admin/mirror-processhacker
1
0
Fork 0
mirror of https://github.com/mirror/processhacker synced 2026-06-08 16:03:24 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,053 Commits 1 Branch 0 Tags
1cdb716ebcd800789a7636f0c19d1e22211fa855
Commit Graph

58 Commits

Author SHA1 Message Date
wj32 e29085b64a removed old KPH comments 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1037 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-09 09:16:15 +00:00
wj32 6b4123f1a4 * fixed resources for KProcessHacker 
* switched KPH to free build
* fixed DEP editing (hopefully) on XP
* added version number to PH Assistant

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1035 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-09 07:50:54 +00:00
wj32 6b11e5b79b added resource file to KProcessHacker 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1032 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-08 06:37:12 +00:00
wj32 5c49f831b2 added an important safety guard to KPH 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1013 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-05 05:42:49 +00:00
wj32 932bbb0b28 added highlighting for GUI threads 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1009 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-05 00:28:15 +00:00
wj32 07deb6a00e removed the Vista check in KphNtInit() 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1002 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-03 08:08:31 +00:00
wj32 4692867d03 * fixed thread stacks on Windows Vista + KPH 
* added KphGetContextThread and KphSetContextThread

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1001 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-03 07:39:36 +00:00
wj32 200b17c0b3 * fixed thread start addresses on Windows XP 
* fixed module information on Windows XP

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@999 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-02 22:36:43 +00:00
wj32 60b4ed9ed1 * KPH now loads on XP again; introduced the use of MmGetSystemRoutineAddress 
* brought back KphSuspendProcess and KphResumeProcess on Vista

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@995 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-02 08:16:43 +00:00
wj32 71ce9c03db * KPH now supports KphWriteVirtualMemory 
* revised process opening means that we can now get the command line of audiodg.exe

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@991 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-02 05:38:59 +00:00
wj32 a59eedfb65 implemented KphReadVirtualMemory! 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@987 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-01 10:27:41 +00:00
wj32 018928f184 * reversed the sealed attribute 
* fixed KPH for XP (for both jobs and thread start addresses)

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@984 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-01 04:49:57 +00:00
wj32 1bd5b23af1 made public Dispose methods sealed, added XP information to kph_nt.c 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@983 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-01 03:32:27 +00:00
wj32 331d515717 job detection works (after 4 hours and 2 BSODs)! 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@977 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-03-31 10:09:37 +00:00
wj32 2e5b27161f KProcessHacker now retrieves thread start addresses 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@976 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-03-31 06:40:27 +00:00
wj32 0fab9168da updated kprocesshacker.sys 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@954 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-03-28 10:48:10 +00:00
wj32 5ba55035d0 cosmetic changes in KProcessHacker/kprocesshacker.c 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@927 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-03-26 09:09:54 +00:00
wj32 bc6f66615c KPH fixes, small struct def changes 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@857 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-03-12 07:12:45 +00:00
wj32 2393410972 * fixed KPH BSOD 
* kprocesshacker.c now has 0 warnings

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@856 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-03-12 06:25:37 +00:00
wj32 bc593b4064 fixed bug #2617880 - "Killing ProcessHacker within ProcessHacker and Terminator" 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@660 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-02-20 06:06:36 +00:00
wj32 9eeac62fd9 * removed hooks from KPH - this means that it can now support multiple clients 
* added Restart and Set Token menu items
* KphOpenTokenEx now creates an access state - limited user accounts now have complete admin access to processes and tokens
* fixed problem where if a process image file can't be accessed because of permissions PH says it's packed
* fixed problem with .NET executables not being recognized

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@627 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-02-14 23:52:04 +00:00
wj32 466c0719e7 fixed SymbolProvider and ThreadProvider so that it is possible to view symbolic start addresses of System (PID 4) after it is unprotected 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@625 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-02-14 10:56:31 +00:00
wj32 a71590c68f * added a HACK for null process names 
* added a comment to KphTerminateProcess

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@618 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-02-13 06:13:03 +00:00
wj32 399de14431 Process termination now uses KProcessHacker 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@617 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-02-13 05:27:47 +00:00
wj32 cbc0b5b2cd * fixed KProcessHacker not working on XP 
* finished CSRProcesses

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@599 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-30 08:54:33 +00:00
wj32 f5bf13a0ef Suspend and Resume functions for processes now use KProcessHacker 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@596 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-29 09:29:38 +00:00
wj32 323ac3c1c1 added KphSuspendProcess and KphResumeProcess 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@589 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-27 03:50:00 +00:00
wj32 2b560d67c6 implemented KphOpenProcessTokenEx 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@586 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-26 02:28:27 +00:00
wj32 8e2fea61cc removed dup comments 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@585 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-25 23:59:09 +00:00
wj32 e7b7dd2687 add GiveClientFullToken() 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@583 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-25 23:19:26 +00:00
wj32 e339410c75 KphOpenProcess and KphOpenThread work perfectly on Vista 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@578 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-25 10:15:43 +00:00
wj32 cec7a95128 * doesn't use KphOpenProcess (too risky with BSODs) 
* can protect and unprotect processes!

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@577 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-25 06:09:08 +00:00
wj32 e4fe153f83 new capability for KProcessHacker: custom rewrite of NtOpenProcess, bypassing almost all types of hooks! 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@576 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-25 03:52:32 +00:00
wj32 fd21d97396 make KProcessHacker's only function getting handles - hooking is too risky 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@541 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-19 21:58:27 +00:00
wj32 6dde99868d * update OldKiServiceTable after restoring SSDT 
* updated binary

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@539 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-19 05:47:07 +00:00
wj32 9c330fe55f fixed problem with Hooked not being set to FALSE after unhooking 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@538 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-19 05:43:55 +00:00
wj32 6578903105 * added SSDT restoration capability 
* automatically deletes service after a reboot
* no longer hooks file and key functions
* added website to README.txt

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@537 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-19 03:18:07 +00:00
wj32 654bf19949 added KPH binary since not many people have the DDK 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@535 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-18 21:53:46 +00:00
wj32 019b0864a4 hook non-index functions if we can't use the correct indicies 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@534 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-18 10:26:48 +00:00
wj32 7f54264dd7 add a huge comment explaining the fix 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@533 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-18 09:17:52 +00:00
wj32 3b9dc64e45 protect against double out-of-order hook restoration 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@532 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-18 09:08:49 +00:00
wj32 e69b70caf4 fixed memory corruption issues with the client 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@530 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-18 07:56:22 +00:00
wj32 f43d8fb4cd better ServiceLimit finder, now unhooks as soon as the client disconnects 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@529 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-18 05:49:44 +00:00
wj32 fb2cb99d93 KProcessHacker now hooks on XP 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@527 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-18 03:50:13 +00:00
wj32 de39b5f14d disable protection 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@526 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-18 02:56:34 +00:00
wj32 1b145478ad hooks are complete. 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@525 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-18 02:33:26 +00:00
wj32 9f93629b61 make KProcessHacker un-unloadable 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@524 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-18 02:04:04 +00:00
wj32 3b965235aa now hooks some file and key functions 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@523 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-18 00:21:38 +00:00
wj32 ebe69f5c6d easier hooking, now hooks ZwOpenThread 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@522 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-17 23:17:21 +00:00
wj32 6081f06c87 * implemented optional client protection 
* added definitions for all supported Zw functions

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@521 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-17 11:04:45 +00:00