wj32
4201dfad3b
fixed kernel handle viewing on Windows 7
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1670 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-08-06 09:11:03 +00:00
wj32
5bb2c4f1b3
fixed object type retrieval on Windows 7
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1669 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-08-06 07:03:28 +00:00
wj32
7fd92d6f36
* found and fixed the Ss BSODs
...
* fixed KphQueryNameFileObject
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1638 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-27 06:44:00 +00:00
wj32
9da61ad2c8
many improvements to KphSs
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1633 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-26 06:50:37 +00:00
wj32
2f51600da1
added KphOpenDirectoryObject
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1614 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-20 10:09:11 +00:00
wj32
bbdf6b3f49
added ability to unload drivers
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1613 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-20 09:45:43 +00:00
wj32
44ac5bda57
fixed memory corruption in KphQueryProcessHandles
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1536 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-05 00:42:36 +00:00
wj32
4f8aabf04f
added paged code sections to KPH
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1508 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-07-03 07:36:49 +00:00
wj32
fe52a61b6b
* kernel-mode stack traces!
...
* pool tag cleanup
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1439 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-20 23:41:17 +00:00
wj32
f98148bd1f
* updated version information
...
* updated NPH with new functions and argument attributes
* fixed some KPH argument attributes
* fixed optional buffer support in KphQueryProcessHandles
* fixed NPH NtOpenProcessTokenEx hook
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1438 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-20 08:26:23 +00:00
wj32
a17e10d425
* added KphQueryProcessHandles
...
* added KphOpenThreadProcess
* hidden processes scanner can now detect FUTo
* KPH cleanup - added argument attributes
* improved auto-ForeColor
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1436 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-20 02:47:04 +00:00
wj32
b8f2e812ea
* fixed several Windows 7 offsets
...
* fixed auxData size leading to a buffer overflow
* better credits screen
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1325 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-24 01:32:16 +00:00
wj32
ca4dc66afc
added HACKING.txt for KPH
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1320 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-23 06:23:08 +00:00
wj32
666df2e06f
* added ObSetHandleAttributes
...
* ability to set handle flags such as protect-from-close and inherit
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1256 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-10 01:57:45 +00:00
wj32
6eaaa3deb8
* added KphSetHandleGrantedAccess; KPH can finally bypass all protected process restrictions
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1254 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-09 11:57:47 +00:00
wj32
ac906ee65e
more ULONG_PTR usage in KPH
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1247 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-08 08:46:00 +00:00
wj32
30114f9047
added more comments to KProcessHacker
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1231 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-04 10:16:27 +00:00
wj32
741af29084
* KProcessHacker can now perform process memory reading/writing by itself and does not require MmCopyVirtualMemory
...
* added KphAssignImpersonationToken
* added KphAcquireProcessRundownProtection and KphReleaseProcessRundownProtection
* added some impersonation code
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1226 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-03 07:03:02 +00:00
wj32
22bf8a798e
KphTerminateProcess now uses PsTerminateProcess where possible; if the wrong address is found it should not BSOD the system because the first 5 bytes are checked against the known standard function prologue.
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1099 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-19 09:51:04 +00:00
wj32
22e6c6ea83
fixed object manager offsets
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1088 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-18 08:17:33 +00:00
wj32
36d0d9299a
* added new system for OS version-dependent data
...
* fixed GenericMapping offset for Windows XP
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1087 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-18 08:02:21 +00:00
wj32
08854be5dd
After 8 hours of debugging and 5 BSODs, nothing has been achieved :(
...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1079 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-17 09:01:10 +00:00
wj32
5eccb86895
* reorganized KProcessHacker
...
* added KphDuplicateObject
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1078 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-17 02:29:25 +00:00