admin/mirror-processhacker
1
0
Fork 0
mirror of https://github.com/mirror/processhacker synced 2026-06-08 16:03:24 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,259 Commits 1 Branch 0 Tags
f028ca4ca658e4fbc2a337e247ecb8907bdcc154
Commit Graph

99 Commits

Author SHA1 Message Date
wj32 026d80fd00 fixed API def 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1257 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-10 07:35:46 +00:00
wj32 666df2e06f * added ObSetHandleAttributes 
* ability to set handle flags such as protect-from-close and inherit

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1256 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-10 01:57:45 +00:00
wj32 6eaaa3deb8 * added KphSetHandleGrantedAccess; KPH can finally bypass all protected process restrictions 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1254 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-09 11:57:47 +00:00
wj32 7138c92902 bump to 1.3.8.0 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1249 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-09 01:50:22 +00:00
wj32 ac906ee65e more ULONG_PTR usage in KPH 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1247 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-08 08:46:00 +00:00
wj32 1384a506d1 * removed KPH ExpGetProcessInformation 
* fixed PsTerminateProcess and PspTerminateThreadByPointer scanning for Windows 7 ntoskrnl

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1245 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-08 07:46:54 +00:00
wj32 30114f9047 added more comments to KProcessHacker 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1231 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-04 10:16:27 +00:00
wj32 741af29084 * KProcessHacker can now perform process memory reading/writing by itself and does not require MmCopyVirtualMemory 
* added KphAssignImpersonationToken
* added KphAcquireProcessRundownProtection and KphReleaseProcessRundownProtection
* added some impersonation code

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1226 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-03 07:03:02 +00:00
wj32 5fbd0ba8b9 resurrected GUI thread highlighting which mysteriously disappeared recently 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1204 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-01 10:25:50 +00:00
wj32 637b87bd4d bump to 1.3.7.5 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1202 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-01 09:12:51 +00:00
wj32 32c99c67ed * bump to 1.3.7.3 
* added customizable tray icons

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1166 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-27 06:57:59 +00:00
wj32 06a8d1e9a5 added KPH call documentation 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1165 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-27 03:43:22 +00:00
wj32 1134c7820a * completely refactored argument code in KPH 
* fixed: random file-object-related BSODs
* removed GetObjectName - unsafe, not used
* added Terminate Process Tree

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1147 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-26 00:08:16 +00:00
wj32 8550828731 fixed version numbers, etc. 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1134 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-24 00:51:41 +00:00
wj32 20f2741361 * #2779558 - "TreeViewAdv font cannot be initialized" 
* fixed KProcessHacker BSOD on some Vista systems
* added -nokph command line switch to disable KProcessHacker

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1133 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-23 23:41:35 +00:00
wj32 b70370429e * fixed version numbers 
* fixed protect/inherit confusion

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1130 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-23 04:42:44 +00:00
wj32 c3f11637c4 uploading free build KPH 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1129 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-23 04:01:52 +00:00
wj32 557503df5a * added some more undocumented defs 
* fixed error detection with Native API calls - ThrowLastError() would call Marshal.GetLastWin32Error() which doesn't even apply to Native API calls and would return without throwing an exception, causing random crashes!

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1119 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-22 09:38:30 +00:00
wj32 aec333c248 deleted test code from KPH 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1118 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-22 00:12:28 +00:00
wj32 4dba651028 added ExpGetProcessInformation (not used yet) 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1116 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-21 09:01:12 +00:00
wj32 86c690f825 * fixed typo in version.c 
* uploading free build KPH

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1108 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-20 04:38:56 +00:00
wj32 8d2625dea8 fixed terminating own thread 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1103 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-19 22:53:47 +00:00
wj32 69a6811b71 added KphTerminateThread -> PspTerminateThreadByPointer 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1102 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-19 22:36:44 +00:00
wj32 1aaf0c4b2f new KPH method: scans for PsTerminateProcess instead of using fixed offsets 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1101 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-19 11:26:44 +00:00
wj32 8cb9927ee4 uploading free build of KPH 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1100 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-19 09:52:07 +00:00
wj32 22bf8a798e KphTerminateProcess now uses PsTerminateProcess where possible; if the wrong address is found it should not BSOD the system because the first 5 bytes are checked against the known standard function prologue. 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1099 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-19 09:51:04 +00:00
wj32 fd240faf2a fixed handle filter to use KPH properly 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1098 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-19 06:25:48 +00:00
wj32 ed7f6135ab * fixed version comparison functions 
* stack viewing uses KProcessHacker on Windows Vista
* removed register list from the thread window

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1093 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-19 02:26:15 +00:00
wj32 2834affe18 * support for Windows 7 in KProcessHacker 
* new Windows version system for Process Hacker

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1092 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-19 00:24:27 +00:00
wj32 949417b506 * named KPH functions properly (according to MS) 
* added support for version-specific info for service packs

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1091 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-18 23:06:36 +00:00
wj32 2e1120a4a9 added version-dependent info for ProtectedProcess 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1089 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-18 09:26:08 +00:00
wj32 22e6c6ea83 fixed object manager offsets 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1088 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-18 08:17:33 +00:00
wj32 36d0d9299a * added new system for OS version-dependent data 
* fixed GenericMapping offset for Windows XP

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1087 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-18 08:02:21 +00:00
wj32 fd789a3cbf * KphAttachProcess* functions 
* improved handle viewing
* improved start addresses on Windows XP

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1085 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-18 02:52:10 +00:00
wj32 67115351b8 * fixed ProtectedProcess offset 
* use KPH for duplicating process, thread and token objects

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1084 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-18 00:53:20 +00:00
wj32 f6b82859ca KPH ZwQueryObject works! 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1081 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-17 23:09:32 +00:00
wj32 83ff30039b new KPH I/O control: ZwQueryObject 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1080 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-17 11:45:17 +00:00
wj32 08854be5dd After 8 hours of debugging and 5 BSODs, nothing has been achieved :( 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1079 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-17 09:01:10 +00:00
wj32 5eccb86895 * reorganized KProcessHacker 
* added KphDuplicateObject

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1078 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-17 02:29:25 +00:00
wj32 f2d58b3353 prevent the options window from closing when the elevated one is open(ing) 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1076 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-16 11:30:31 +00:00
wj32 954b72cf9d updated KPH build 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1073 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-16 09:20:53 +00:00
wj32 e29085b64a removed old KPH comments 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1037 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-09 09:16:15 +00:00
wj32 6b4123f1a4 * fixed resources for KProcessHacker 
* switched KPH to free build
* fixed DEP editing (hopefully) on XP
* added version number to PH Assistant

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1035 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-09 07:50:54 +00:00
wj32 6b11e5b79b added resource file to KProcessHacker 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1032 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-08 06:37:12 +00:00
wj32 5c49f831b2 added an important safety guard to KPH 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1013 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-05 05:42:49 +00:00
wj32 932bbb0b28 added highlighting for GUI threads 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1009 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-05 00:28:15 +00:00
wj32 07deb6a00e removed the Vista check in KphNtInit() 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1002 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-03 08:08:31 +00:00
wj32 4692867d03 * fixed thread stacks on Windows Vista + KPH 
* added KphGetContextThread and KphSetContextThread

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1001 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-03 07:39:36 +00:00
wj32 200b17c0b3 * fixed thread start addresses on Windows XP 
* fixed module information on Windows XP

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@999 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-02 22:36:43 +00:00
wj32 60b4ed9ed1 * KPH now loads on XP again; introduced the use of MmGetSystemRoutineAddress 
* brought back KphSuspendProcess and KphResumeProcess on Vista

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@995 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-02 08:16:43 +00:00