一個簡單木馬程序的設計與開發

論文字數:9145,頁數:25

摘  要
隨著互聯網技術的迅猛發展，網絡給人們帶來了很多便利，但是也帶來了許多麻煩。各種網頁木馬，后門，下載者，病毒，利用各種漏洞，U盤，社會工程學在網上橫行，給廣大用戶帶來了重要資料丟失，提前泄密，照片被人惡意傳播到網上，系統被格盤，系統被監視，攝像頭被人暗中開啟并錄像等非常嚴重的后果。
本畢業設計使用VC++6.0為開發平臺設計的一個簡單的木馬程序，功能包括：鍵盤記錄，并定時把郵件內容成功發送到某郵箱中，關閉某些防火墻和殺毒軟件，開機自動隱藏運行，開啟2233端口取得CMD權限,實現對目標機器的文件操作，開啟3389端口，并替換系統目錄下的sethc.exe為cmd.exe，實現登錄不要密碼，添加管理員等功能。并可利用MS06-014或MS07-004等漏洞在沒打補丁沒殺毒軟件或是殺毒軟件沒更新的windows2000,windowsXP,windows2003機子上實現通過網頁傳播。

關鍵詞：鍵盤記錄；木馬；目標主機
The Design and Development of a Simple Trojan horse
Abstract
With the rapid development of Internet technology, the network has posed many conveniences, but it also brings a lot of trouble. Various website Trojan, backdoor, downloading, viruses, using various loopholes, U disk, social engineering, is pervasive on the Internet. For the majority of users, it will bring on important information missed and early leaked, photograph maliciously spread to the Internet, the system trays System being watched, cameras opened and other very serious consequences.
In this design, a simple Trojan horse is developed with Visual C++ 6.0,it’s functions include :Disk recording, Timing sends the content of the mail item sent to a successful mail, Close of certain firewall and anti-virus software, Automatically and hidden operation after booted, Open the 2233 port and get the CMD authority to operate the target machine's papers, Open the 3389 port and replace sethc.exe of cmd.exe under the system directory to realize when you login system the password is not necessary and add administrators. On the other side , the function also include: Utilizing MS06-014 or MS07-004 and other loopholes, The Trojan horse can spread on Internet through the website ,which did not patch the system or anti-virus software ,or not update Windows 2000 windows XP, Windows 2003 in-time.

Key words: Disk recording; Trojan; Targets mainframe

目  錄

1 前言 1
1.1 課題背景 1
1.2 國內外研究現狀 1
1.3 本課題研究的意義 2
1.4 本課題的研究方法及目標 2
2 系統分析 3
2.1 需求分析 3
2.1.1 程序要求 3
2.1.2 輔助程序圖 3
2.1.3 木馬程序功能說明 4
3 程序設計 4
3.1 輔佐程序設計 4
3.2 木馬程序設計 7
3.2.1執行命令模塊 7
3.2.2鍵盤記錄模塊 9
3.2.3關閉進程模塊 12
3.2.4網頁木馬模塊 14
4 程序及其變形的分析及防范措施 15
4.1 一般木馬的分析及防范 15
4.2 常見防范方法 16
結    論 18
參考文獻 19
致    謝 20
聲    明 21