wj32
81c75fedda
disabled KPH on 64-bit
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1711 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-08-14 12:00:51 +00:00
wj32
5d672845b3
fixed token groups info (problem was with structure padding)
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1686 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-08-10 08:34:08 +00:00
wj32
771ba824de
* fixed warning pragma directives
...
* decreased BaseObject overhead
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1679 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-08-09 01:02:09 +00:00
wj32
5a9e1df893
* fixed KPH ref deadlock - replaced KphIsDestroyedObject with KphReferenceObjectSafe
...
* reorganized ExtraTools; added System Call Hacker
* fixed PH tab indicies
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1651 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-08-01 23:57:10 +00:00
wj32
b3d03c4e30
added support for client ID arguments
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1650 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-08-01 07:29:36 +00:00
wj32
acf3925bad
fixed SsLogger class for argument blocks
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1644 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-31 09:42:37 +00:00
wj32
4e4036570b
* added Ss logger code
...
* refactored memory classes
* added Kernel Transaction Manager (KTM) types
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1643 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-30 11:25:07 +00:00
wj32
945be0e039
added better rule matching (at the cost of performance)
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1641 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-27 11:14:46 +00:00
wj32
29a5b6f67a
added KphSsQueryClientEntry, fixed critical handle referencing bugs
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1639 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-27 08:37:33 +00:00
wj32
7fd92d6f36
* found and fixed the Ss BSODs
...
* fixed KphQueryNameFileObject
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1638 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-27 06:44:00 +00:00
wj32
28d23ec084
started argument capturing (BSODs still present!)
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1634 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-26 23:48:23 +00:00
wj32
9da61ad2c8
many improvements to KphSs
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1633 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-26 06:50:37 +00:00
wj32
09e59eeca0
significant logging improvements
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1630 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-24 05:04:59 +00:00
wj32
bc1878d845
system service logging works!
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1629 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-24 02:24:21 +00:00
wj32
2f51600da1
added KphOpenDirectoryObject
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1614 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-20 10:09:11 +00:00
wj32
bbdf6b3f49
added ability to unload drivers
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1613 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-20 09:45:43 +00:00
wj32
b1a6d7a443
reduced the number of BaseObject finalizer runs
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1534 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-04 12:55:48 +00:00
wj32
710682a5ab
made lots of classes sealed
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1526 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-04 09:44:36 +00:00
wj32
4e775ce125
added back trace safety check
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1513 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-03 12:06:30 +00:00
wj32
cf63b7b6f3
* added IP address resolve cache
...
* fixed some doc problems
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1474 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-27 02:23:56 +00:00
wj32
3d8e9894c2
Terminator test: TT4 (dangerous thread termination)
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1467 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-25 10:26:50 +00:00
wj32
fe52a61b6b
* kernel-mode stack traces!
...
* pool tag cleanup
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1439 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-20 23:41:17 +00:00
wj32
a17e10d425
* added KphQueryProcessHandles
...
* added KphOpenThreadProcess
* hidden processes scanner can now detect FUTo
* KPH cleanup - added argument attributes
* improved auto-ForeColor
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1436 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-20 02:47:04 +00:00
wj32
a0ecb1c49d
Ability to set DEP status of processes in other sessions
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1432 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-19 06:58:46 +00:00
wj32
10113a1831
added KphUnsafeReadVirtualMemory, fixed very rare BSOD
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1425 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-16 11:18:39 +00:00
wj32
028e4f14fb
changed KProcessHacker constructor
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1370 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-05 06:24:50 +00:00
wj32
5b43da8675
some refactoring
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1314 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-22 05:12:58 +00:00
wj32
bf3e7d0f95
fixed self-termination by switching to NtDeviceIoControlFile
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1312 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-22 03:16:21 +00:00
wj32
2199520ed5
* moved native API definitions into separate files
...
* added remaining NT objects
* added NtStatus enum
* added Semaphore properties
* added ObjectFlags to every object
* other refactoring
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1301 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-20 07:05:02 +00:00
wj32
c3625ea5fc
* changed error when terminating self to STATUS_CANT_TERMINATE_SELF
...
* fixed some outdated comments
* added lots of defs to NProcessHacker KPH
* added test program
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1297 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-19 08:25:38 +00:00
wj32
fdab46f9b0
added option to protect from kernel-mode callers
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1292 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-17 10:55:05 +00:00
wj32
91d061b663
added experimental feature: protect processes
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1287 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-17 02:59:06 +00:00
wj32
666df2e06f
* added ObSetHandleAttributes
...
* ability to set handle flags such as protect-from-close and inherit
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1256 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-10 01:57:45 +00:00
wj32
6eaaa3deb8
* added KphSetHandleGrantedAccess; KPH can finally bypass all protected process restrictions
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1254 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-09 11:57:47 +00:00
wj32
1384a506d1
* removed KPH ExpGetProcessInformation
...
* fixed PsTerminateProcess and PspTerminateThreadByPointer scanning for Windows 7 ntoskrnl
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1245 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-08 07:46:54 +00:00
flavioe
2106d2a2e6
changed API definitions to use IntPtr instead of int
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1233 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-05 22:05:59 +00:00
wj32
741af29084
* KProcessHacker can now perform process memory reading/writing by itself and does not require MmCopyVirtualMemory
...
* added KphAssignImpersonationToken
* added KphAcquireProcessRundownProtection and KphReleaseProcessRundownProtection
* added some impersonation code
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1226 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-03 07:03:02 +00:00
wj32
5fbd0ba8b9
resurrected GUI thread highlighting which mysteriously disappeared recently
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1204 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-01 10:25:50 +00:00
wj32
1134c7820a
* completely refactored argument code in KPH
...
* fixed: random file-object-related BSODs
* removed GetObjectName - unsafe, not used
* added Terminate Process Tree
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1147 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-26 00:08:16 +00:00
wj32
20f2741361
* #2779558 - "TreeViewAdv font cannot be initialized"
...
* fixed KProcessHacker BSOD on some Vista systems
* added -nokph command line switch to disable KProcessHacker
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1133 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-23 23:41:35 +00:00
wj32
557503df5a
* added some more undocumented defs
...
* fixed error detection with Native API calls - ThrowLastError() would call Marshal.GetLastWin32Error() which doesn't even apply to Native API calls and would return without throwing an exception, causing random crashes!
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1119 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-22 09:38:30 +00:00
wj32
4dba651028
added ExpGetProcessInformation (not used yet)
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1116 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-21 09:01:12 +00:00
wj32
c096bdfa33
major refactoring; all Native functions are now in a separate assembly
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1109 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-21 00:39:15 +00:00