Cheat Engine :: View topic - [Kernel Snippet] Process Bruteforcing [fixed]

Cheat Engine
The Official Site of Cheat Engine

FAQ

Memberlist

Usergroups

Profile

[Kernel Snippet] Process Bruteforcing [fixed]

Cheat Engine Forum Index -> General programming

View previous topic :: View next topic

Author

Message

HomerSexual
Grandmaster Cheater Supreme

Reputation: 5

Joined: 03 Feb 2007
Posts: 1657

Posted: Sun Dec 07, 2008 2:29 pm Post subject: [Kernel Snippet] Process Bruteforcing [fixed]

So far this will get all the processes ACTIVE. I fixed it so it will show only running processes.

Code:

#include <ntddk.h>
#include <ntifs.h>

LPSTR NTAPI PsGetProcessImageFileName (PEPROCESS Process);

int pid = 0;
PEPROCESS cprocess;

void DriverUnload(PDRIVER_OBJECT pDriverObject)
{
DbgPrint("Driver unloading\n");
}

void LoopProcesses()
{
pid = 0x0;
while(pid <= 0x41DC)
{
   if(PsLookupProcessByProcessId(pid, &cprocess) == STATUS_SUCCESS)
      if(!cprocess->ExitTime.LowPart)
      {
            DbgPrint("%d: Process Name: %s \n",pid, PsGetProcessImageFileName(cprocess));
      }
pid = pid+0x4;
}

}

NTSTATUS DriverEntry(PDRIVER_OBJECT DriverObject, PUNICODE_STRING RegistryPath)
{
DriverObject->DriverUnload = DriverUnload;
DbgPrint("Driver Loaded\n");
LoopProcesses();
return STATUS_SUCCESS;
}

_________________

Display posts from previous:

	Cheat Engine Forum Index -> General programming	All times are GMT - 6 Hours
Page 1 of 1

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum