510 Commits

Author SHA1 Message Date
Clement Rouault ed42580b4e Fix some x64 encoding of [NEW_REG] | pop/push [RAX] doest not contains a useless prefix anymore 2016-06-27 14:51:47 +02:00
Clement Rouault 86fe9c9f82 Update generation for ntstatus and add a parallele define module to ApiProxy 2016-06-24 16:55:25 +02:00
Clement Rouault 75c48103c4 Added SetConsoleCtrlHandler to winproxy 2016-06-17 11:14:46 +02:00
Clement Rouault 4a0669ad41 Add COMImplementation 2016-06-17 10:18:12 +02:00
Clement Rouault 4436be72c0 first working version of new_generate 2016-06-16 13:31:16 +02:00
Clement Rouault 2289895423 Add test + fix Imm32 stuff in x64 2016-06-13 18:19:38 +02:00
Clement Rouault 0f5fce424b Fix test_hook to disable the hook after test 2016-06-13 18:18:59 +02:00
Clement Rouault 0b32302591 Remove generate_callback_stub (only IATHook are impacted) 2016-06-09 18:51:48 +02:00
Clement Rouault e1f7f1e500 execute_python doest not reinject the shellcode everytime + test hook 64b 2016-06-08 11:01:19 +02:00
Clement Rouault f23357c13e Testing hook without generated stub + new hook test in new file 2016-06-07 19:59:00 +02:00
Clement Rouault bc9d3b61ef Draft version of system handles 2016-06-07 17:13:44 +02:00
Clement Rouault 971610bbe3 [WIP] system.handles 2016-06-06 17:24:30 +02:00
Clement Rouault 3d51278039 fix UNICODE_STRING.str / test assemblers / improve com_parser for future work 2016-06-06 17:24:10 +02:00
Clement Rouault 899e6b9147 Removed a debug print 2016-05-23 09:48:00 +02:00
hakril aaa680c61c Fix CurrentProcessReadSyswow for windows10 2016-05-22 12:00:34 +02:00
Clement Rouault 976ce78455 First try to replace unexisting GetThreadId on XP 2016-05-20 18:03:36 +02:00
Clement Rouault 8bee07b8dc Add REG_QWORD handling in registry.py 2016-05-19 10:59:43 +02:00
Clement Rouault d09cb4ca51 Add winproxy.is_implemented 2016-05-18 10:54:58 +02:00
Clement Rouault dfe8217259 Fix system.version_name on windows10 2016-05-13 16:31:07 +02:00
Clement Rouault 55c4721774 Fix exception stack update in LocalDebugger 2016-05-09 18:52:55 +02:00
Clement Rouault 5c8125a9ff Add get_short_path / get_long_path to windows.utils 2016-05-03 11:23:38 +02:00
Clement Rouault 10a803e9c9 Add shr/shl + small fix simple_x64 Imm8 + execute_64bits_code_from_syswow able to return ULONG64 2016-05-02 18:21:09 +02:00
Clement Rouault d7127c108c NtStatusException is a WindowsError 2016-05-02 16:23:13 +02:00
Clement Rouault 3243f6e8fc more doc 2016-04-27 16:36:17 +02:00
hakril c2c3fe2dc2 more doc 2016-04-27 00:33:02 +02:00
Clement Rouault a988ad03e3 Add struct + thread.teb_base 2016-04-25 17:48:49 +02:00
Clement Rouault 57634f076c Add process.time_info 2016-04-21 10:58:35 +02:00
Clement Rouault 085c36c706 fix/simplify get_string in pe_parse / adapt syswow.py 2016-04-21 10:47:00 +02:00
Clement Rouault 09e9b7efbb Fix get_mapped_filename 32 -> 64 (use NtQueryVirtualMemory) 2016-04-19 11:49:33 +02:00
Clement Rouault 5b66242680 writing some doc 2016-04-18 23:09:26 +02:00
Clement Rouault cb3c0f20c0 pe_parse: fix read string PE32 in process 64b 2016-04-18 11:54:51 +02:00
Clement Rouault b621e6a09f fix queryworkingset / add test / add virtual protect context manager 2016-04-18 11:24:41 +02:00
Clement Rouault 3454801ad0 small fix in Debugger.add_bp 2016-04-11 19:15:39 +02:00
Clement Rouault e781e3493f Playing with workingset 2016-04-11 19:15:23 +02:00
Clement Rouault 85cb4eef1b add some additional info to full_signature_information 2016-04-11 10:16:06 +02:00
Clement Rouault 18bba9b24e Fix pe_parse to handle 32bits PE in 64bits process (PE32 .NET) 2016-04-08 16:11:55 +02:00
Clement Rouault ef9b2486ec fix + add some info in Section 2016-04-08 13:46:06 +02:00
Clement Rouault b698b27a6f Add process.query_working_set 2016-04-08 13:45:27 +02:00
Clement Rouault 0e9ec9ed82 add / fix in registry and registry sample 2016-04-01 17:34:56 +02:00
Clement Rouault 6c1b4cf5e6 More doc / sample 2016-03-30 18:27:40 +02:00
Clement Rouault 96c8d68297 kernobj.py -> WinObj explorer 2016-03-30 15:28:04 +02:00
hakril 53e131831d Writing / updating some doc 2016-03-29 23:41:54 +02:00
Clement Rouault 4c1192bf75 Fix crash du to bad declaration / size of CONTEXT64 2016-03-29 18:53:04 +02:00
Clement Rouault da52b1a014 More Nt def/structs/funcs 2016-03-29 17:19:17 +02:00
Clement Rouault cf8386400f Fix WinUnicodeString to use Length 2016-03-29 14:01:40 +02:00
Clement Rouault ff5ce9ae86 Add EnumType for generated enum 2016-03-25 16:59:40 +01:00
Clement Rouault 480cbcf1dc Improving com / wmi API / code 2016-03-25 15:14:53 +01:00
Clement Rouault cbd4f0b6b7 More struct/defs/funcs 2016-03-25 15:13:49 +01:00
Clement Rouault 9856a1614b Add firewall interface to system.network 2016-03-25 13:44:04 +01:00
Clement Rouault eadc0c6963 More COM interfaces/ API 2016-03-24 18:14:45 +01:00