 Clement Rouault
|
dbd98c93ed
|
fix Process.ppid implem + new version does not enum processes
|
2017-04-28 17:29:17 +02:00 |
|
|
Clement Rouault
|
f9a650fcf3
|
WinThread is not a THREADENTRY32 anymore + add Winprocess.peb.exe
|
2017-04-27 12:06:04 +02:00 |
|
|
hakril
|
be5cbe2631
|
Winprocess.peb not a fixedproperty anymore to prevent ref-cycle + add windows.crypto to setup.py
|
2017-04-24 22:43:49 +02:00 |
|
|
Clement Rouault
|
4183646b28
|
add Handle.infos + Process.open_token
|
2017-04-12 17:20:36 +02:00 |
|
|
hakril
|
03aec90d63
|
WIP: fixing handle 'leak' in dbg that require manual garbare collection for now
|
2017-04-12 17:19:01 +02:00 |
|
|
hakril
|
861884099f
|
Better handling of read_string for string at the end of readable memory
|
2017-04-12 17:19:00 +02:00 |
|
|
hakril
|
63cdb3bbeb
|
Better handling of read_wstring for wstring at the end of readable memory
|
2017-04-12 17:19:00 +02:00 |
|
|
hakril
|
e17400ed63
|
Debugger.detach remove self.target + better handling/clean of Thread/Process handles
|
2017-04-12 17:19:00 +02:00 |
|
|
Clement Rouault
|
2767a08624
|
Fix bug in Process.name + create_process show_windows=True by default
|
2016-07-29 17:32:14 +02:00 |
|
|
Clement Rouault
|
fe4d41db47
|
Add/Update some doc
|
2016-07-27 18:20:36 +02:00 |
|
|
Clement Rouault
|
f54a64670e
|
Add context_syswow/set_syswow_context + debugger able to handle BP in 64b part of syswow process
|
2016-07-20 18:21:28 +02:00 |
|
|
Clement Rouault
|
48a40fa520
|
Improve MemBP API + restore target memory on break
|
2016-07-20 13:16:06 +02:00 |
|
|
Clement Rouault
|
82621b881a
|
Add get_memory_breakpoint_at to debugger + fix token_user in process + add prot param to virtual_alloc
|
2016-07-13 16:28:31 +02:00 |
|
|
Clement Rouault
|
400b7b91b0
|
First try at all BP remove + check range on MemBP for call to .trigger() else ignore
|
2016-07-08 17:18:57 +02:00 |
|
|
Clement Rouault
|
9a980d87b3
|
First try at single_step and memory breakpoints in Debugger + test
|
2016-07-07 17:43:28 +02:00 |
|
|
Clement Rouault
|
886b445e0e
|
Token.integrity returns a Flag + fix simple_x64 on SIB use for [r13]
|
2016-07-04 18:33:35 +02:00 |
|
|
Clement Rouault
|
3069b93d21
|
Remove winproxy.OptionExport + Add some classes ton MEMORY_INFORMATION enum
|
2016-07-01 18:12:28 +02:00 |
|
|
Clement Rouault
|
3d51278039
|
fix UNICODE_STRING.str / test assemblers / improve com_parser for future work
|
2016-06-06 17:24:10 +02:00 |
|
|
Clement Rouault
|
976ce78455
|
First try to replace unexisting GetThreadId on XP
|
2016-05-20 18:03:36 +02:00 |
|
|
hakril
|
c2c3fe2dc2
|
more doc
|
2016-04-27 00:33:02 +02:00 |
|
|
Clement Rouault
|
a988ad03e3
|
Add struct + thread.teb_base
|
2016-04-25 17:48:49 +02:00 |
|
|
Clement Rouault
|
57634f076c
|
Add process.time_info
|
2016-04-21 10:58:35 +02:00 |
|
|
Clement Rouault
|
09e9b7efbb
|
Fix get_mapped_filename 32 -> 64 (use NtQueryVirtualMemory)
|
2016-04-19 11:49:33 +02:00 |
|
|
Clement Rouault
|
b621e6a09f
|
fix queryworkingset / add test / add virtual protect context manager
|
2016-04-18 11:24:41 +02:00 |
|
|
Clement Rouault
|
e781e3493f
|
Playing with workingset
|
2016-04-11 19:15:23 +02:00 |
|
|
Clement Rouault
|
b698b27a6f
|
Add process.query_working_set
|
2016-04-08 13:45:27 +02:00 |
|
|
Clement Rouault
|
6c1b4cf5e6
|
More doc / sample
|
2016-03-30 18:27:40 +02:00 |
|
|
Clement Rouault
|
da52b1a014
|
More Nt def/structs/funcs
|
2016-03-29 17:19:17 +02:00 |
|
|
Clement Rouault
|
cf8386400f
|
Fix WinUnicodeString to use Length
|
2016-03-29 14:01:40 +02:00 |
|
|
Clement Rouault
|
3cb8cc6f9e
|
Refactor: new winobject directory
|
2016-03-23 13:42:54 +01:00 |
|