Click here to Skip to main content
15,914,820 members
Home / Discussions / System Admin
   

System Admin

 
GeneralRe: OT Pin
Michael Dunn20-Oct-03 19:41
sitebuilderMichael Dunn20-Oct-03 19:41 
GeneralRe: OT Pin
Atlantys20-Oct-03 20:44
Atlantys20-Oct-03 20:44 
GeneralRe: OT Pin
Michael Dunn21-Oct-03 4:45
sitebuilderMichael Dunn21-Oct-03 4:45 
GeneralReturning values in Console Pin
Leo Smith9-Oct-03 5:21
Leo Smith9-Oct-03 5:21 
GeneralRe: Returning values in Console Pin
Tim Deveaux9-Oct-03 6:36
Tim Deveaux9-Oct-03 6:36 
GeneralRe: Returning values in Console Pin
Blake Coverett9-Oct-03 7:27
Blake Coverett9-Oct-03 7:27 
GeneralRe: Returning values in Console Pin
Tim Deveaux9-Oct-03 9:08
Tim Deveaux9-Oct-03 9:08 
GeneralRe: Returning values in Console Pin
Blake Coverett9-Oct-03 11:44
Blake Coverett9-Oct-03 11:44 
*grins broadly* Nah, it isn't nearly that bad...

You can do it all from user mode if you are careful:
#pragma comment(lib, "ntdll.lib")
typedef struct _PROCESS_PARAMETERS
{
    ULONG          AllocationSize;
    ULONG          ActualSize;
    ULONG          Flags;
    ULONG          Unknown1;
    UNICODE_STRING Unknown2;
    HANDLE         InputHandle;
    HANDLE         OutputHandle;
    HANDLE         ErrorHandle;
    UNICODE_STRING CurrentDirectory;
    HANDLE         CurrentDirectoryHandle;
    UNICODE_STRING SearchPaths;
    UNICODE_STRING ApplicationName;
    UNICODE_STRING CommandLine;
    PVOID          EnvironmentBlock;
    ULONG          Unknown[9];
    UNICODE_STRING Unknown3;
    UNICODE_STRING Unknown4;
    UNICODE_STRING Unknown5;
    UNICODE_STRING Unknown6;
} PROCESS_PARAMETERS, *PPROCESS_PARAMETERS;

typedef struct _PEB
{
    ULONG               AllocationSize;
    ULONG               Unknown1;
    HINSTANCE           ProcessHinstance;
    PVOID               ListDlls;
    PPROCESS_PARAMETERS ProcessParameters;
    ULONG               Unknown2;
    HANDLE              Heap;
} PEB, *PPEB;

typedef struct _PROCESS_BASIC_INFORMATION {
    DWORD		ExitStatus;
    PPEB 		PebBaseAddress;
    ULONG_PTR	AffinityMask;
    LONG		BasePriority;
    ULONG_PTR	UniqueProcessId;
    ULONG_PTR	InheritedFromUniqueProcessId;
} PROCESS_BASIC_INFORMATION;

extern "C" __declspec(dllimport) DWORD __stdcall
NtQuerySystemInformation(
    SYSTEMINFOCLASS SystemInformationClass,
    PVOID SystemInformation,
    ULONG SystemInformationLength,
    PULONG ReturnLength
    );

extern "C" __declspec(dllimport) DWORD __stdcall
NtQueryInformationProcess(
    HANDLE ProcessHandle,
    PROCESSINFOCLASS ProcessInformationClass,
    PVOID ProcessInformation,
    ULONG ProcessInformationLength,
    PULONG ReturnLength
    );


Combine the above with your typical CreateRemoteThread/etc injection hacks and bash on your parent's environment happily. Not exactly documented or anything, but hey.

(The hacked together definitions above are leftovers from a round of frustration some years ago when I concluded the only documented way to get your parent's process ID was via the abomination that is WMI. That InheritedFromUniqueProcessId member above is the parent process ID.)

--
-Blake (com/bcdev/blake)
Generalthe force is strong on this one... Pin
Tim Deveaux10-Oct-03 2:28
Tim Deveaux10-Oct-03 2:28 
GeneralRe: Returning values in Console Pin
Mike Dimmick10-Oct-03 2:45
Mike Dimmick10-Oct-03 2:45 
GeneralExchange Server 2K Pin
Anand Paranjpe9-Oct-03 1:32
Anand Paranjpe9-Oct-03 1:32 
GeneralRe: Exchange Server 2K Pin
Mike Dimmick10-Oct-03 0:41
Mike Dimmick10-Oct-03 0:41 
GeneralRe: Exchange Server 2K Pin
Anand Paranjpe12-Oct-03 23:16
Anand Paranjpe12-Oct-03 23:16 
QuestionHow to draw object like drawing mouse cursor? Pin
jajamal8-Oct-03 4:43
jajamal8-Oct-03 4:43 
AnswerRe: How to draw object like drawing mouse cursor? Pin
Mike Dimmick8-Oct-03 4:56
Mike Dimmick8-Oct-03 4:56 
GeneralRe: How to draw object like drawing mouse cursor? Pin
jajamal8-Oct-03 16:17
jajamal8-Oct-03 16:17 
QuestionDeleting Event Log files? Pin
ravfingcoder6-Oct-03 21:37
ravfingcoder6-Oct-03 21:37 
GeneralNetwork Drive Mapping in Windows XP. Pin
Moisés Lima Dutra6-Oct-03 1:56
Moisés Lima Dutra6-Oct-03 1:56 
Generalcmd.exe / script language Pin
Jörgen Sigvardsson3-Oct-03 0:20
Jörgen Sigvardsson3-Oct-03 0:20 
GeneralRe: cmd.exe / script language Pin
Mike Dimmick3-Oct-03 6:38
Mike Dimmick3-Oct-03 6:38 
GeneralRe: cmd.exe / script language Pin
Jörgen Sigvardsson3-Oct-03 10:43
Jörgen Sigvardsson3-Oct-03 10:43 
GeneralRe: cmd.exe / script language Pin
Mike Dimmick3-Oct-03 22:56
Mike Dimmick3-Oct-03 22:56 
GeneralRe: cmd.exe / script language Pin
Blake Coverett8-Oct-03 21:12
Blake Coverett8-Oct-03 21:12 
GeneralRe: cmd.exe / script language Pin
Mike Dimmick9-Oct-03 0:12
Mike Dimmick9-Oct-03 0:12 
GeneralRe: cmd.exe / script language Pin
Blake Coverett9-Oct-03 7:16
Blake Coverett9-Oct-03 7:16 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.