Welcome to PythonForWindows’s documentation!

Contents:

• 1. The windows module
  • 1.1. The system object
• 2. The windows objects
  • 2.1. Processes and Threads
  • 2.2. PEB Exploration
  • 2.3. PEFile - Parsing loaded PE
  • 2.4. Exception and Context related structures
  • 2.5. Registry
  • 2.6. Network
  • 2.7. Service
  • 2.8. Volume – The logical drives
  • 2.9. WMI – Make request to WMI
  • 2.10. Handle – Processes handles
• 3. windows.native_exec – Native Code Execution
  • 3.1. windows.native_exec.cpuid – Interface to native CPUID
  • 3.2. windows.native_exec.simple_x86 – X86 Assembler
  • 3.3. windows.native_exec.simple_x64 – X64 Assembler
  • 3.4. windows.native_exec.nativeutils – Native utility functions
• 4. windows.winproxy – Windows API
  • 4.1. Example: VirtualAlloc
  • 4.2. Functions in windows.winproxy
• 5. windows.utils – Windows Utilities
  • 5.1. Context Managers
  • 5.2. Helper functions
• 6. windows.wintrust – Checking signature
  • 6.1. API
• 7. windows.debug – Debugging
  • 7.1. Debugger
  • 7.2. LocalDebugger
  • 7.3. Breakpoint
• 8. windows.com - Component Object Model
  • 8.1. Using a COM interface
  • 8.2. Implementing a COM interface
• 9. IAT hooking
  • 9.1. Putting an IAT hook
  • 9.2. Hook protocol
  • 9.3. windows.hooks
• 10. Early Work In Progress
• 11. Internals
  • 11.1. remotectypes.py
  • 11.2. syswow64.py – Crossing the heaven gate
• 12. Samples of code
  • 12.1. windows.current_process
  • 12.2. Remote process : WinProcess
  • 12.3. PEB exploration
  • 12.4. windows.system
  • 12.5. IAT hooking
  • 12.6. Network - socket exploration
  • 12.7. Registry
  • 12.8. windows.wintrust
  • 12.9. VectoredException()
  • 12.10. Debugging

Indices and tables

• Module Index
• Search Page
• Index