Welcome to PythonForWindows’s documentation!

Description

PythonForWindows is a base of code aimed to make interaction with Windows (on X86/X64) easier (for both 32 and 64 bits Python). Its goal is to offer abstractions around some of the OS features in a (I hope) pythonic way. It also tries to make the barrier between python and native execution thinner in both ways. There is no external dependencies but it relies heavily on the ctypes module.

Some of this code is clean (IMHO) and some parts are just a wreck that works for now. Let’s say that the codebase evolves with my needs and my curiosity.

If you have any issue, question, suggestion do not hesitate to contact me. I am always glad to have feedbacks from people using this project.

Examples are available on the github page and in the Samples of code.

Documentation

• 1. The windows module
  • 1.1. The system object
• 2. The windows objects
  • 2.1. Processes and Threads
  • 2.2. PEB Exploration
  • 2.3. PEFile - Parsing loaded PE
  • 2.4. Exception and Context related structures
  • 2.5. Registry
  • 2.6. Network
  • 2.7. Service
  • 2.8. Volume – The logical drives
  • 2.9. WMI – Make request to WMI
  • 2.10. Handle – Processes handles
• 3. windows.native_exec – Native Code Execution
  • 3.1. windows.native_exec.cpuid – Interface to native CPUID
  • 3.2. windows.native_exec.simple_x86 – X86 Assembler
  • 3.3. windows.native_exec.simple_x64 – X64 Assembler
  • 3.4. windows.native_exec.nativeutils – Native utility functions
• 4. windows.winproxy – Windows API
  • 4.1. Example: VirtualAlloc
  • 4.2. Helper functions
  • 4.3. Kernel32Error
  • 4.4. Functions in windows.winproxy
• 5. windows.pipe – Inter-Process Communication
  • 5.1. Helper functions
  • 5.2. PipeConnection
• 6. windows.utils – Windows Utilities
  • 6.1. Context Managers
  • 6.2. Helper functions
• 7. windows.wintrust – Checking signature
  • 7.1. API
• 8. windows.debug – Debugging
  • 8.1. Debugger
  • 8.2. LocalDebugger
  • 8.3. Breakpoint
• 9. windows.com - Component Object Model
  • 9.1. Using a COM interface
  • 9.2. Implementing a COM interface
  • 9.3. API
• 10. windows.crypto – CryptoAPI
  • 10.1. Encryption
  • 10.2. Certificate
  • 10.3. Generating componants
• 11. windows.alpc – Advanced Local Procedure Call
  • 11.1. ALPC Message
  • 11.2. ALPC client
  • 11.3. ALPC Server
• 12. windows.rpc – ALPC-based Windows RPC
  • 12.1. RPCClient
  • 12.2. Epmapper
  • 12.3. Ndr
• 13. windows.generated_def – generated Windows defines and structures
  • 13.1. Windef
  • 13.2. Ntstatus
  • 13.3. Winstructs
  • 13.4. WinEnums
  • 13.5. Example
• 14. IAT hooking
  • 14.1. Putting an IAT hook
  • 14.2. Hook protocol
  • 14.3. windows.hooks
• 15. Early Work In Progress
• 16. Internals
  • 16.1. remotectypes.py
  • 16.2. syswow64.py – Crossing the heaven gate
• 17. Samples of code
  • 17.1. Processes
  • 17.2. windows.system
  • 17.3. Network - socket exploration
  • 17.4. Registry
  • 17.5. windows.wintrust
  • 17.6. VectoredException()
  • 17.7. Debugging
  • 17.8. WMI requests
  • 17.9. windows.com
  • 17.10. windows.crypto
  • 17.11. windows.alpc
  • 17.12. windows.rpc
  • 17.13. windows.pipe

Indices and tables

• Module Index
• Search Page
• Index