| View previous topic :: View next topic |
| Author |
Message |
oib111
I post too much
 Reputation: 0
Joined: 02 Apr 2007
Posts: 2947
Location: you wanna know why?
|
 Posted: Mon Sep 08, 2008 7:06 pm Post subject: |
 |
|
Just wondering how can I access the EPROCESS structure associated with my process?
_________________
| 8D wrote: |
cigs dont make people high, which weed does, which causes them to do bad stuff. like killing |
|
|
| Back to top |
|
 |
Flyte
Peanuts!!!!
 Reputation: 6
Joined: 19 Apr 2006
Posts: 1887
Location: Canada
|
| Posted: Mon Sep 08, 2008 7:32 pm Post subject: |
|
|
| oib111 wrote: | | Just wondering how can I access the EPROCESS structure associated with my process? |
PsGetCurrentProcess();
|
|
| Back to top |
|
|
oib111
I post too much
Reputation: 0
Joined: 02 Apr 2007
Posts: 2947
Location: you wanna know why?
|
| Posted: Mon Sep 08, 2008 8:20 pm Post subject: |
|
|
Do I have to call it through a kernelmode driver or can I use it in a usermode application?
_________________
| 8D wrote: |
cigs dont make people high, which weed does, which causes them to do bad stuff. like killing |
|
|
| Back to top |
|
|
sponge
I'm a spammer
 Reputation: 1
Joined: 07 Nov 2006
Posts: 6009
|
| Posted: Mon Sep 08, 2008 8:30 pm Post subject: |
|
|
| oib111 wrote: | | Do I have to call it through a kernelmode driver or can I use it in a usermode application? |
/facepalm. what do you think?
_________________
|
|
| Back to top |
|
|
oib111
I post too much
Reputation: 0
Joined: 02 Apr 2007
Posts: 2947
Location: you wanna know why?
|
| Posted: Mon Sep 08, 2008 8:32 pm Post subject: |
|
|
Lol kernelmode driver 
_________________
| 8D wrote: |
cigs dont make people high, which weed does, which causes them to do bad stuff. like killing |
|
|
| Back to top |
|
|
sphere90
Grandmaster Cheater
 Reputation: 0
Joined: 24 Jun 2006
Posts: 912
|
| Posted: Tue Sep 09, 2008 5:01 am Post subject: |
|
|
| rapion124 wrote: | @Flyte:
You can't write to kernelmode from usermode unless you have a driver that modifies the GDT. |
Yes you can. Ever heard of ZwOpenSection and ZwMapViewOfSection?
| lurc wrote: | | Or learn to code driver's better? Catch exceptions using __try/__except and you won't have that problem. |
__try/__except doesn't protect against all exceptions.
|
|
| Back to top |
|
|
rapion124
Grandmaster Cheater Supreme
![]() Reputation: 0
Joined: 25 Mar 2007
Posts: 1095
|
| Posted: Tue Sep 09, 2008 12:35 pm Post subject: |
|
|
| __try/__except protect against exceptions like accessing [0x00000000], but not against your driver screwing up an EPROCESS or detouring a function with an incorrect prototype.
|
|
| Back to top |
|
|
nog_lorp
Grandmaster Cheater
 Reputation: 0
Joined: 26 Feb 2006
Posts: 743
|
| Posted: Tue Sep 09, 2008 1:59 pm Post subject: |
|
|
It will protect against all exceptions generated by your thread. If you screw something up that is accessed by other threads, its on them to handle the exceptions.
Protecting against exceptions isn't the same as handling them well, if you screwed up something badly it will by difficult to impossible to handle properly.
_________________
Mutilated lips give a kiss on the wrist of the worm-like tips of tentacles expanding in my mind
I'm fine accepting only fresh brine you can get another drop of this yeah you wish |
|
| Back to top |
|
|
oib111
I post too much
Reputation: 0
Joined: 02 Apr 2007
Posts: 2947
Location: you wanna know why?
|
| Posted: Wed Sep 10, 2008 9:55 pm Post subject: |
|
|
Hey does PsGetCurrentProcess apply to the process that loaded the driver?
_________________
| 8D wrote: |
cigs dont make people high, which weed does, which causes them to do bad stuff. like killing |
|
|
| Back to top |
|
|
Flyte
Peanuts!!!!
Reputation: 6
Joined: 19 Apr 2006
Posts: 1887
Location: Canada
|
| Posted: Thu Sep 11, 2008 1:32 pm Post subject: |
|
|
| oib111 wrote: | | Hey does PsGetCurrentProcess apply to the process that loaded the driver? |
At applies to whichever process context it's running in at the time.
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
