基于C#實(shí)現(xiàn)簡(jiǎn)易的鍵盤(pán)記錄器

更新時(shí)間：2022年08月22日 14:57:58 作者：Csharp 小記

本文將利用C#語(yǔ)言和HOOK技術(shù)來(lái)做一個(gè)鍵盤(pán)記錄器，看看一天下來(lái)，我們點(diǎn)擊了多少次鍵盤(pán)，哪些鍵的使用頻率最高，感興趣的小伙伴可以嘗試一下

實(shí)現(xiàn)功能

使用C#實(shí)現(xiàn)一個(gè)鍵盤(pán)記錄器

開(kāi)發(fā)環(huán)境

開(kāi)發(fā)工具： Visual Studio 2013

.NET Framework版本：4.5

實(shí)現(xiàn)代碼

    public class HookUtil
   {
       #region windows api
 
       /// <summary>
       /// 安裝鉤子
       /// </summary>
       [DllImport("user32.dll", CharSet = CharSet.Auto, CallingConvention = CallingConvention.StdCall)]
        public static extern int SetWindowsHookEx(int idHook, HookProc lpfn, IntPtr hInstance, int threadId);
       public delegate int HookProc(int nCode, Int32 wParam, IntPtr lParam);
 
       /// <summary>
       /// 繼續(xù)下一個(gè)鉤子
       /// </summary>
       [DllImport("user32.dll", CharSet = CharSet.Auto, CallingConvention = CallingConvention.StdCall)]
       public static extern int CallNextHookEx(int idHook, int nCode, Int32 wParam, IntPtr lParam);
 
        /// <summary>
       /// 卸載鉤子
        /// </summary>
        [DllImport("user32.dll", CharSet = CharSet.Auto, CallingConvention = CallingConvention.StdCall)]
        public static extern bool UnhookWindowsHookEx(int idHook);
 
       /// <summary>
        ///獲取當(dāng)前線程編號(hào)（線程鉤子需要用到）
        [DllImport("kernel32.dll")]
        static extern int GetCurrentThreadId();
 
       /// <summary>
        /// 獲取當(dāng)前實(shí)例的函數(shù)
       /// </summary>
        [DllImport("kernel32.dll")]
        public static extern IntPtr GetModuleHandle(string name);
 
 
        /// <summary>
        /// 獲取按鍵的狀態(tài)
        /// </summary>
        /// <param name="pbKeyState"></param>
        /// <returns></returns>
        [DllImport("user32")]
        public static extern int GetKeyboardState(byte[] pbKeyState);
 
       /// <summary>
        /// 將指定的虛擬鍵碼和鍵盤(pán)狀態(tài)翻譯為相應(yīng)的字符或字符串
       /// </summary>
        [DllImport("user32")]
        public static extern int ToAscii(int uVirtKey, int uScanCode,   byte[] lpbKeyState,byte[] lpwTransKey,int fuState); 
       #endregion
 
        /// <summary>
        /// 鍵盤(pán)結(jié)構(gòu)
        /// </summary>
        [StructLayout(LayoutKind.Sequential)]
        public class KeyboardHookStruct
        {
            public int vkCode;  //定一個(gè)虛擬鍵碼。該代碼必須有一個(gè)價(jià)值的范圍1至254
            public int scanCode; // 指定的硬件掃描碼的關(guān)鍵
            public int flags;  // 鍵標(biāo)志
            public int time; // 指定的時(shí)間戳記的這個(gè)訊息
            public int dwExtraInfo; // 指定額外信息相關(guān)的信息
        }
 
       //定義為鍵盤(pán)鉤子
        public int WH_KEYBOARD_LL = 13;
 
        //相關(guān)鍵盤(pán)事件
        public event KeyEventHandler KeyDownEvent;
        public event KeyPressEventHandler KeyPressEvent;
        public event KeyEventHandler KeyUpEvent;
 
       //相關(guān)動(dòng)作
        private const int WM_KEYDOWN = 0x100;//KEYDOWN
        private const int WM_KEYUP = 0x101;//KEYUP
        private const int WM_SYSKEYDOWN = 0x104;//SYSKEYDOWN
        private const int WM_SYSKEYUP = 0x105;//SYSKEYUP
 
       //hookid
       private int hookID = 0;
 
       //向下傳遞數(shù)據(jù)
       public Keys NoNextKeyCode;
 
