 hakril
|
8eb3384fcf
|
Change test exe to msiexec.exe + pop_proc64 force machine AMD64 with PROC_THREAD_ATTRIBUTE_MACHINE_TYPE
|
2025-02-14 18:52:22 +01:00 |
|
|
hakril
|
646e55c740
|
fix typo
|
2025-02-02 19:18:43 +01:00 |
|
|
hakril
|
00a2f1a7d6
|
add utils.image_file_machine_to_processor_architecture()
|
2025-02-02 19:18:43 +01:00 |
|
|
hakril
|
314cd2b862
|
More arm exploration of api responses
|
2025-02-02 19:16:24 +01:00 |
|
|
hakril
|
234844cf12
|
Remove breakpoint
|
2025-02-02 19:15:21 +01:00 |
|
|
hakril
|
1297996725
|
New implem of is_wow_64(handle)
|
2025-02-02 19:15:21 +01:00 |
|
|
hakril
|
f668288dfc
|
Fix bad escape in some docstrings
|
2025-02-01 22:44:53 +01:00 |
|
|
hakril
|
5ae315b317
|
winutils fonction use Wide APIs
|
2024-06-05 22:46:51 +02:00 |
|
|
hakril
|
33766c2ffd
|
Working on WinAPI Wide-transition
|
2024-06-05 22:43:30 +02:00 |
|
|
clement rouault
|
85a41fbca0
|
Add POC of winutils.lookup_name()
|
2024-05-20 11:20:14 +02:00 |
|
|
clement rouault
|
350a11515f
|
Added winutils datetime_from_systemtime()
|
2022-02-03 15:16:46 +01:00 |
|
|
Mastho
|
d4fd2ffdbc
|
Fix winutils check_debug API (#25)
Now using the windows.system.registry object
|
2021-07-22 19:36:31 +02:00 |
|
|
clement rouault
|
8b90c96c1a
|
utils.create_process now use CreateProcessW for simpler py3 usage + fix code in WinProcess.read_[w]string + associated tests
|
2021-07-13 13:22:50 +02:00 |
|
|
clement rouault
|
d05c067f65
|
Added compress_buffer utils + custom compression type to decompress_buffer
|
2021-05-24 15:14:14 +02:00 |
|
|
hakril
|
3151155670
|
Added a fonction to translate comdate format to datetime + fix DisableWow64FsRedirection for 32b system
|
2020-05-12 23:27:50 +02:00 |
|
|
hakril
|
466d94c03c
|
Fixed broken basestring for py3 compatibility (see issue #15)
|
2020-05-02 23:12:25 +02:00 |
|
|
hakril
|
7921e74647
|
Fixed a GC issue with system.modules + added deprecation warning to utils.get_kernel_modules()
|
2020-03-10 20:50:04 +01:00 |
|
|
hakril
|
4d3b3e18ad
|
Lot of small py3 compat fix
|
2020-02-13 22:23:20 +01:00 |
|
|
hakril
|
2e1043ead4
|
Added some code to play with extended attributes
|
2020-01-26 16:02:38 +01:00 |
|
|
hakril
|
b160935747
|
Added current etw code (event_trace)
|
2019-05-31 09:06:09 +02:00 |
|
|
hakril
|
4f62434dfb
|
Moved lookup_sid to windows.utils + add Token to window.security + update doc about official Token path
|
2018-12-21 18:50:22 +01:00 |
|
|
hakril
|
fb567c6a76
|
Added some samples output + document change Kernel32Error -> WinproxyError + fix sample/readme/doc related
|
2018-12-21 18:13:28 +01:00 |
|
|
hakril
|
24c5083633
|
POC of new Improved buffer utilities + sprint use dunder method __sprint__ if available in objects
|
2018-11-24 22:59:01 +01:00 |
|
|
hakril
|
e46dc48c37
|
Addapt codebase and tests to winproxy refactoring (replace Kernel32Error to WinproxyError)
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
0125f78c67
|
Quick fix for query_volume_information
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
1c21b77292
|
Add sign/verify methods to windows.crypto + POC/Play with improved ctypes buffer/array
