxLength;
DWORD fill1;
DWORD fill2;
char nullbuffer[0x3C] = { 0 };
WxSendXmlStruct(wchar_t* pStr) {
buffer = pStr;
length = wcslen(pStr);
maxLength = wcslen(pStr) * 2;
fill1 = 0x0;
fill2 = 0x0;
}
};
VOID SendArticleRemote(LPVOID lparameter) {
SendArticleStruct* sas = (SendArticleStruct*)lparameter;
wchar_t* wxid = (wchar_t*)sas->wxid;
wchar_t* title = (wchar_t*)sas->title;
wchar_t* abstract = (wchar_t*)sas->abstract;
wchar_t* url = (wchar_t*)sas->url;
SendArticle(wxid,title,abstract,url);
}
struct WxSenderStruct
{
wchar_t* buffer;
DWORD length;
DWORD maxLength;
DWORD fill1;
DWORD fill2;
char nullbuffer[0x64] = { 0 };
BOOL __stdcall SendArticle(wchar_t* wxid,wchar_t* title, wchar_t* abstract, wchar_t* url) {
DWORD WeChatWinBase = GetWeChatWinBase();
DWORD SendArticleCall1 = WeChatWinBase + 0x5BC68E80 - 0x5BBE0000;
DWORD SendArticleCall2 = WeChatWinBase + 0x03297840 - 0x02F20000;
DWORD SendArticleCall3 = WeChatWinBase + 0x5BC9C570 - 0x5BBE0000;
DWORD SendArticleCall4 = WeChatWinBase + 0x5BF57A10 - 0x5BBE0000;
WxSenderStruct(wchar_t* pStr) {
buffer = pStr;
length = wcslen(pStr);
maxLength = wcslen(pStr) * 2;
fill1 = 0x0;
fill2 = 0x0;
}
};
DWORD SendArticleParam = WeChatWinBase + 0x5DDCCD1C - 0x5BBE0000;
BOOL SendArticle(wchar_t* wxid,wchar_t* title, wchar_t* abstract, wchar_t* url) {
DWORD WeChatWinBase = GetWeChatWinBase();
DWORD SendArticleCall = WeChatWinBase + 0x03297840 - 0x02F20000;
DWORD SendArticleClearCacheCall1 = WeChatWinBase + 0x5C1F40D0 - 0x5BBE0000;
DWORD SendArticleClearCacheCall2 = WeChatWinBase + 0x59637BA0 - 0x595B0000;
// 自己的wxid，发送者
char* sselfwxid = (char*)(*(DWORD*)(WeChatWinBase + 0x21DC9C4));
wchar_t* wselfwxid = new wchar_t[strlen(sselfwxid) + 1];
MultiByteToWideChar(CP_ACP, MB_COMPOSITE, sselfwxid, -1, wselfwxid, strlen(sselfwxid) + 1);
// 构造xml数据
wchar_t* xmlbuffer = new wchar_t[0x2000];
ZeroMemory(xmlbuffer, 0x2000 * 2);
swprintf_s(xmlbuffer,0x2000, (wchar_t*)L"<msg>\n <fromusername>%ws</fromusername>\n <scene>0</scene>\n <commenturl></commenturl>\n <appmsg appid=\"\" sdkver=\"0\">\n <title>%ws</title>\n <des>%ws</des>\n <action>view</action>\n <type>5</type>\n <showtype>0</showtype>\n <content></content>\n <url>%ws</url>\n <dataurl></dataurl>\n <lowurl></lowurl>\n <lowdataurl></lowdataurl>\n <recorditem>\n <![CDATA[]]>\n </recorditem>\n <thumburl></thumburl>\n <messageaction></messageaction>\n <extinfo></extinfo>\n <sourceusername></sourceusername>\n <sourcedisplayname></sourcedisplayname>\n <commenturl></commenturl>\n <appattach>\n <totallen>0</totallen>\n <attachid></attachid>\n <emoticonmd5></emoticonmd5>\n <fileext></fileext>\n <aeskey></aeskey>\n </appattach>\n <weappinfo>\n <pagepath></pagepath>\n <username></username>\n <appid></appid>\n <appservicetype>0</appservicetype>\n </weappinfo>\n <websearch />\n </appmsg>\n <appinfo>\n <version>1</version>\n <appname>Window wechat</appname>\n </appinfo>\n</msg>",
