admin/mirror-processhacker
1
0
Fork 0
mirror of https://github.com/mirror/processhacker synced 2026-06-08 16:03:24 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,059 Commits 1 Branch 0 Tags
ed1facb91b1925120c481a958b4daada70b5ff40
Commit Graph

34 Commits

Author SHA1 Message Date
wj32 ca0a01ddda changed all instances of GetCurrentProcess().Kill() to Win32.ExitProcess 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1020 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-06 11:56:31 +00:00
wj32 932bbb0b28 added highlighting for GUI threads 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1009 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-05 00:28:15 +00:00
wj32 4692867d03 * fixed thread stacks on Windows Vista + KPH 
* added KphGetContextThread and KphSetContextThread

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1001 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-03 07:39:36 +00:00
wj32 1ce4fce076 module querying now only requires PROCESS_QUERY_LIMITED_INFORMATION if using KPH 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@992 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-02 06:56:07 +00:00
wj32 71ce9c03db * KPH now supports KphWriteVirtualMemory 
* revised process opening means that we can now get the command line of audiodg.exe

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@991 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-02 05:38:59 +00:00
wj32 a59eedfb65 implemented KphReadVirtualMemory! 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@987 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-01 10:27:41 +00:00
wj32 331d515717 job detection works (after 4 hours and 2 BSODs)! 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@977 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-03-31 10:09:37 +00:00
wj32 2e5b27161f KProcessHacker now retrieves thread start addresses 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@976 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-03-31 06:40:27 +00:00
wj32 8c178555ab * added documentation 
* removes RunOnceAsync thread from _asyncThreads

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@886 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-03-14 23:19:02 +00:00
wj32 c5b40a16fc * #2647418 - "Add ctrl+A and ctrl+C to threads, token, modules etc" 
* fixed nulls at the ends of handle names

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@761 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-02-28 05:22:03 +00:00
wj32 bc593b4064 fixed bug #2617880 - "Killing ProcessHacker within ProcessHacker and Terminator" 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@660 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-02-20 06:06:36 +00:00
wj32 41e2dbceb9 * fixed .NET detection (for real this time) 
* no longer deletes the KPH service if it's already running
* PH no longer requires UAC elevation

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@628 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-02-15 00:25:27 +00:00
wj32 9eeac62fd9 * removed hooks from KPH - this means that it can now support multiple clients 
* added Restart and Set Token menu items
* KphOpenTokenEx now creates an access state - limited user accounts now have complete admin access to processes and tokens
* fixed problem where if a process image file can't be accessed because of permissions PH says it's packed
* fixed problem with .NET executables not being recognized

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@627 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-02-14 23:52:04 +00:00
wj32 74df64961c * PH now uses KPH even under a limited user account, giving it full admin access (to processes) anyway 
* eliminated most usages of Process.Modules because it doesn't use KPH

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@626 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-02-14 21:46:28 +00:00
wj32 466c0719e7 fixed SymbolProvider and ThreadProvider so that it is possible to view symbolic start addresses of System (PID 4) after it is unprotected 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@625 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-02-14 10:56:31 +00:00
wj32 399de14431 Process termination now uses KProcessHacker 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@617 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-02-13 05:27:47 +00:00
wj32 f5bf13a0ef Suspend and Resume functions for processes now use KProcessHacker 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@596 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-29 09:29:38 +00:00
wj32 2b560d67c6 implemented KphOpenProcessTokenEx 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@586 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-26 02:28:27 +00:00
wj32 e339410c75 KphOpenProcess and KphOpenThread work perfectly on Vista 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@578 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-25 10:15:43 +00:00
wj32 cec7a95128 * doesn't use KphOpenProcess (too risky with BSODs) 
* can protect and unprotect processes!

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@577 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-25 06:09:08 +00:00
wj32 e4fe153f83 new capability for KProcessHacker: custom rewrite of NtOpenProcess, bypassing almost all types of hooks! 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@576 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-25 03:52:32 +00:00
wj32 6578903105 * added SSDT restoration capability 
* automatically deletes service after a reboot
* no longer hooks file and key functions
* added website to README.txt

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@537 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-19 03:18:07 +00:00
wj32 de69f8d0ea disable KPH by default and add an option to enable it 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@531 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-18 08:22:34 +00:00
wj32 e69b70caf4 fixed memory corruption issues with the client 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@530 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-18 07:56:22 +00:00
wj32 f43d8fb4cd better ServiceLimit finder, now unhooks as soon as the client disconnects 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@529 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-18 05:49:44 +00:00
wj32 dfe178fb4c Make a guess about the size of the SSDT if we couldn't find KiServiceLimit. This fixes the SSDT on XP. 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@528 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-18 04:17:02 +00:00
wj32 9f93629b61 make KProcessHacker un-unloadable 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@524 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-18 02:04:04 +00:00
wj32 ebe69f5c6d easier hooking, now hooks ZwOpenThread 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@522 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-17 23:17:21 +00:00
wj32 7a7d4d0f53 no kernel-kill tool needed - KProcessHacker transparently lets Process Hacker call the unhooked functions 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@520 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-17 10:04:59 +00:00
wj32 88488c2561 fixed deletion of the existing service 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@518 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-17 08:00:48 +00:00
wj32 26fed602c4 automatically creates the KProcessHacker service and deletes it afterwards 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@516 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-17 06:41:22 +00:00
wj32 24f9427887 * ProcessHacker can now find and dump the original KiServiceTable 
* PE reader reads relocations
* Added kernel-mode kill method to Terminator

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@515 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-17 06:32:30 +00:00
wj32 972228f469 KProcessHacker now hooks stuff, but doesn't really do anything useful... 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@509 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-16 08:02:41 +00:00
wj32 7587160c6c KPH is half-working... 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@503 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-01-15 08:35:57 +00:00