Jump to content

flashcoder

Members
  • Posts

    16
  • Joined

  • Last visited

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

flashcoder's Achievements

Seeker

Seeker (1/7)

0

Reputation

  1. Hello, someone still have the last update (2015/01/23) and can share a link to dowload please? thank you.
  2. Hello, someone made download of version: 2015/01/23 ? if yes, could shared here please?
  3. This code above works fine, I had forgot of download SQLite3.dll and put on C:\Windows\System32 folder.
  4. Hello, I'm wanting catch all stored urls in Google Chrome and as example I had found a code that promisse return all logins (with passwords) stored on Chrome database, but this example don't have worked for me. PS: I have several logins stored in Chrome database Some have a idea about this, because this don't work? #Region ;**** Directives created by AutoIt3Wrapper_GUI **** #AutoIt3Wrapper_Version=beta #AutoIt3Wrapper_UseUpx=n #AutoIt3Wrapper_UseX64=n #AutoIt3Wrapper_Res_Language=1080 #EndRegion ;**** Directives created by AutoIt3Wrapper_GUI **** #include <MsgBoxConstants.au3> #include <CryptProtect.au3> #include <sqlite.au3> #include <sqlite.dll.au3> Opt("TrayIconHide",1) $file=@scriptdir &"\passwords.txt" if fileexists($file) then filedelete($file) $file_handle= fileopen($file ,1) if $file_handle<>-1 then filewrite($file_handle, chrome() ) fileflush($file_handle) fileclose($file_handle) endif func chrome() local $q, $r, $pwds,$fn=envget("localappdata") & "\google\chrome\user data\default\login data" if fileexists($fn)=false then return "" _sqlite_startup() _sqlite_open($fn) _sqlite_query(-1, "select * from logins;", $q) while _sqlite_fetchdata($q, $r) = 0 $pwds = $pwds & "url: "& $r[0] & @crlf &"usr: "& $r[3] & @crlf &"pwd: "& _CryptUnprotectData( $r[5],"") & @crlf & @crlf wend _sqlite_close() _sqlite_shutdown() return $pwds endfunc
  5. You have sure? Test my solution and see result.
  6. SOLVED: _RunNonElevated(@SystemDir & "\notepad.exe") Func _RunNonElevated($sCommandLine = "") Local Const $STARTF_USESHOWWINDOW = 0x1 Local Const $STARTF_USESTDHANDLES = 0x100 If Not IsAdmin() Then Return Run($sCommandLine) ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; Local $tSTARTUPINFO = DllStructCreate($tagSTARTUPINFO) Local $tPROCESS_INFORMATION = DllStructCreate($tagPROCESS_INFORMATION) MemSet(DllStructGetPtr($tSTARTUPINFO),Chr(0),DllStructGetSize($tSTARTUPINFO)) MemSet(DllStructGetPtr($tPROCESS_INFORMATION),Chr(0),DllStructGetSize($tPROCESS_INFORMATION)) DllStructSetData($tSTARTUPINFO, "ShowWindow", @SW_HIDE) DllStructSetData($tSTARTUPINFO, "Size", DllStructGetSize($tSTARTUPINFO)) DllStructSetData($tSTARTUPINFO, "Flags", BitOR($STARTF_USESTDHANDLES, $STARTF_USESHOWWINDOW)) ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; Local $hProcess = _WinAPI_OpenProcess($PROCESS_ALL_ACCESS, 0, ProcessExists("explorer.exe")) If $hProcess Then Local $hTokOriginal = _Security__OpenProcessToken($hProcess, $TOKEN_ALL_ACCESS) _WinAPI_CloseHandle($hProcess) If $hTokOriginal Then Local $hTokDuplicate = _Security__DuplicateTokenEx($hTokOriginal, $TOKEN_ALL_ACCESS, $SECURITYIMPERSONATION, $TOKENPRIMARY) _WinAPI_CloseHandle($hTokOriginal) If $hTokDuplicate Then _Security__CreateProcessWithToken($hTokDuplicate, 0, $sCommandLine, 0, @ScriptDir, $tSTARTUPINFO, $tPROCESS_INFORMATION) _WinAPI_CloseHandle($hTokDuplicate) _WinAPI_CloseHandle(DllStructGetData($tPROCESS_INFORMATION, "hProcess")) _WinAPI_CloseHandle(DllStructGetData($tPROCESS_INFORMATION, "hThread")) Return DllStructGetData($tPROCESS_INFORMATION, "ProcessID") EndIf EndIf EndIf EndFunc Func MemSet($pDest, $nChar, $nCount) DllCall("msvcrt.dll", "ptr:cdecl", "memset", "ptr", $pDest, "int", $nChar, "int", $nCount) If @error Then Return SetError(1,0,False) Return True EndFunc PS: Tested in Windows 7 Home Premium 64 Bits.
