﻿<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/"><channel><title>C++博客-saga's blog-随笔分类-Code</title><link>http://www.cppblog.com/saga/category/1552.html</link><description>学习，钻研，思考，创新！
我才刚上路，有好多的期待！</description><language>zh-cn</language><lastBuildDate>Thu, 22 May 2008 03:25:36 GMT</lastBuildDate><pubDate>Thu, 22 May 2008 03:25:36 GMT</pubDate><ttl>60</ttl><item><title>[原创]PE文件基本信息查看器及vc源码 下载</title><link>http://www.cppblog.com/saga/archive/2007/12/18/38913.html</link><dc:creator>saga.constantine</dc:creator><author>saga.constantine</author><pubDate>Tue, 18 Dec 2007 08:36:00 GMT</pubDate><guid>http://www.cppblog.com/saga/archive/2007/12/18/38913.html</guid><wfw:comment>http://www.cppblog.com/saga/comments/38913.html</wfw:comment><comments>http://www.cppblog.com/saga/archive/2007/12/18/38913.html#Feedback</comments><slash:comments>1</slash:comments><wfw:commentRss>http://www.cppblog.com/saga/comments/commentRss/38913.html</wfw:commentRss><trackback:ping>http://www.cppblog.com/saga/services/trackbacks/38913.html</trackback:ping><description><![CDATA[这些天学习PE文件格式&nbsp;&nbsp; 写了此查看器，功能很简单。欢迎下载使用。<br>程序下载地址&nbsp; <a href="http://www.cppblog.com/files/saga/PEinfo.rar">www.cppblog.com/files/saga/PEinfo.rar</a><br>vc源码下载地址&nbsp;&nbsp; <a href="http://www.cppblog.com/files/saga/PEinfocode.rar">www.cppblog.com/files/saga/PEinfocode.rar</a><br><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;--------------------saga.constantine<br>
<img src ="http://www.cppblog.com/saga/aggbug/38913.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.cppblog.com/saga/" target="_blank">saga.constantine</a> 2007-12-18 16:36 <a href="http://www.cppblog.com/saga/archive/2007/12/18/38913.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>[请教]MFC建立的对话框程序在主窗口InitInstance()函数里面无法建立窗口原因，请高手指点！</title><link>http://www.cppblog.com/saga/archive/2007/12/06/37920.html</link><dc:creator>saga.constantine</dc:creator><author>saga.constantine</author><pubDate>Thu, 06 Dec 2007 12:37:00 GMT</pubDate><guid>http://www.cppblog.com/saga/archive/2007/12/06/37920.html</guid><wfw:comment>http://www.cppblog.com/saga/comments/37920.html</wfw:comment><comments>http://www.cppblog.com/saga/archive/2007/12/06/37920.html#Feedback</comments><slash:comments>9</slash:comments><wfw:commentRss>http://www.cppblog.com/saga/comments/commentRss/37920.html</wfw:commentRss><trackback:ping>http://www.cppblog.com/saga/services/trackbacks/37920.html</trackback:ping><description><![CDATA[<p>vc6，建立MFC对话框程序，主窗口的InitInstance()里面，运行SDK的API函数MessageBox()，都无法看见弹出的窗口。如：<br>BOOL CMyText::InitInstance()<br>{<br>#ifdef _AFXDLL<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Enable3dControls();&nbsp;&nbsp;&nbsp;// Call this when using MFC in a shared DLL<br>#else<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Enable3dControlsStatic();&nbsp;// Call this when linking to MFC statically<br>#endif</p>
<p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;CMyTextDlg dlg;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;m_pMainWnd = &amp;dlg;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;int nResponse = dlg.DoModal();<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;if (nResponse == IDOK)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;// TODO: Place code here to handle when the dialog is<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;//&nbsp; dismissed with OK<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;else if (nResponse == IDCANCEL)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;{<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;// TODO: Place code here to handle when the dialog is<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;//&nbsp; dismissed with Cancel<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;MessageBox(NULL,"haha","aa",MB_OK);&nbsp;&nbsp; //不会出现<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}</p>
<p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;// Since the dialog has been closed, return FALSE so that we exit the<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;//&nbsp; application, rather than start the application's message pump.<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;return FALSE;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}<br><br>上例中的MessageBox(),运行时一跳而过，看不见窗口。听的减弹出窗口的声音。不知道为什么，网上有人提出分析这样的问题。其他窗口也无法生成。但是不知为何。一种解决方法是注释掉m_pMainWnd = &amp;dlg;这句即可正常。我试了，的确如此！<br><br><span style="COLOR: red">那位高手或知之者路过请解答！谢谢!<br></span><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ---------------------saga.constantine<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br></p>
