admin/mirror-processhacker
1
0
Fork 0
mirror of https://github.com/mirror/processhacker synced 2026-06-08 16:03:24 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,259 Commits 1 Branch 0 Tags
f028ca4ca658e4fbc2a337e247ecb8907bdcc154
Commit Graph

24 Commits

Author SHA1 Message Date
wj32 026d80fd00 fixed API def 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1257 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-10 07:35:46 +00:00
wj32 666df2e06f * added ObSetHandleAttributes 
* ability to set handle flags such as protect-from-close and inherit

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1256 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-10 01:57:45 +00:00
wj32 6eaaa3deb8 * added KphSetHandleGrantedAccess; KPH can finally bypass all protected process restrictions 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1254 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-09 11:57:47 +00:00
wj32 ac906ee65e more ULONG_PTR usage in KPH 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1247 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-08 08:46:00 +00:00
wj32 1384a506d1 * removed KPH ExpGetProcessInformation 
* fixed PsTerminateProcess and PspTerminateThreadByPointer scanning for Windows 7 ntoskrnl

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1245 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-08 07:46:54 +00:00
wj32 741af29084 * KProcessHacker can now perform process memory reading/writing by itself and does not require MmCopyVirtualMemory 
* added KphAssignImpersonationToken
* added KphAcquireProcessRundownProtection and KphReleaseProcessRundownProtection
* added some impersonation code

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1226 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-03 07:03:02 +00:00
wj32 1134c7820a * completely refactored argument code in KPH 
* fixed: random file-object-related BSODs
* removed GetObjectName - unsafe, not used
* added Terminate Process Tree

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1147 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-26 00:08:16 +00:00
wj32 aec333c248 deleted test code from KPH 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1118 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-22 00:12:28 +00:00
wj32 4dba651028 added ExpGetProcessInformation (not used yet) 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1116 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-21 09:01:12 +00:00
wj32 69a6811b71 added KphTerminateThread -> PspTerminateThreadByPointer 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1102 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-19 22:36:44 +00:00
wj32 1aaf0c4b2f new KPH method: scans for PsTerminateProcess instead of using fixed offsets 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1101 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-19 11:26:44 +00:00
wj32 22bf8a798e KphTerminateProcess now uses PsTerminateProcess where possible; if the wrong address is found it should not BSOD the system because the first 5 bytes are checked against the known standard function prologue. 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1099 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-19 09:51:04 +00:00
wj32 fd240faf2a fixed handle filter to use KPH properly 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1098 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-19 06:25:48 +00:00
wj32 ed7f6135ab * fixed version comparison functions 
* stack viewing uses KProcessHacker on Windows Vista
* removed register list from the thread window

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1093 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-19 02:26:15 +00:00
wj32 2834affe18 * support for Windows 7 in KProcessHacker 
* new Windows version system for Process Hacker

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1092 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-19 00:24:27 +00:00
wj32 949417b506 * named KPH functions properly (according to MS) 
* added support for version-specific info for service packs

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1091 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-18 23:06:36 +00:00
wj32 2e1120a4a9 added version-dependent info for ProtectedProcess 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1089 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-18 09:26:08 +00:00
wj32 22e6c6ea83 fixed object manager offsets 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1088 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-18 08:17:33 +00:00
wj32 36d0d9299a * added new system for OS version-dependent data 
* fixed GenericMapping offset for Windows XP

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1087 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-18 08:02:21 +00:00
wj32 fd789a3cbf * KphAttachProcess* functions 
* improved handle viewing
* improved start addresses on Windows XP

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1085 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-18 02:52:10 +00:00
wj32 67115351b8 * fixed ProtectedProcess offset 
* use KPH for duplicating process, thread and token objects

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1084 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-18 00:53:20 +00:00
wj32 83ff30039b new KPH I/O control: ZwQueryObject 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1080 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-17 11:45:17 +00:00
wj32 08854be5dd After 8 hours of debugging and 5 BSODs, nothing has been achieved :( 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1079 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-17 09:01:10 +00:00
wj32 5eccb86895 * reorganized KProcessHacker 
* added KphDuplicateObject

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1078 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-17 02:29:25 +00:00