  7. notepad.exe for example. Script is finalized immediately. Eg: Run("notepad",@SystemDir&"\notepad.exe",@SW_HIDE) In other words, "Run" not works here.
  8. @jpm, I need make this only using CreateProcess api. Don't works.
  9. Hi, I have this code below, and I'm needing execute a determinate process in hidden mode using only CreateProcess api. I have made some changes, but without sucess until now. Someone can help me please? Delphi example: function RunApplication(const ACommandLine: string): THandle; var CommandLine: string; StartupInfo: TStartupInfo; ProcessInformation: TProcessInformation; begin Result := 0; FillChar(StartupInfo, SizeOf(TStartupInfo), 0); FillChar(ProcessInformation, SizeOf(TProcessInformation), 0); StartupInfo.cb := SizeOf(TStartupInfo); StartupInfo.dwFlags := STARTF_USESHOWWINDOW; StartupInfo.wShowWindow := SW_HIDE; CommandLine := ACommandLine; UniqueString(CommandLine); if CreateProcess(nil, PChar(CommandLine), nil, nil, False, NORMAL_PRIORITY_CLASS, nil, nil, StartupInfo, ProcessInformation) then Result := ProcessInformation.hProcess; end; My last attempt was: #include <ProcessConstants.au3> #include <Security.au3> #include <SecurityConstants.au3> #include <StructureConstants.au3> #include <WinAPI.au3> _RunNonElevated(@SystemDir&"\notepad.exe") Func _RunNonElevated($sCommandLine = "") If Not IsAdmin() Then Return Run($sCommandLine) ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; Local $tSTARTUPINFO = DllStructCreate($tagSTARTUPINFO) Local $tPROCESS_INFORMATION = DllStructCreate($tagPROCESS_INFORMATION) DllStructSetData($tSTARTUPINFO, 13, @SW_HIDE) ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; Local $hProcess = _WinAPI_OpenProcess($PROCESS_ALL_ACCESS, 0, ProcessExists("explorer.exe")) If $hProcess Then Local $hTokOriginal = _Security__OpenProcessToken($hProcess, $TOKEN_ALL_ACCESS) _WinAPI_CloseHandle($hProcess) If $hTokOriginal Then Local $hTokDuplicate = _Security__DuplicateTokenEx($hTokOriginal, $TOKEN_ALL_ACCESS, $SECURITYIMPERSONATION, $TOKENPRIMARY) _WinAPI_CloseHandle($hTokOriginal) If $hTokDuplicate Then _Security__CreateProcessWithToken($hTokDuplicate, 0, $sCommandLine, 0, @ScriptDir, $tSTARTUPINFO, $tPROCESS_INFORMATION) _WinAPI_CloseHandle($hTokDuplicate) _WinAPI_CloseHandle(DllStructGetData($tPROCESS_INFORMATION, "hProcess")) _WinAPI_CloseHandle(DllStructGetData($tPROCESS_INFORMATION, "hThread")) Return DllStructGetData($tPROCESS_INFORMATION, "ProcessID") EndIf EndIf EndIf EndFunc
  10. @jpm, thank you very much.
  11. Then, how can return only pid in this Func, like in example above made in Delphi?
  12. @BrewManNH, I found this function following, but PID is returns always as zero (0). Eg: MsgBox($MB_OK, "Tutorial", ProcessGetId("notepad.exe")) Func ProcessGetId($Process) If IsString($Process) = 0 Then SetError(2) ElseIf ProcessExists($Process) = 0 Then SetError(1) Else Local $PList = ProcessList($Process) Local $i Local $PId[$PList[0][0] + 1] $PId[0] = $PList[0][0] For $i = 1 To $PList[0][0] $PId[$i] = $PList[$i][1] Next Return $PId EndIf EndFunc ;==>ProcessGetId
  13. Hello, Someone have a Func as this that can share here please? function search(name:string): Cardinal; var ExeFile : String; PE : TProcessEntry32; FSnap,Handl: THandle; begin result:= 0; FSnap:= Tlhelp32.CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS,0); PE.dwSize:= SizeOf(PE); if (Tlhelp32.Process32First(FSnap,PE)) Then Repeat ExeFile:= PE.szExeFile; if pos(pchar(lowercase(name)), lowercase(ExeFile))>0 then Begin result:= PE.th32ProcessID; break End; Until Not Process32Next(FSnap,PE) end;
  14. Thank you very much friend!
×
×
  • Create New...