c# 使用hook来监控鼠标键盘事件的示例代码
如果这个程序在10几年前,QQ刚刚兴起的时候,有了这个代码,就可实现盗号了.
当然使用钩子我们更多的是实现"全局快捷键"的需求.
比如 程序最小化隐藏后要"某快捷键"来启动它.
钩子(hook),通俗的讲,她可以捕获到你的键盘和鼠标的相关操作消息.
关于hook的相关代码网上一搜一箩筐,这是整理起来比较完善和使用最方便的.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 | //Declare wrapper managed POINT class. [StructLayout(LayoutKind.Sequential)] public class POINT { public int x; public int y; } //Declare wrapper managed MouseHookStruct class. [StructLayout(LayoutKind.Sequential)] public class MouseHookStruct { public POINT pt; public int hwnd; public int wHitTestCode; public int dwExtraInfo; } //Declare wrapper managed KeyboardHookStruct class. [StructLayout(LayoutKind.Sequential)] public class KeyboardHookStruct { public int vkCode; //Specifies a virtual-key code. The code must be a value in the range 1 to 254. public int scanCode; // Specifies a hardware scan code for the key. public int flags; // Specifies the extended-key flag, event-injected flag, context code, and transition-state flag. public int time; // Specifies the time stamp for this message. public int dwExtraInfo; // Specifies extra information associated with the message. } public class GlobalHook { public delegate int HookProc( int nCode, Int32 wParam, IntPtr lParam); public delegate int GlobalHookProc( int nCode, Int32 wParam, IntPtr lParam); public GlobalHook() { //Start(); } ~GlobalHook() { Stop(); } public event MouseEventHandler OnMouseActivity; public event KeyEventHandler KeyDown; public event KeyPressEventHandler KeyPress; public event KeyEventHandler KeyUp; /// <summary> /// 定义鼠标钩子句柄. /// </summary> static int _hMouseHook = 0; /// <summary> /// 定义键盘钩子句柄 /// </summary> static int _hKeyboardHook = 0; public int HMouseHook { get { return _hMouseHook; } } public int HKeyboardHook { get { return _hKeyboardHook; } } /// <summary> /// 鼠标钩子常量(from Microsoft SDK Winuser.h ) /// </summary> public const int WH_MOUSE_LL = 14; /// <summary> /// 键盘钩子常量(from Microsoft SDK Winuser.h ) /// </summary> public const int WH_KEYBOARD_LL = 13; /// <summary> /// 定义鼠标处理过程的委托对象 /// </summary> GlobalHookProc MouseHookProcedure; /// <summary> /// 键盘处理过程的委托对象 /// </summary> GlobalHookProc KeyboardHookProcedure; //导入window 钩子扩展方法导入 /// <summary> /// 安装钩子方法 /// </summary> [DllImport( "user32.dll" , CharSet = CharSet.Auto, CallingConvention = CallingConvention.StdCall)] public static extern int SetWindowsHookEx( int idHook, GlobalHookProc lpfn,IntPtr hInstance, int threadId); /// <summary> /// 卸载钩子方法 /// </summary> [DllImport( "user32.dll" , CharSet = CharSet.Auto, CallingConvention = CallingConvention.StdCall)] public static extern bool UnhookWindowsHookEx( int idHook); //Import for CallNextHookEx. /// <summary> /// 使用这个函数钩信息传递给链中的下一个钩子过程。 /// </summary> [DllImport( "user32.dll" , CharSet = CharSet.Auto, CallingConvention = CallingConvention.StdCall)] public static extern int CallNextHookEx( int idHook, int nCode, Int32 wParam, IntPtr lParam); public bool Start() { // install Mouse hook if (_hMouseHook == 0) { // Create an instance of HookProc. MouseHookProcedure = new GlobalHookProc(MouseHookProc); try { _hMouseHook = SetWindowsHookEx(WH_MOUSE_LL, MouseHookProcedure, Marshal.GetHINSTANCE( Assembly.GetExecutingAssembly().GetModules()[0]), 0); } catch (Exception err) { } //如果安装鼠标钩子失败 if (_hMouseHook == 0) { Stop(); return false ; //throw new Exception("SetWindowsHookEx failed."); } } //安装键盘钩子 if (_hKeyboardHook == 0) { KeyboardHookProcedure = new GlobalHookProc(KeyboardHookProc); try { _hKeyboardHook = SetWindowsHookEx(WH_KEYBOARD_LL, KeyboardHookProcedure, Marshal.GetHINSTANCE( Assembly.GetExecutingAssembly().GetModules()[0]), 0); } catch (Exception err2) { } //如果安装键盘钩子失败 if (_hKeyboardHook == 0) { Stop(); return false ; //throw new Exception("SetWindowsHookEx ist failed."); } } return true ; } public void Stop() { bool retMouse = true ; bool retKeyboard = true ; if (_hMouseHook != 0) { retMouse = UnhookWindowsHookEx(_hMouseHook); _hMouseHook = 0; } if (_hKeyboardHook != 0) { retKeyboard = UnhookWindowsHookEx(_hKeyboardHook); _hKeyboardHook = 0; } //If UnhookWindowsHookEx fails. if (!