admin/mirror-processhacker
1
0
Fork 0
mirror of https://github.com/mirror/processhacker synced 2026-06-08 16:03:24 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,429 Commits 1 Branch 0 Tags
fe851cc7ab1a0155ef12a98daa7d644582510e2e
Commit Graph

128 Commits

Author SHA1 Message Date
wj32 10113a1831 added KphUnsafeReadVirtualMemory, fixed very rare BSOD 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1425 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-06-16 11:18:39 +00:00
wj32 2339135a86 new KPH build 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1380 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-06-06 10:37:25 +00:00
wj32 5808bbcfc6 * added transparency hooking to NProcessHacker 
* added some registry-related things to ProcessHacker.Native

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1379 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-06-06 09:50:14 +00:00
wj32 2c3c8a402f added ability to detach processes from debuggers 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1376 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-06-06 00:53:45 +00:00
wj32 e4f8114211 * fixed NPH-KPH terminate methods 
* updated NPH and KPH version numbers

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1361 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-06-01 08:52:15 +00:00
wj32 874902d9fd * added Vista SP2 support to KPH 
* #2797949 - "Enable ctrl+A for the Scratchpad window"

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1345 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-29 23:30:58 +00:00
wj32 e4d7cdebe7 * modified about window 
* new build of KPH (same code)

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1328 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-25 07:51:00 +00:00
wj32 5d9f71e8d4 fixed HACKING.txt, added more comments to sync.c 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1327 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-24 10:35:27 +00:00
wj32 b8f2e812ea * fixed several Windows 7 offsets 
* fixed auxData size leading to a buffer overflow
* better credits screen

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1325 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-24 01:32:16 +00:00
wj32 723c42eb4e updated KPH version-specific information for Windows 7 RC 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1324 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-23 23:29:26 +00:00
wj32 ca4dc66afc added HACKING.txt for KPH 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1320 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-23 06:23:08 +00:00
wj32 963ac8990e added APC-related defs 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1319 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-22 10:52:53 +00:00
wj32 ed0a990aa8 fixed comments 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1309 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-22 00:58:51 +00:00
wj32 3812cfaab3 handle duplication is now protected (through object open hooks) 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1308 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-22 00:52:19 +00:00
wj32 860d7b751d * dynamic PEB offsets 
* hooking/unhooking is now completely safe on multi-processor systems

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1303 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-21 06:13:09 +00:00
wj32 2199520ed5 * moved native API definitions into separate files 
* added remaining NT objects
* added NtStatus enum
* added Semaphore properties
* added ObjectFlags to every object
* other refactoring

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1301 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-20 07:05:02 +00:00
wj32 c3625ea5fc * changed error when terminating self to STATUS_CANT_TERMINATE_SELF 
* fixed some outdated comments
* added lots of defs to NProcessHacker KPH
* added test program

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1297 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-19 08:25:38 +00:00
wj32 5a25f7aeeb fixed "don't allow kernel-mode to bypass protection" by allowing rule creators to bypass the rules 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1296 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-18 09:11:21 +00:00
wj32 03db5a1fd2 * removes protection when the process is terminated 
* new ObOpenObjectByPointer now checks if the object is a process/thread
* calling ProtectRemove and ProtectQuery no longer initializes process protection if it hasn't been initialized

