Commit Graph

25 Commits

Author SHA1 Message Date
wj32 fd21d97396 make KProcessHacker's only function getting handles - hooking is too risky
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@541 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-19 21:58:27 +00:00
wj32 6dde99868d * update OldKiServiceTable after restoring SSDT
* updated binary

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@539 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-19 05:47:07 +00:00
wj32 9c330fe55f fixed problem with Hooked not being set to FALSE after unhooking
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@538 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-19 05:43:55 +00:00
wj32 6578903105 * added SSDT restoration capability
* automatically deletes service after a reboot
* no longer hooks file and key functions
* added website to README.txt

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@537 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-19 03:18:07 +00:00
wj32 654bf19949 added KPH binary since not many people have the DDK
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@535 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-18 21:53:46 +00:00
wj32 019b0864a4 hook non-index functions if we can't use the correct indicies
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@534 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-18 10:26:48 +00:00
wj32 7f54264dd7 add a huge comment explaining the fix
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@533 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-18 09:17:52 +00:00
wj32 3b9dc64e45 protect against double out-of-order hook restoration
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@532 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-18 09:08:49 +00:00
wj32 e69b70caf4 fixed memory corruption issues with the client
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@530 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-18 07:56:22 +00:00
wj32 f43d8fb4cd better ServiceLimit finder, now unhooks as soon as the client disconnects
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@529 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-18 05:49:44 +00:00
wj32 fb2cb99d93 KProcessHacker now hooks on XP
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@527 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-18 03:50:13 +00:00
wj32 de39b5f14d disable protection
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@526 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-18 02:56:34 +00:00
wj32 1b145478ad hooks are complete.
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@525 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-18 02:33:26 +00:00
wj32 9f93629b61 make KProcessHacker un-unloadable
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@524 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-18 02:04:04 +00:00
wj32 3b965235aa now hooks some file and key functions
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@523 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-18 00:21:38 +00:00
wj32 ebe69f5c6d easier hooking, now hooks ZwOpenThread
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@522 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-17 23:17:21 +00:00
wj32 6081f06c87 * implemented optional client protection
* added definitions for all supported Zw functions

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@521 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-17 11:04:45 +00:00
wj32 7a7d4d0f53 no kernel-kill tool needed - KProcessHacker transparently lets Process Hacker call the unhooked functions
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@520 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-17 10:04:59 +00:00
wj32 68088e866f add more hooks to let Process Hacker do more things :)
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@519 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-17 08:27:48 +00:00
wj32 f15944a88d resolved several bugs with KProcessHacker
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@517 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-17 07:54:56 +00:00
wj32 24f9427887 * ProcessHacker can now find and dump the original KiServiceTable
* PE reader reads relocations
* Added kernel-mode kill method to Terminator

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@515 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-17 06:32:30 +00:00
wj32 972228f469 KProcessHacker now hooks stuff, but doesn't really do anything useful...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@509 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-16 08:02:41 +00:00
wj32 7587160c6c KPH is half-working...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@503 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-15 08:35:57 +00:00
wj32 76c9eedb53 KProcessHacker now does something slightly useful
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@502 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-15 03:39:21 +00:00
wj32 844cb9dde2 add preliminary kernel driver code (it compiles!)
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@501 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-15 02:52:52 +00:00