How can I get Thread Id from its handle in NtCreateThreadEx(&ThreadHandle,...)?

Question

0.00/5 (No votes)

See more:

Hi How can I get Thread Id from its handle in NtCreateThread(&ThreadHandle) system call or NtCreateThreadEx(&ThreadHandle, ...)?

I try to load thread's information by calling NtQueryInformationThread but this system call fails with ambiguous error code. Now I need a solution to get an ID of thread by its handle in kernel driver with suppressed all restriction in accessing to this ID ,e.g. Permission access.

Thanks in advance

Posted 18-Jul-15 0:35am

hassan_sayfi69

Updated 18-Jul-15 4:07am

v2

Add a Solution

1 solution

Add a Solution

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Sergey Alexandrovich Kryukov · Answer 1 · 2015-07-18T03:02:00

Solution 1

In Windows, this is how: https://msdn.microsoft.com/en-us/library/windows/desktop/ms683233%28v=vs.85%29.aspx[^].

Note that the handles are only valid inside a single process (it can be inherited as is by child processes); and the same arithmetic value can be something different or meaningful in other processes. IDs provides unique system-wide identification of threads.

See also: https://msdn.microsoft.com/en-us/library/windows/desktop/ms686746%28v=vs.85%29.aspx[^].

—SA

Posted 18-Jul-15 3:02am

Sergey Alexandrovich Kryukov

Updated 20-Jul-15 4:15am

v3

Comments

hassan_sayfi69 18-Jul-15 10:31am

Thank you Sergey for your comment. But how can I load ''kernel32.dll" API in Kernel-Mode driver?

Sergey Alexandrovich Kryukov 18-Jul-15 12:39pm

I did not realize it would present a problem, sorry. But why can't you? Sorry, I know pretty well how kernel mode works at low level but probably not familiar well with Windows kernel-mode API.
—SA

How can I get Thread Id from its handle in NtCreateThreadEx(&ThreadHandle,...)?

1 solution

Solution 1

Add your solution here

Preview 0

How can I get Thread Id from its handle in NtCreateThreadEx(&ThreadHandle,...)?

1 solution

Solution 1

Add your solution here

Preview 0

Existing Members

...or Join us