(retMouse && retKeyboard)) { //throw new Exception("UnhookWindowsHookEx ist failed."); } } /// <summary> /// 卸载hook,如果进程强制结束,记录上次钩子id,并把根据钩子id来卸载它 /// </summary> public void Stop( int hMouseHook, int hKeyboardHook) { if (hMouseHook != 0) { UnhookWindowsHookEx(hMouseHook); } if (hKeyboardHook != 0) { UnhookWindowsHookEx(hKeyboardHook); } } private const int WM_MOUSEMOVE = 0x200; private const int WM_LBUTTONDOWN = 0x201; private const int WM_RBUTTONDOWN = 0x204; private const int WM_MBUTTONDOWN = 0x207; private const int WM_LBUTTONUP = 0x202; private const int WM_RBUTTONUP = 0x205; private const int WM_MBUTTONUP = 0x208; private const int WM_LBUTTONDBLCLK = 0x203; private const int WM_RBUTTONDBLCLK = 0x206; private const int WM_MBUTTONDBLCLK = 0x209; private int MouseHookProc( int nCode, Int32 wParam, IntPtr lParam) { if ((nCode >= 0) && (OnMouseActivity != null )) { MouseButtons button = MouseButtons.None; switch (wParam) { case WM_LBUTTONDOWN: //左键按下 //case WM_LBUTTONUP: //右键按下 //case WM_LBUTTONDBLCLK: //同时按下 button = MouseButtons.Left; break ; case WM_RBUTTONDOWN: //case WM_RBUTTONUP: //case WM_RBUTTONDBLCLK: button = MouseButtons.Right; break ; } int clickCount = 0; if (button != MouseButtons.None) if (wParam == WM_LBUTTONDBLCLK || wParam == WM_RBUTTONDBLCLK) clickCount = 2; else clickCount = 1; //Marshall the data from callback. MouseHookStruct MyMouseHookStruct = (MouseHookStruct)Marshal.PtrToStructure(lParam, typeof (MouseHookStruct)); MouseEventArgs e = new MouseEventArgs( button, clickCount, MyMouseHookStruct.pt.x, MyMouseHookStruct.pt.y, 0); OnMouseActivity( this , e); } return CallNextHookEx(_hMouseHook, nCode, wParam, lParam); } //The ToAscii function translates the specified virtual-key code and keyboard state to the corresponding character or characters. The function translates the code using the input language and physical keyboard layout identified by the keyboard layout handle. [DllImport( "user32" )] public static extern int ToAscii( int uVirtKey, //[in] Specifies the virtual-key code to be translated. int uScanCode, // [in] Specifies the hardware scan code of the key to be translated. The high-order bit of this value is set if the key is up (not pressed). byte [] lpbKeyState, // [in] Pointer to a 256-byte array that contains the current keyboard state. Each element (byte) in the array contains the state of one key. If the high-order bit of a byte is set, the key is down (pressed). The low bit, if set, indicates that the key is toggled on. In this function, only the toggle bit of the CAPS LOCK key is relevant. The toggle state of the NUM LOCK and SCROLL LOCK keys is ignored. byte [] lpwTransKey, // [out] Pointer to the buffer that receives the translated character or characters. int fuState); // [in] Specifies whether a menu is active. This parameter must be 1 if a menu is active, or 0 otherwise. //The GetKeyboardState function copies the status of the 256 virtual keys to the specified buffer. [DllImport( "user32" )] public static extern int GetKeyboardState( byte [] pbKeyState); private const int WM_KEYDOWN = 0x100; private const int WM_KEYUP = 0x101; private const int WM_SYSKEYDOWN = 0x104; private const int