wselfwxid,title,abstract,url);
DWORD sendtype = 0x5;
WxSenderStruct pSender(wselfwxid);
WxBaseStruct pSender(wselfwxid);
char nullbuffer[0x1C] = { 0 };
char imgbuffer[0x3C] = { 0 };
WxSendXmlStruct pXml(xmlbuffer);
WxSenderStruct pReceiver(wxid);
WxBaseStruct pXml(xmlbuffer);
WxBaseStruct pReceiver(wxid);
WxString imgbuffer = { 0 };
WxString nullStruct = { 0 };
char buffer[0xF70] = { 0 };
DWORD isSuccess = 0x0;
__asm {
pushad;
pushfd;
lea ecx, buffer;
call SendArticleCall1;
mov eax, [sendtype];
push eax;
lea eax, nullbuffer;
......@@ -77,9 +63,23 @@ BOOL SendArticle(wchar_t* wxid,wchar_t* title, wchar_t* abstract, wchar_t* url)
lea edi, pReceiver;
push edi;
lea ecx, buffer;
call SendArticleCall;
call SendArticleCall2;
add esp, 0x14;
lea eax, nullStruct;
push eax;
lea ecx, buffer;
call SendArticleCall3;
mov dl, 0x0;
lea ecx, buffer;
push SendArticleParam;
push SendArticleParam;
call SendArticleCall4;
mov isSuccess, eax;
add esp, 0x8;
lea ecx, buffer;
call SendArticleClearCacheCall1;
lea ecx, buffer;
call SendArticleClearCacheCall2;
popfd;
popad;
}
......@@ -87,5 +87,5 @@ BOOL SendArticle(wchar_t* wxid,wchar_t* title, wchar_t* abstract, wchar_t* url)
xmlbuffer = NULL;
delete[] wselfwxid;
wselfwxid = NULL;
return isSuccess;
return (isSuccess == 0x1);
}
\ No newline at end of file
DWeChatRobot/SendArticle.h
浏览文件 @ cf93a682
#pragma once
#include<windows.h>
BOOL SendArticle(wchar_t* wxid, wchar_t* title, wchar_t* abstract, wchar_t* url);
\ No newline at end of file
extern "C" __declspec(dllexport) VOID SendArticleRemote(LPVOID lparameter);
BOOL __stdcall SendArticle(wchar_t* wxid, wchar_t* title, wchar_t* abstract, wchar_t* url);
\ No newline at end of file
DWeChatRobot/UserInfo.cpp
浏览文件 @ cf93a682
......@@ -101,7 +101,7 @@ VOID DeleteUserInfoCacheRemote() {
}
}
BOOL GetUserInfoByWxId(wchar_t* wxid,DWORD &address) {
BOOL __stdcall GetUserInfoByWxId(wchar_t* wxid,DWORD &address) {
DWORD WeChatWinBase = GetWeChatWinBase();
DWORD GetUserDetailInfoCall1 = WeChatWinBase + GetUserInfoCall1Offset;
DWORD GetUserDetailInfoCall2 = WeChatWinBase + GetUserInfoCall2Offset;
......@@ -157,7 +157,7 @@ BOOL GetUserInfoByWxId(wchar_t* wxid,DWORD &address) {
}
// 另外一个查询好友信息的地方
BOOL GetWxUserInfoByWxid2(wchar_t* wxid, DWORD& address) {
BOOL __stdcall GetWxUserInfoByWxid2(wchar_t* wxid, DWORD& address) {
DWORD WeChatWinBase = GetWeChatWinBase();
DWORD WxUserDataCall1 = WeChatWinBase + 0x645BD9A0 - 0x64530000;
DWORD WxUserDataCall2 = WeChatWinBase + 0x64C08420 - 0x64530000;
......
