
PCShare是一款强大的远程控制软件,可以监视目标机器屏幕、注册表、文件系统等。
PCShare is a powerful remote control software that can monitor the target machine's screen, registry, file system, etc.
Software Usage Introduction:
Start PcShare.exe, which is the main program of the control end. This program will listen for connections from the controlled end on port 8080.
Generate the controlled end host program. Click the "Generate Client Button" on the main interface of the control end:
Generate a new host program named ps.exe. Then send ps.exe together with PcStat.exe to the machine to be controlled. Start PcStat.exe on the controlled machine. After a while, the controlled end will connect to the control terminal, and the control terminal can perform various controls on the controlled terminal.
Principle Introduction
The host program ps.exe generated by the control end is actually a background program. It is first started by PcStat.exe. After ps.exe is started, it releases a section at the end of its binary file. This section is actually a dll file. This dll can run in three ways according to the configuration information at generation time: 1. Run as an independent process, 2. Inject into Internet Explorer to run, 3. Inject into Windows Resource Manager (explorer.exe) to run. After the dll runs, it hooks various messages of the operating system to monitor the machine. It connects to the control terminal PcShare.exe via socket and sends the obtained information to PcShare.exe using HTTP protocol. PcShare.exe's control over the target machine is also sent back to the dll program via HTTP protocol.
The program is developed using the MFC framework. Open PcShare.sln in the PcShare directory with VS2015, then run and compile. If you need to debug the control end or the controlled end, you can start one externally first, then debug the other in VS. For details, see: http://blog.csdn.net/analogous_love/article/details/72835754