<img src ="http://www.cppblog.com/saga/aggbug/37920.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.cppblog.com/saga/" target="_blank">saga.constantine</a> 2007-12-06 20:37 <a href="http://www.cppblog.com/saga/archive/2007/12/06/37920.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>[原创]POP3密码的内网嗅探代码编写体会</title><link>http://www.cppblog.com/saga/archive/2006/05/11/6953.html</link><dc:creator>saga.constantine</dc:creator><author>saga.constantine</author><pubDate>Thu, 11 May 2006 07:06:00 GMT</pubDate><guid>http://www.cppblog.com/saga/archive/2006/05/11/6953.html</guid><wfw:comment>http://www.cppblog.com/saga/comments/6953.html</wfw:comment><comments>http://www.cppblog.com/saga/archive/2006/05/11/6953.html#Feedback</comments><slash:comments>3</slash:comments><wfw:commentRss>http://www.cppblog.com/saga/comments/commentRss/6953.html</wfw:commentRss><trackback:ping>http://www.cppblog.com/saga/services/trackbacks/6953.html</trackback:ping><description><![CDATA[         POP3(Post Office Protocol 3) POP适用于C/S结构的脱机模型的电子邮件协议,目前已发展到第三版,称POP3.用于从POP3邮件服务器上下载邮件.这个协议很简单.命令只有12个.一般情况下，大多数现有的POP3客户与服务器执行采用ASCII明文发送用户名和口令，在 认可状态等 待客户连接的情况下，客户发出连接，并由命令USER和PASS对在网络上发送明文用户名和 口令给服务器,为了避免发送明文口令的问题使用APOP,口令在传输之前被加密.但是目前大多数windows上的邮件客户软件不支持APOP命令.所以如果在进行ARP欺骗后就可以对内网使用POP3协议下载邮件的用户进行嗅探.所以在使用OutlookExpress等客户端登陆POP3服务器的时候就要小心有人嗅你的密码<img height="20" src="http://www.cppblog.com/Emoticons/QQ/24.gif" width="20" border="0" />.<br />         编写嗅POP3的嗅探器并不难,在我的以前的贴子里的ARP欺骗的基础上加十几行代码就可以实现了<img height="19" src="http://www.cppblog.com/Emoticons/74_74.gif" width="19" border="0" />.可以供大家学习参考练习用,实际上的作用不是很强.<br />         首先,分析POP3协议就知道POP3服务器开在110端口.我们就可以先判断包是否是TCP包,如果是的就查看连接的端口,是110就说明是在使用POP3协议进行会话.IP头的第10个字节(加上14个字节以太头,就是整个帧的第24个字节)为0x06就表示后面跟的是TCP包.使用POP3会话时IP头一般是20个字节长,所以一般不用去计算IP头的长度.默认20字节处理,这样效率会好点.<br />TCP头的第3,4两个字节(整个帧的第37.38字节)是目的端口号.判断是否是110.<br />         然后,发现POP3协议的包后就分析POP3的命令,由于是嗅用户名与口令,所以我们就只需对USER和PASS两条命令进行判断,POP3命令采用命令行形式,用ASCII码表示.POP3命令由一个命令和一些参数组成,所有命令以一个CRLF对结束。命令和参数由可打印的ASCII字字符组成,它们之间由空格间隔。命令一般是三到四个字母，每个参数却可达40个字符长。不过用户名和口令基本上都在20个字节以内.命令是在TCP的数据部分的开头.所以通过计算TCP头的长度(一般也是20个字节),在加上34,就是POP3命令数据的起点了.<br />         再判断命令是否为USER和PASS.判断的时候没必要将他们输入字符串进行比较,直接从数据起点取unsigned long形数据与0x55534552与0x50415353进行比较就行,更快.如果是USER或PASS就记录他们后面一个空格(0x20)后的字符串,直道CR停止<img height="21" src="http://www.cppblog.com/Emoticons/QQ/icon14.gif" width="20" border="0" />.<br />         这样就记录了用户名与口令.当然你还要记录别人登陆服务器的IP,不然你也不知道去哪登录<img height="18" src="http://www.cppblog.com/Emoticons/QQ/geek.gif" width="18" border="0" />.<br />         本人菜鸟,不当之处请不吝指点.<br />                                                                            saga.constantine<br />                                                                                 2006.05.11<br />         <img src ="http://www.cppblog.com/saga/aggbug/6953.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.cppblog.com/saga/" target="_blank">saga.constantine</a> 2006-05-11 15:06 <a href="http://www.cppblog.com/saga/archive/2006/05/11/6953.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>[原创]用Winpcap编写的一个在交换环境实现arp欺骗的代码</title><link>http://www.cppblog.com/saga/archive/2006/04/24/6169.html</link><dc:creator>saga.constantine</dc:creator><author>saga.constantine</author><pubDate>Mon, 24 Apr 2006 06:26:00 GMT</pubDate><guid>http://www.cppblog.com/saga/archive/2006/04/24/6169.html</guid><wfw:comment>http://www.cppblog.com/saga/comments/6169.html</wfw:comment><comments>http://www.cppblog.com/saga/archive/2006/04/24/6169.html#Feedback</comments><slash:comments>75</slash:comments><wfw:commentRss>http://www.cppblog.com/saga/comments/commentRss/6169.html</wfw:commentRss><trackback:ping>http://www.cppblog.com/saga/services/trackbacks/6169.html</trackback:ping><description><![CDATA[
		<p align="left">    自己刚刚写的,在win2k下运行正常,当然要先安装Winpcap3.1或其他版本.下载地址:<a href="http://www.winpcap.org/">http://www.winpcap.org/</a><br />    程序功能很简单,就是扫描内网活动主机,自己选择欺骗哪一台.或几台.使其数据流经你的本地主机,你就可以用截包工具如Ethereal截包分析.<br />     程序和代码下载地址:<a href="/Files/saga/arpsproof.rar">http://www.cppblog.com/Files/saga/arpsproof.rar</a><br />     注释比较详细,不理解之处可以与我研究探讨.<br />     编译的时候要注意设置!!!<img height="20" src="http://www.cppblog.com/Emoticons/QQ/icon20.gif" width="20" border="0" /><br />                                                                           ----saga.constantine</p>
<img src ="http://www.cppblog.com/saga/aggbug/6169.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.cppblog.com/saga/" target="_blank">saga.constantine</a> 2006-04-24 14:26 <a href="http://www.cppblog.com/saga/archive/2006/04/24/6169.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item></channel></rss>