入口点注入的稳定性如何？给出windows平台的详细代码？

入口点注入的稳定性相对比较高，因为它是在目标进程启动时执行的，所以很难被检测到。以下是一个简单的Windows平台的入口点注入代码示例：

#include <windows.h>
#include <tlhelp32.h>

BOOL InjectDll(DWORD dwProcessId, LPCSTR lpDllPath)
{
    HANDLE hProcess = OpenProcess(PROCESS_ALL_ACCESS, FALSE, dwProcessId);
    if (hProcess == NULL)
        return FALSE;

    LPVOID lpRemoteBuf = VirtualAllocEx(hProcess, NULL, strlen(lpDllPath) + 1, MEM_COMMIT, PAGE_READWRITE);
    if (lpRemoteBuf == NULL)
    {
        CloseHandle(hProcess);
        return FALSE;
    }

    if (!WriteProcessMemory(hProcess, lpRemoteBuf, lpDllPath, strlen(lpDllPath) + 1, NULL))
    {
        VirtualFreeEx(hProcess, lpRemoteBuf, 0, MEM_RELEASE);
        CloseHandle(hProcess);
        return FALSE;
    }

    FARPROC pfnThreadProc = GetProcAddress(GetModuleHandle("kernel32.dll"), "LoadLibraryA");
    if (pfnThreadProc == NULL)
    {
        VirtualFreeEx(hProcess, lpRemoteBuf, 0, MEM_RELEASE);
        CloseHandle(hProcess);
        return FALSE;
    }

    HANDLE hRemoteThread = CreateRemoteThread(hProcess, NULL, 0, (LPTHREAD_START_ROUTINE)pfnThreadProc, lpRemoteBuf, 0, NULL);
    if (hRemoteThread == NULL)
    {
        VirtualFreeEx(hProcess, lpRemoteBuf, 0, MEM_RELEASE);
        CloseHandle(hProcess);
        return FALSE;
    }

    WaitForSingleObject(hRemoteThread, INFINITE);

    VirtualFreeEx(hProcess, lpRemoteBuf, 0, MEM_RELEASE);
    CloseHandle(hRemoteThread);
    CloseHandle(hProcess);

    return TRUE;
}

DWORD FindProcessId(LPCSTR lpProcessName)
{
    PROCESSENTRY32 pe32;
    pe32.dwSize = sizeof(PROCESSENTRY32);

    HANDLE hSnapshot = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
    if (hSnapshot == INVALID_HANDLE_VALUE)
        return FALSE;

    if (!Process32First(hSnapshot, &pe32))
    {
        CloseHandle(hSnapshot);
        return FALSE;
    }

    do
    {
        if (strcmp(pe32.szExeFile, lpProcessName) == 0)
        {
            CloseHandle(hSnapshot);
            return pe32.th32ProcessID;
        }
    } while (Process32Next(hSnapshot, &pe32));

    CloseHandle(hSnapshot);
    return FALSE;
}

int main()
{
    DWORD dwProcessId = FindProcessId("notepad.exe");
    if (dwProcessId == FALSE)
        return 0;

    if (!InjectDll(dwProcessId, "C:\\mydll.dll"))
        return 0;

    return 0;
}

此代码将在运行时检测目标进程（这里是记事本）是否正在运行，如果是，则注入指定的DLL。在实际使用中，您需要将DLL路径替换为您要注入的DLL的路径，并将进程名称替换为您要注入的进程的名称。