WM_SYSKEYUP = 0x105; private int KeyboardHookProc( int nCode, Int32 wParam, IntPtr lParam) { // it was ok and someone listens to events if ((nCode >= 0) && (KeyDown != null || KeyUp != null || KeyPress != null )) { KeyboardHookStruct MyKeyboardHookStruct = (KeyboardHookStruct)Marshal.PtrToStructure(lParam, typeof (KeyboardHookStruct)); // raise KeyDown if (KeyDown != null && (wParam == WM_KEYDOWN || wParam == WM_SYSKEYDOWN)) { Keys keyData = (Keys)MyKeyboardHookStruct.vkCode; KeyEventArgs e = new KeyEventArgs(keyData); KeyDown( this , e); } // raise KeyPress if (KeyPress != null && wParam == WM_KEYDOWN) { byte [] keyState = new byte [256]; GetKeyboardState(keyState); byte [] inBuffer = new byte [2]; if (ToAscii(MyKeyboardHookStruct.vkCode, MyKeyboardHookStruct.scanCode, keyState, inBuffer, MyKeyboardHookStruct.flags) == 1) { KeyPressEventArgs e = new KeyPressEventArgs(( char )inBuffer[0]); KeyPress( this , e); } } // raise KeyUp if (KeyUp != null && (wParam == WM_KEYUP || wParam == WM_SYSKEYUP)) { Keys keyData = (Keys)MyKeyboardHookStruct.vkCode; KeyEventArgs e = new KeyEventArgs(keyData); KeyUp( this , e); } } return CallNextHookEx(_hKeyboardHook, nCode, wParam, lParam); } } |
注意:
如果运行中出现SetWindowsHookEx的返回值为0,这是因为.net 调试模式的问题,具体的做法是禁用宿主进程,在 Visual Studio 中打开项目。
在“项目”菜单上单击“属性”。
单击“调试”选项卡。
清除“启用 Visual Studio 宿主进程(启用windows承载进程)”复选框 或 勾选启用非托管代码调试
使用示例:
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 | /// <summary> /// 声明一个hook对象 /// </summary> GlobalHook hook; private void Form1_Load( object sender, EventArgs e) { btnInstallHook.Enabled = true ; btnUnInstall.Enabled = false ; //初始化钩子对象 if (hook == null ) { hook = new GlobalHook(); hook.KeyDown += new KeyEventHandler(hook_KeyDown); hook.KeyPress += new KeyPressEventHandler(hook_KeyPress); hook.KeyUp += new KeyEventHandler(hook_KeyUp); hook.OnMouseActivity += new MouseEventHandler(hook_OnMouseActivity); } } private void Form1_FormClosing( object sender, FormClosingEventArgs e) { if (btnUnInstall.Enabled == true ) { hook.Stop(); } } private void btnInstallHook_Click( object sender, EventArgs e) { if (btnInstallHook.Enabled == true ) { bool r = hook.Start(); if (r) { btnInstallHook.Enabled = false ; btnUnInstall.Enabled = true ; MessageBox.Show( "安装钩子成功!" ); } else { MessageBox.Show( "安装钩子失败!" ); } } } private void btnUnInstall_Click( object sender, EventArgs e) { if (btnUnInstall.Enabled == true ) { hook.Stop(); btnUnInstall.Enabled = false ; btnInstallHook.Enabled = true ; MessageBox.Show( "卸载钩子成功!" ); } } /// <summary> /// 鼠标移动事件 /// </summary> void hook_OnMouseActivity( object sender, MouseEventArgs e) { lbMouseState.Text = "X:" + e.X + " Y:" + e.Y; } /// <summary> /// 键盘抬起 /// </summary> void hook_KeyUp( object sender, KeyEventArgs e) { lbKeyState.Text = "键盘抬起, " + e.KeyData.ToString() + " 键码:" + e.KeyValue; } /// <summary> /// 键盘输入 /// </summary> void hook_KeyPress( object sender, KeyPressEventArgs e) { } /// <summary> /// 键盘按下 /// </summary> void hook_KeyDown( object sender, KeyEventArgs e) { lbKeyState.Text = "键盘按下, " + e.KeyData.ToString() + " 键码:" + e.KeyValue; } |
如果想捕获鼠标按下抬起的事件,可以修改 GlobalHook 类的 MouseHookProc方法相关代码
【推荐】编程新体验,更懂你的AI,立即体验豆包MarsCode编程助手
【推荐】凌霞软件回馈社区,博客园 & 1Panel & Halo 联合会员上线
【推荐】抖音旗下AI助手豆包,你的智能百科全书,全免费不限次数
【推荐】博客园社区专享云产品让利特惠,阿里云新客6.5折上折
【推荐】轻量又高性能的 SSH 工具 IShell:AI 加持,快人一步
· 没有源码,如何修改代码逻辑?
· 一个奇形怪状的面试题:Bean中的CHM要不要加volatile?
· [.NET]调用本地 Deepseek 模型
· 一个费力不讨好的项目,让我损失了近一半的绩效!
· .NET Core 托管堆内存泄露/CPU异常的常见思路
· DeepSeek “源神”启动!「GitHub 热点速览」
· 微软正式发布.NET 10 Preview 1:开启下一代开发框架新篇章
· C# 集成 DeepSeek 模型实现 AI 私有化(本地部署与 API 调用教程)
· DeepSeek R1 简明指南:架构、训练、本地部署及硬件要求
· 2 本地部署DeepSeek模型构建本地知识库+联网搜索详细步骤