yihleego / pywinhandle

Pywinhandle is a utility that displays information about open handles for any process in the system. You can use it to see the programs that have a file open, or to see the object types and names of all the handles of a program, or to close the any handles of a program.

Pywinhandle

Introduction

It is a utility that displays information about open handles for any process in the system. You can use it to see the programs that have a file open, or to see the object types and names of all the handles of a program, or to close any handles of a program.

Usage

Find and close handles

handles = find_handles(process_ids=[0x6600], handle_names=['HandleName'])
close_handles(handles)

[
    {
        'process_id': 0x6600,
        'handle': 0x9900,
        'name': 'HandleName',
        'type': 'HandleType'
    }
]

Links

Win32 API

• NtQuerySystemInformation function
• NtQueryObject function
• ZwDuplicateObject function

Process Utilities

• Handle
• Process Explorer

pywinhandle's Issues

Crash on `system_info.HandleCount`

  File "M:\........\src\pywinhandle.py", line 210, in find_handles
    for i in range(system_info.HandleCount):
AttributeError: 'NoneType' object has no attribute 'HandleCount'

[Feature request] Return the success / failure of the `close_handles()` function.

This could return success/failure and optionally return the value of GetLastError - GetLastError.

Or, what might be nicer, would be to wrap the windows error codes in a python object/string/exception and surface that. So clients won't need to look up what error code int values mean. (https://learn.microsoft.com/en-us/windows/win32/debug/system-error-codes)

about use closehandle

hello~when I use pywinhandle I can find handle about the name, than I close it,but I need to stop my all code ,its can be close,How can I solve this problem?