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1295 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-18 08:24:49 +00:00
wj32 36e5e1bc33 use IoThreadToProcess instead of offset 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1294 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-17 11:43:48 +00:00
wj32 69cad00589 added worst case scenario check 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1293 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-17 11:18:02 +00:00
wj32 fdab46f9b0 added option to protect from kernel-mode callers 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1292 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-17 10:55:05 +00:00
wj32 e7ab345289 protected processes can no longer have full access to other protected processes 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1291 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-17 10:33:12 +00:00
wj32 7108fd4750 simplied KphProtectDeinit 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1290 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-17 10:21:50 +00:00
wj32 7f2f872b96 fixed BSOD when unloading KPH after ObOpenObjectByPointer has been hooked - forgot to delete the lookaside list 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1289 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-17 10:17:50 +00:00
wj32 0de2790f9c KPH code cleanup 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1288 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-17 04:40:24 +00:00
wj32 91d061b663 added experimental feature: protect processes 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1287 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-17 02:59:06 +00:00
wj32 6f9e57b10a all I had to do was to change UserMode to KernelMode when opening handles... handle granted access manipulation no longer needed! 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1263 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-11 08:08:45 +00:00
wj32 6e5630dfa2 fixed _PsTerminateProcess def 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1261 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-10 10:18:57 +00:00
wj32 026d80fd00 fixed API def 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1257 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-10 07:35:46 +00:00
wj32 666df2e06f * added ObSetHandleAttributes 
* ability to set handle flags such as protect-from-close and inherit

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1256 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-10 01:57:45 +00:00
wj32 6eaaa3deb8 * added KphSetHandleGrantedAccess; KPH can finally bypass all protected process restrictions 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1254 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-09 11:57:47 +00:00
wj32 7138c92902 bump to 1.3.8.0 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1249 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-09 01:50:22 +00:00
wj32 ac906ee65e more ULONG_PTR usage in KPH 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1247 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-08 08:46:00 +00:00
wj32 1384a506d1 * removed KPH ExpGetProcessInformation 
* fixed PsTerminateProcess and PspTerminateThreadByPointer scanning for Windows 7 ntoskrnl

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1245 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-08 07:46:54 +00:00
wj32 30114f9047 added more comments to KProcessHacker 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1231 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-04 10:16:27 +00:00
wj32 741af29084 * KProcessHacker can now perform process memory reading/writing by itself and does not require MmCopyVirtualMemory 
* added KphAssignImpersonationToken
* added KphAcquireProcessRundownProtection and KphReleaseProcessRundownProtection
* added some impersonation code

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1226 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-03 07:03:02 +00:00
wj32 5fbd0ba8b9 resurrected GUI thread highlighting which mysteriously disappeared recently 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1204 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-01 10:25:50 +00:00
wj32 637b87bd4d bump to 1.3.7.5 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1202 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-05-01 09:12:51 +00:00
wj32 32c99c67ed * bump to 1.3.7.3 
* added customizable tray icons

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1166 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-27 06:57:59 +00:00
wj32 06a8d1e9a5 added KPH call documentation 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1165 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-27 03:43:22 +00:00
wj32 1134c7820a * completely refactored argument code in KPH 
* fixed: random file-object-related BSODs
* removed GetObjectName - unsafe, not used
* added Terminate Process Tree

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1147 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-26 00:08:16 +00:00
wj32 8550828731 fixed version numbers, etc. 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1134 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-24 00:51:41 +00:00
wj32 20f2741361 * #2779558 - "TreeViewAdv font cannot be initialized" 
* fixed KProcessHacker BSOD on some Vista systems
* added -nokph command line switch to disable KProcessHacker

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1133 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-23 23:41:35 +00:00
wj32 b70370429e * fixed version numbers 
* fixed protect/inherit confusion

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1130 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-23 04:42:44 +00:00
wj32 c3f11637c4 uploading free build KPH 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1129 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-23 04:01:52 +00:00
wj32 557503df5a * added some more undocumented defs 
* fixed error detection with Native API calls - ThrowLastError() would call Marshal.GetLastWin32Error() which doesn't even apply to Native API calls and would return without throwing an exception, causing random crashes!

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1119 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-22 09:38:30 +00:00
wj32 aec333c248 deleted test code from KPH 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1118 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-22 00:12:28 +00:00
wj32 4dba651028 added ExpGetProcessInformation (not used yet) 
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1116 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-21 09:01:12 +00:00
wj32 86c690f825 * fixed typo in version.c 
* uploading free build KPH

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1108 21ef857c-d57f-4fe0-8362-d861dc6d29cd
 2009-04-20 04:38:56 +00:00