admin/mirror-processhacker
1
0
Fork 0
mirror of https://github.com/mirror/processhacker synced 2026-06-08 16:03:24 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,668 Commits 1 Branch 0 Tags
72cf8f92bb07dfe747bd7383760a49fa014bcbb7
Commit Graph

71 Commits

Author SHA1 Message Date
wj32 2547a5070c switched to push locks in sysservice.c 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1660 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-08-03 10:29:55 +00:00
wj32 e3388d31ef * KPH stack trace limit is now 64 
* improved the Ss GUI

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1652 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-08-02 01:17:03 +00:00
wj32 5a9e1df893 * fixed KPH ref deadlock - replaced KphIsDestroyedObject with KphReferenceObjectSafe 
* reorganized ExtraTools; added System Call Hacker
* fixed PH tab indicies

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1651 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-08-01 23:57:10 +00:00
wj32 b3d03c4e30 added support for client ID arguments 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1650 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-08-01 07:29:36 +00:00
wj32 3a75085d71 added many more Ss definitions 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1649 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-08-01 06:20:20 +00:00
wj32 d4d2bf8520 improved Ss logging 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1646 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-31 10:25:50 +00:00
wj32 acf3925bad fixed SsLogger class for argument blocks 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1644 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-31 09:42:37 +00:00
wj32 876a77ea0f fixed rule matching bug 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1642 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-27 11:19:59 +00:00
wj32 945be0e039 added better rule matching (at the cost of performance) 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1641 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-27 11:14:46 +00:00
wj32 2164a28615 added many more syscall entries 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1640 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-27 09:35:15 +00:00
wj32 29a5b6f67a added KphSsQueryClientEntry, fixed critical handle referencing bugs 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1639 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-27 08:37:33 +00:00
wj32 7fd92d6f36 * found and fixed the Ss BSODs 
* fixed KphQueryNameFileObject

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1638 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-27 06:44:00 +00:00
wj32 28d23ec084 started argument capturing (BSODs still present!) 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1634 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-26 23:48:23 +00:00
wj32 9da61ad2c8 many improvements to KphSs 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1633 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-26 06:50:37 +00:00
wj32 2c22f0e8a4 added the use of an active logger count 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1632 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-25 00:13:41 +00:00
wj32 09e59eeca0 significant logging improvements 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1630 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-24 05:04:59 +00:00
wj32 bc1878d845 system service logging works! 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1629 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-24 02:24:21 +00:00
wj32 d4b61e2f16 improved guarded lock performance 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1628 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-23 06:38:59 +00:00
wj32 b41cf81165 * introduced guarded locks 
* fixed KiFastCallEntry scanning
* fixed client entry (PhCl) pool leaks (now uses ref.c for client entries)
* fixed ref.c delete procedure synchronization

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1627 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-23 05:18:00 +00:00
wj32 9eb0d23fc4 made further progress on system service logging; removed test code in kprocesshacker.c 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1625 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-22 10:24:26 +00:00
wj32 3e3b458759 system service hooking works! 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1624 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-22 07:59:06 +00:00
wj32 1f89c57334 improved KphUnsafeReadVirtualMemory 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1618 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-21 09:53:09 +00:00
wj32 2f51600da1 added KphOpenDirectoryObject 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1614 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-20 10:09:11 +00:00
wj32 bbdf6b3f49 added ability to unload drivers 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1613 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-20 09:45:43 +00:00
wj32 66333c166f added object/handle code to KPH 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1612 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-20 05:04:01 +00:00
wj32 4f8aabf04f added paged code sections to KPH 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1508 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-07-03 07:36:49 +00:00
wj32 9536b7ebbb moved some things around in KPH 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1472 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-06-26 11:51:10 +00:00
wj32 3d8e9894c2 Terminator test: TT4 (dangerous thread termination) 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1467 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-06-25 10:26:50 +00:00
wj32 afe6a1ed8e stack-walking improvements 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1455 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-06-23 09:56:25 +00:00
wj32 8fb87d9a30 ps.c cleanup 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1441 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-06-21 00:19:22 +00:00
wj32 fe52a61b6b * kernel-mode stack traces! 
* pool tag cleanup

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1439 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-06-20 23:41:17 +00:00
wj32 f98148bd1f * updated version information 
* updated NPH with new functions and argument attributes
* fixed some KPH argument attributes
* fixed optional buffer support in KphQueryProcessHandles
* fixed NPH NtOpenProcessTokenEx hook

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1438 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-06-20 08:26:23 +00:00
wj32 a17e10d425 * added KphQueryProcessHandles 
* added KphOpenThreadProcess
* hidden processes scanner can now detect FUTo
* KPH cleanup - added argument attributes
* improved auto-ForeColor

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1436 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-06-20 02:47:04 +00:00
wj32 a0ecb1c49d Ability to set DEP status of processes in other sessions 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1432 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-06-19 06:58:46 +00:00
wj32 10113a1831 added KphUnsafeReadVirtualMemory, fixed very rare BSOD 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1425 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-06-16 11:18:39 +00:00
wj32 5808bbcfc6 * added transparency hooking to NProcessHacker 
* added some registry-related things to ProcessHacker.Native

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1379 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-06-06 09:50:14 +00:00
wj32 b8f2e812ea * fixed several Windows 7 offsets 
* fixed auxData size leading to a buffer overflow
* better credits screen

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1325 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-24 01:32:16 +00:00
wj32 963ac8990e added APC-related defs 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1319 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-22 10:52:53 +00:00
wj32 3812cfaab3 handle duplication is now protected (through object open hooks) 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1308 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-22 00:52:19 +00:00
wj32 860d7b751d * dynamic PEB offsets 
* hooking/unhooking is now completely safe on multi-processor systems

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1303 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-21 06:13:09 +00:00
wj32 2199520ed5 * moved native API definitions into separate files 
* added remaining NT objects
* added NtStatus enum
* added Semaphore properties
* added ObjectFlags to every object
* other refactoring

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1301 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-20 07:05:02 +00:00
wj32 5a25f7aeeb fixed "don't allow kernel-mode to bypass protection" by allowing rule creators to bypass the rules 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1296 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-18 09:11:21 +00:00
wj32 fdab46f9b0 added option to protect from kernel-mode callers 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1292 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-17 10:55:05 +00:00
wj32 7f2f872b96 fixed BSOD when unloading KPH after ObOpenObjectByPointer has been hooked - forgot to delete the lookaside list 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1289 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-17 10:17:50 +00:00
wj32 0de2790f9c KPH code cleanup 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1288 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-17 04:40:24 +00:00
wj32 91d061b663 added experimental feature: protect processes 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1287 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-17 02:59:06 +00:00
wj32 6e5630dfa2 fixed _PsTerminateProcess def 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1261 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-10 10:18:57 +00:00
wj32 026d80fd00 fixed API def 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1257 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-10 07:35:46 +00:00
wj32 666df2e06f * added ObSetHandleAttributes 
* ability to set handle flags such as protect-from-close and inherit

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1256 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-10 01:57:45 +00:00
wj32 6eaaa3deb8 * added KphSetHandleGrantedAccess; KPH can finally bypass all protected process restrictions 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1254 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-09 11:57:47 +00:00