Clement Rouault
|
5be7b185c2
|
Add pe sections parsing + kernel module by NtQuery by w4kfu + small fixes
|
2015-09-17 15:58:58 +02:00 |
|
Clement Rouault
|
7fe3e9e8be
|
remove a debug print
|
2015-09-17 14:29:47 +02:00 |
|
Clement Rouault
|
3c8966aa4b
|
Add some simple Cpuid wrapper in native_exec
|
2015-09-17 11:10:27 +02:00 |
|
Clement Rouault
|
8ec269bef6
|
Add Cpuid instruction + test in assembler
|
2015-09-17 11:10:01 +02:00 |
|
Clement Rouault
|
8330027b8b
|
Add struct SYSTEM_MODULE_INFORMATION
|
2015-09-16 17:49:30 +02:00 |
|
Clement Rouault
|
a758753839
|
Fix error handler of Registry functions
|
2015-09-16 17:42:05 +02:00 |
|
Clement Rouault
|
c05be85eb4
|
Add special error handling for NtQuerySystemInformation
|
2015-09-16 17:40:35 +02:00 |
|
Clement Rouault
|
09a5724ea0
|
Add NtQuerySystemInformation to k32testing
|
2015-09-16 16:56:09 +02:00 |
|
Clement Rouault
|
e02bf24e8c
|
Add def for NtQuerySystem + fix in CustomAllocator
|
2015-09-16 16:42:21 +02:00 |
|
Clement Rouault
|
9f70a58170
|
Add defintions/structs/functions for token/registry
|
2015-09-16 16:24:17 +02:00 |
|
Clement Rouault
|
4384f40bb7
|
Fix return value of JmpImm in 64bits
|
2015-09-16 15:23:31 +02:00 |
|
Clement Rouault
|
8a718c6e06
|
Fix bug + remove debug print
|
2015-09-16 14:47:23 +02:00 |
|
Clement Rouault
|
b4ebffb55c
|
[Test] Using dbgprint.py
|
2015-09-16 10:13:39 +02:00 |
|
Clement Rouault
|
7532172813
|
Rewrite 32->64 CreateThread (parse own 64ntdll + shellcode in simple_x64)
|
2015-09-16 10:13:18 +02:00 |
|
Clement Rouault
|
59a0c933f9
|
Use OptionalExport for ntreadsyswow + add some function
|
2015-09-16 10:10:49 +02:00 |
|
Clement Rouault
|
0fc55b24fd
|
Clean X64 hook stub
|
2015-09-15 10:20:05 +02:00 |
|
Clement Rouault
|
c74447ec23
|
Add call [mem] and xchg REG,[RE]AX
|
2015-09-15 10:05:49 +02:00 |
|
Clement Rouault
|
03aa598514
|
Rewrite x64 SIB/Immediat logic to match x86 + fixes + test_x64
|
2015-09-15 09:17:25 +02:00 |
|
Clement Rouault
|
3cb26102ca
|
Add simple_x86 test + small fixes
|
2015-09-14 15:36:36 +02:00 |
|
Clement Rouault
|
24d05aa3d5
|
Rewrite immediat logique of simple_x86
|
2015-09-14 13:27:11 +02:00 |
|
Clement Rouault
|
8ca369a053
|
Add gitignore to repo
|
2015-09-10 16:59:25 +02:00 |
|
Clement Rouault
|
ce7661260f
|
Fix SIB generation
|
2015-09-10 16:55:25 +02:00 |
|
Clement Rouault
|
e69480364d
|
Implem remote ctypes + Injection 32->64
|
2015-09-10 16:55:02 +02:00 |
|
Clement Rouault
|
7ddcb492ed
|
Add new def + pe_parse with remotectypes test
|
2015-09-03 12:57:15 +02:00 |
|
Clement Rouault
|
a133254c6b
|
Exploring remotectypes
|
2015-09-03 12:56:32 +02:00 |
|
Clement Rouault
|
bd855ce7d5
|
New assembler
|
2015-09-03 12:55:41 +02:00 |
|
Clement Rouault
|
4ba46979d9
|
Fix hook with new assembler + fix python3 compat for hook
|
2015-07-20 13:56:45 +02:00 |
|
Clement Rouault
|
ebb23fd275
|
Big commit <3
|
2015-07-10 16:50:46 +02:00 |
|
Clement Rouault
|
e1bee9f8e8
|
Commit simple_x86 before full rewriting
|
2015-06-26 11:08:53 +02:00 |
|
Clement Rouault
|
eb741a4429
|
Add stuff about vectored exception
|
2015-04-13 17:54:45 +02:00 |
|
Clement Rouault
|
b459125f27
|
Add LOT of doc + play on vertored exception
|
2015-04-13 15:56:25 +02:00 |
|
Clement Rouault
|
481b8861f0
|
Add TCP connections + Syswow64 injection
|
2015-04-01 18:22:42 +02:00 |
|
Clement Rouault
|
a7b463c05a
|
Add some functions + utility to create a console into injected process
|
2015-03-18 16:31:42 +01:00 |
|
Clement Rouault
|
00d670378d
|
Fix 64bits stub: no more deadlock and arg non-preserved (I hope)
|
2015-03-13 15:48:59 +01:00 |
|
Clement Rouault
|
7510ad3f54
|
New 64bits callback stub that preserv x64 registers
|
2015-03-13 13:49:05 +01:00 |
|
Clement Rouault
|
bcda1ac5c5
|
Fix 64bits callback stub, i now preserve the return value
|
2015-03-13 10:27:39 +01:00 |
|
Clement Rouault
|
a1ee711a93
|
Fix INT import parsing for 64bits
|
2015-03-13 10:08:13 +01:00 |
|
Clement Rouault
|
e2c2bdc236
|
Add support for 64bits injection + hooks
|
2015-03-12 18:25:49 +01:00 |
|
Clement Rouault
|
9c80593a97
|
Committing all the stuff
|
2015-03-11 15:51:00 +01:00 |
|