wj32
bc6f66615c
KPH fixes, small struct def changes
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@857 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-03-12 07:12:45 +00:00
wj32
2393410972
* fixed KPH BSOD
...
* kprocesshacker.c now has 0 warnings
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@856 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-03-12 06:25:37 +00:00
wj32
9eeac62fd9
* removed hooks from KPH - this means that it can now support multiple clients
...
* added Restart and Set Token menu items
* KphOpenTokenEx now creates an access state - limited user accounts now have complete admin access to processes and tokens
* fixed problem where if a process image file can't be accessed because of permissions PH says it's packed
* fixed problem with .NET executables not being recognized
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@627 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-14 23:52:04 +00:00
wj32
466c0719e7
fixed SymbolProvider and ThreadProvider so that it is possible to view symbolic start addresses of System (PID 4) after it is unprotected
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@625 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-14 10:56:31 +00:00
wj32
399de14431
Process termination now uses KProcessHacker
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@617 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-13 05:27:47 +00:00
wj32
f5bf13a0ef
Suspend and Resume functions for processes now use KProcessHacker
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@596 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-29 09:29:38 +00:00
wj32
2b560d67c6
implemented KphOpenProcessTokenEx
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@586 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-26 02:28:27 +00:00
wj32
e7b7dd2687
add GiveClientFullToken()
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@583 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-25 23:19:26 +00:00
wj32
e339410c75
KphOpenProcess and KphOpenThread work perfectly on Vista
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@578 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-25 10:15:43 +00:00
wj32
cec7a95128
* doesn't use KphOpenProcess (too risky with BSODs)
...
* can protect and unprotect processes!
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@577 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-25 06:09:08 +00:00
wj32
e4fe153f83
new capability for KProcessHacker: custom rewrite of NtOpenProcess, bypassing almost all types of hooks!
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@576 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-25 03:52:32 +00:00
wj32
6dde99868d
* update OldKiServiceTable after restoring SSDT
...
* updated binary
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@539 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-19 05:47:07 +00:00
wj32
9c330fe55f
fixed problem with Hooked not being set to FALSE after unhooking
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@538 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-19 05:43:55 +00:00
wj32
6578903105
* added SSDT restoration capability
...
* automatically deletes service after a reboot
* no longer hooks file and key functions
* added website to README.txt
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@537 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-19 03:18:07 +00:00
wj32
019b0864a4
hook non-index functions if we can't use the correct indicies
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@534 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-18 10:26:48 +00:00
wj32
e69b70caf4
fixed memory corruption issues with the client
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@530 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-18 07:56:22 +00:00
wj32
f43d8fb4cd
better ServiceLimit finder, now unhooks as soon as the client disconnects
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@529 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-18 05:49:44 +00:00
wj32
fb2cb99d93
KProcessHacker now hooks on XP
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@527 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-18 03:50:13 +00:00
wj32
9f93629b61
make KProcessHacker un-unloadable
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@524 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-18 02:04:04 +00:00
wj32
ebe69f5c6d
easier hooking, now hooks ZwOpenThread
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@522 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-17 23:17:21 +00:00
wj32
6081f06c87
* implemented optional client protection
...
* added definitions for all supported Zw functions
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@521 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-17 11:04:45 +00:00
wj32
7a7d4d0f53
no kernel-kill tool needed - KProcessHacker transparently lets Process Hacker call the unhooked functions
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@520 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-17 10:04:59 +00:00
wj32
68088e866f
add more hooks to let Process Hacker do more things :)
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@519 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-17 08:27:48 +00:00
wj32
f15944a88d
resolved several bugs with KProcessHacker
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@517 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-17 07:54:56 +00:00
wj32
24f9427887
* ProcessHacker can now find and dump the original KiServiceTable
...
* PE reader reads relocations
* Added kernel-mode kill method to Terminator
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@515 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-17 06:32:30 +00:00
wj32
972228f469
KProcessHacker now hooks stuff, but doesn't really do anything useful...
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@509 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-16 08:02:41 +00:00
wj32
7587160c6c
KPH is half-working...
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@503 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-15 08:35:57 +00:00
wj32
76c9eedb53
KProcessHacker now does something slightly useful
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@502 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-15 03:39:21 +00:00
wj32
844cb9dde2
add preliminary kernel driver code (it compiles!)
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@501 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-15 02:52:52 +00:00