DWeChatRobot/UserInfo.h
浏览文件 @ cf93a682
#pragma once
#include<windows.h>
BOOL GetWxUserInfoByWxid2(wchar_t* wxid, DWORD& address);
BOOL GetUserInfoByWxId(wchar_t* wxid, DWORD& address);
BOOL __stdcall GetWxUserInfoByWxid2(wchar_t* wxid, DWORD& address);
BOOL __stdcall GetUserInfoByWxId(wchar_t* wxid, DWORD& address);
extern "C" __declspec(dllexport) DWORD GetWxUserInfoRemote(LPVOID lparamter);
extern "C" __declspec(dllexport) VOID DeleteUserInfoCacheRemote();
\ No newline at end of file
DWeChatRobot/dllmain.cpp
浏览文件 @ cf93a682
......@@ -25,8 +25,8 @@ BOOL APIENTRY DllMain( HMODULE hModule,
printf("HookExtractExpression 0x%08X\n", (DWORD)HookExtractExpression);
printf("GetUserInfoByWxId 0x%08X\n", (DWORD)GetUserInfoByWxId);
printf("SendArticle 0x%08X\n", (DWORD)SendArticle);
system("pause");
SendArticle((WCHAR*)L"filehelper",(WCHAR*)L"这是标题",(WCHAR*)L"这是摘要",(WCHAR*)L"https://www.ljczero.top/article/2022/3/13/133.html");
// GetSelfInfoRemote();
#endif
break;
}
......@@ -36,7 +36,7 @@ BOOL APIENTRY DllMain( HMODULE hModule,
#ifdef _DEBUG
detach_count++;
if (detach_count != 1) {
FreeConsole();
// FreeConsole();
// UnHookAll();
}
#endif
......
wxRobot.py
浏览文件 @ cf93a682
......@@ -27,6 +27,9 @@ class ChatSession():
def SendMp4(self,mp4path):
return self.robot.CSendImage(self.chatwith,mp4path)
def SendArticle(self,title,abstract,url):
return self.robot.CSendArticle(self.chatwith,title,abstract,url)
class WeChatRobot():
......@@ -39,9 +42,10 @@ class WeChatRobot():
def StartService(self):
status = self.robot.CStartRobotService(self.dllpath)
if status == 0:
self.myinfo = self.GetSelfInfo()
pass
return status
# 有bug待修复，需要判断某项信息是否是指针
def GetSelfInfo(self):
myinfo = self.robot.CGetSelfInfo().replace('\n','\\n')
myinfo = ast.literal_eval(myinfo)
......@@ -124,7 +128,7 @@ def test():
mp4path = r"C:\Users\Administrator\Desktop\快捷\wechat\wxsend.mp4"
me = wx.GetFriendByWxNickName("文件传送助手")
session = wx.GetChatSession(me.get('wxid'))
print(wx.GetWxUserInfo(me.get('wxid')))
session.SendText('来自python的消息')
session.SendImage(imgpath)
session.SendFile(filepath)
......@@ -133,12 +137,12 @@ def test():
if __name__ == '__main__':
# DWeChatRobot.dll path
dllpath = r'D:\C++\ComWeChatRobot\Release'
dllpath = r'D:\VS2019C++\MyWeChatRobot\Release'
wx = WeChatRobot(dllpath)
wx.StartService()
wxid = wx.GetFriendByWxNickName("文件传输助手").get('wxid')
print(wx.myinfo)
print(wx.GetWxUserInfo(wxid))
session = wx.GetChatSession(wxid)
session.SendArticle("PC微信逆向--获取通讯录","确定不来看看么?","https://www.ljczero.top/article/2022/3/13/133.html")
wx.StopService()
\ No newline at end of file
Markdown is supported
0% 或 .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑！
想要评论请 注册 或