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
34c2d94bc2
|
Some fixes in code/samples/test
|
2018-03-27 20:37:30 +02:00 |
|
|
hakril
|
8840b9fdb9
|
updated doc
|
2018-03-07 10:24:46 +01:00 |
|
|
hakril
|
a057f8c130
|
class CertificateContext(PCERT_CONTEXT) replaced by Certificate(CERT_CONTEXT) + multi-received encrypt/decrypt test
|
2018-03-04 18:28:20 +01:00 |
|
|
hakril
|
262b80c8c3
|
utils.get_(long|short)_path now handle unicode path using W func
|
2018-03-03 16:51:51 +01:00 |
|
|
hakril
|
4251b18041
|
Fix ctypes generation + COM interface dependance check + add IPersistFile, IShellLink, strucs/defs
|
2018-01-25 16:51:04 +01:00 |
|
|
hakril
|
23837a0713
|
Improving volume objects + adding CurrentProcess.peb.apisetmap with ApiSetMap parsing capabilities
|
2017-12-04 10:12:41 +01:00 |
|
|
hakril
|
f03bb89ae6
|
Working on time translation (filetime - unix - datetime) and windows volume objects
|
2017-11-28 10:50:02 +01:00 |
|
|
hakril
|
22224b52e2
|
Added utils.query_file_informations wrapper arround new winproxy.NtQueryInformationFile
|
2017-11-27 10:13:13 +01:00 |
|
|
hakril
|
d9db5ba428
|
utils.create_file_from_handle now handles binary opening mode
|
2017-11-15 09:00:38 +01:00 |
|
|
hakril
|
2094ab4ad4
|
Fix some docstring + re-add windows.test.pop_proc_[32|64] + fix all samples + few doc adapt
|
2017-10-15 00:13:07 +02:00 |
|
|
hakril
|
930c992be3
|
Working on improving crypto stuff
|
2017-10-09 09:11:48 +02:00 |
|
|
Clement Rouault
|
1941adc93f
|
Working on RtlGetUnloadEventTraceEx - adding function and struct + fix remotectypes char-array in struct
|
2017-08-17 18:51:07 +02:00 |
|
|
Clement Rouault
|
c75dda60b5
|
Fixed get_kernel_modules for syswow64 process
|
2017-08-17 13:51:36 +02:00 |
|
|
Clement Rouault
|
f43749aa07
|
[WIP] new hook method + winfunc APIs in winproxy
|
2017-08-04 17:19:27 +02:00 |
|
|
Clement Rouault
|
bc3c033e84
|
Added some definitions for SID/Privilege/others
|
2017-05-19 15:37:26 +02:00 |
|
|
Clement Rouault
|
5431b57560
|
fix ImprovedVariant.asbool + com.create_instance accept a context parameter + fix RemoteWCharP.value logic + winutils.decompress_buffer
|
2017-04-12 17:20:36 +02:00 |
|
|
hakril
|
e17400ed63
|
Debugger.detach remove self.target + better handling/clean of Thread/Process handles
|
2017-04-12 17:19:00 +02:00 |
|
|
Clement Rouault
|
2767a08624
|
Fix bug in Process.name + create_process show_windows=True by default
|
2016-07-29 17:32:14 +02:00 |
|
|
Clement Rouault
|
fb9cd75f40
|
Add a sample for the debugger API
|
2016-07-08 11:37:49 +02:00 |
|
|
Clement Rouault
|
e1f7f1e500
|
execute_python doest not reinject the shellcode everytime + test hook 64b
|
2016-06-08 11:01:19 +02:00 |
|
|
Clement Rouault
|
5c8125a9ff
|
Add get_short_path / get_long_path to windows.utils
|
2016-05-03 11:23:38 +02:00 |
|
|
Clement Rouault
|
3243f6e8fc
|
more doc
|
2016-04-27 16:36:17 +02:00 |
|
|
Clement Rouault
|
a988ad03e3
|
Add struct + thread.teb_base
|
2016-04-25 17:48:49 +02:00 |
|
|
Clement Rouault
|
57634f076c
|
Add process.time_info
|
2016-04-21 10:58:35 +02:00 |
|