       /// <summary>
       /// 安裝鉤子
       /// </summary>
        public void StartHook()
        {
            if (hookID == 0)
            {
                HookProc hookProc = new HookProc(KeyboardHookProc);
                hookID = SetWindowsHookEx(WH_KEYBOARD_LL, hookProc, GetModuleHandle(System.Diagnostics.Process.GetCurrentProcess().MainModule.ModuleName), 0);
 
                if (hookID == 0)
                {
                    StopHook();
                    throw new Exception("安裝鍵盤(pán)鉤子失敗");
                }
            }
        }
 
 
        public void StopHook()
        {
            bool isStop = true;
            if (hookID != 0)
            {
                isStop = UnhookWindowsHookEx(hookID);
                hookID = 0;
            }
            if (!isStop) throw new Exception("卸載鍵盤(pán)鉤子失??！");
        }
 
       /// <summary>
       /// 監(jiān)聽(tīng)事件
       /// </summary>
        private int KeyboardHookProc(int nCode, Int32 wParam, IntPtr lParam)
        {
            if ((nCode >= 0) && (KeyDownEvent != null || KeyUpEvent != null || KeyPressEvent != null))
            {
 
                KeyboardHookStruct MyKeyboardHookStruct = (KeyboardHookStruct)Marshal.PtrToStructure(lParam, typeof(KeyboardHookStruct));
            
                //按下處理
                if (KeyDownEvent != null && (wParam == WM_KEYDOWN || wParam == WM_SYSKEYDOWN))
                {
                    Keys keyData = (Keys)MyKeyboardHookStruct.vkCode;
                    KeyEventArgs e = new KeyEventArgs(keyData);
                     KeyDownEvent(this, e);
                    //阻止向下傳遞
                    if (NoNextKeyCode == keyData)
                    {
                        return hookID;
                    }
                }
 
                //按下并抬起處理
                if (KeyPressEvent != null && wParam == WM_KEYDOWN)
                {
                    byte[] keyState = new byte[256];
                    GetKeyboardState(keyState);
 
                    byte[] inBuffer = new byte[2];
                    if (ToAscii(MyKeyboardHookStruct.vkCode, MyKeyboardHookStruct.scanCode, keyState, inBuffer, MyKeyboardHookStruct.flags) == 1)
                    {
                        KeyPressEventArgs e = new KeyPressEventArgs((char)inBuffer[0]);
                        KeyPressEvent(this, e);
                    }
                }
 
                // 抬起處理
                if (KeyUpEvent != null && (wParam == WM_KEYUP || wParam == WM_SYSKEYUP))
                {
                    Keys keyData = (Keys)MyKeyboardHookStruct.vkCode;
                    KeyEventArgs e = new KeyEventArgs(keyData);
                    KeyUpEvent(this, e);
                }
 
            }
            return CallNextHookEx(hookID, nCode, wParam, lParam);
        }
 
        ~HookUtil()
        {
            StopHook();
        }
   }

  HookUtil keyHook = new HookUtil();
        private void btnBegin_Click(object sender, EventArgs e)
        {
            keyHook.KeyDownEvent += new KeyEventHandler(hook_KeyDown);//鉤住按下事件
            keyHook.StartHook();
            btnBegin.Enabled = false;
            btnEnd.Enabled = true;
        }
 
        private void btnEnd_Click(object sender, EventArgs e)
        {
            keyHook.StopHook();
            btnBegin.Enabled = true;
            btnEnd.Enabled = false;
        }
 
        private void btnInfo_Click(object sender, EventArgs e)
        {
            string path = System.AppDomain.CurrentDomain.BaseDirectory + "log\\" + DateTime.Now.ToString("yyyy-MM-dd") + ".txt";
            if (!File.Exists(path))
            {
                MessageBox.Show("還未監(jiān)聽(tīng)到數(shù)據(jù)，請(qǐng)操作后再查看");
                return;
            }
            var list = File.ReadAllLines(path).ToList().GroupBy(s => s).Select(s => new { s.Key, s.ToList().Count }).OrderByDescending(s => s.Count);
            FrmInfo frm = new FrmInfo();
            frm.Show();
            foreach (var item in list)
            {
                frm.addItems(new string[] { "", item.Key, item.Count + "" });
            }
 
        }
  private void hook_KeyDown(object sender, KeyEventArgs e)
        {
            if (!listKey.Contains(e.KeyData))
            {
                if (Control.ModifierKeys != Keys.None)
                {
                    WriteLog(Control.ModifierKeys + "+" + e.KeyData);
                }
                else
                {
                    WriteLog(e.KeyData + "");
                }
            }
            else
            {
                WriteLog(e.KeyData + "");
            }
 
        }