hakril
8d5bb5c032
Add simplex_86 ljmp with standard parameter format handling for ptr16:32
2025-06-30 15:48:59 +02:00
hakril
13f2993cf1
Fix tests for older python
2025-02-06 21:59:44 +01:00
hakril
bce15d0d3c
simple_arm64.Mov(reg, reg) that redirect to Orr(reg, zero, reg)
2025-02-03 09:11:01 +01:00
hakril
1bc7818552
Still playing with simple_arm64
2025-02-02 19:19:28 +01:00
hakril
7c96da8c75
Working on simple_arm64.py
2025-02-02 19:19:28 +01:00
hakril
458a0d0558
First implem of arm64.assemble()
2025-02-02 19:19:28 +01:00
hakril
493fe75be8
arm64: Ret() encoded \o/ time to tests functions calls
2025-02-02 19:19:28 +01:00
hakril
e7679ecfcf
[WIP] simple_arm64 + testsuite
2025-02-02 19:19:12 +01:00
hakril
979f7ec77a
Small fix in simple_x86
2024-10-23 09:56:06 +02:00
hakril
53554f45ab
Improve handling of Jmp/Call/Push/Pop
2024-06-27 14:22:40 +02:00
hakril
703c7f2ec2
Fix windows.native_exec.cpuid for py3
2024-06-14 14:22:21 +02:00
hakril
feafb52c2a
Implem x64 mem_access [RIP+DISP32] + few test + fix raw instr
2024-05-21 16:05:45 +02:00
clement rouault
a814012574
windows.native_exec.create_function can now accept ctypes calling convention as parameter
2021-09-07 18:07:02 +02:00
clement rouault
1d128f43ab
native_function.CustomAllocator now has the ability to be closed, freeing its pages.
2021-06-15 15:35:46 +02:00
clement rouault
cd87544fc7
Fix a concurrency error in simple_x86
2021-06-15 15:32:23 +02:00
srounet
eab219610d
add Pushad/Pushfd/Pushfq mnemonics and alias to Jz ( #20 )
...
* add register mnemonics and alias to Jz
* remove push/popal use expected_result to overwrite result
* add x64 instructions
* fix an issue with pushfd popfd Instructions not matching the intel specification
2021-05-04 19:31:42 +02:00
clement rouault
542eb33aa6
Fix issue #19 about x86/x64 bad Test encoding
2021-04-27 21:32:49 +02:00
hakril
889de363ca
windows.injection now handle injection of py3 code !
2020-02-06 00:03:10 +01:00
hakril
bac3dcb55b
Fix simple_x64 REX for python3
2020-02-05 23:57:34 +01:00
hakril
f2a6489463
Added mov REG/SEGREG in simple_x86 + fix a bug in syswow64 on AMD do to a processor bug (Issue10)
2020-02-02 17:49:42 +01:00
hakril
30b05d25f1
Improved MultipleInstr capabilities + fix a bug in x64 that failed to recognize 32b register name not uppercase
2019-09-20 16:18:16 +02:00
hakril
6fcba46739
Added <Raw> pseudo instruction to both assemblers + corresponding test
2019-08-07 17:42:56 +02:00
hakril
c3b85068e5
Added Retn to x86/64 assemblers + encryption_demo sample can now sign a file + [WIP] token improvement
2018-11-24 22:59:01 +01:00
hakril
0e52272ddc
Fixed a warning in simple_x[86|64]
2018-11-24 22:59:00 +01:00
hakril
34c2d94bc2
Some fixes in code/samples/test
2018-03-27 20:37:30 +02:00
hakril
65726e706f
Add Int X86/64 instruction
2018-01-13 16:40:21 +01:00
Clement Rouault
4efae2194d
Adding Process.priority + fix in WMI raised exceptions + add x86.Iret
2017-11-10 11:12:24 +01:00
hakril
b3117ce4e3
pytest integration finished + moved tests/ to top dir
2017-09-10 18:57:59 +02:00
Clement Rouault
5b17cc988f
simple_x64 does not add extra unwanted REX for some 'Slash [MEM]' instruction
2017-05-24 17:33:40 +02:00
Clement Rouault
654e6bff71
change remote_calc sample to use notepad + add demo of test_code sample + Stos[BWD] in simple_x86 +
2017-04-13 11:14:09 +02:00
Clement Rouault
53acf21a2f
Fix x64 Mov Reg, Imm32 (sign extended)
2016-07-20 13:16:39 +02:00
Clement Rouault
cf6c48b418
Remove some commented old code + fix read/write of REG_QWORD values in registry
2016-07-07 17:41:57 +02:00
Clement Rouault
b74d7a9e7e
Add Jmp/Call Far 16:32 in simple_x86 + clean and simplify syswow-to-64 execution
2016-07-07 13:16:36 +02:00
Clement Rouault
886b445e0e
Token.integrity returns a Flag + fix simple_x64 on SIB use for [r13]
2016-07-04 18:33:35 +02:00
Clement Rouault
2526727931
Add __mul__ on Instruction + x64 on test_code
2016-06-29 15:07:14 +02:00
Clement Rouault
56b8264ffd
Add x64.assemble + sample test_code
2016-06-28 11:31:53 +02:00
Clement Rouault
ce7866cbf3
Improve x86.assemble for int + a demo of code tester
2016-06-28 11:03:57 +02:00
Clement Rouault
ed42580b4e
Fix some x64 encoding of [NEW_REG] | pop/push [RAX] doest not contains a useless prefix anymore
2016-06-27 14:51:47 +02:00
Clement Rouault
2289895423
Add test + fix Imm32 stuff in x64
2016-06-13 18:19:38 +02:00
Clement Rouault
0b32302591
Remove generate_callback_stub (only IATHook are impacted)
2016-06-09 18:51:48 +02:00
Clement Rouault
e1f7f1e500
execute_python doest not reinject the shellcode everytime + test hook 64b
2016-06-08 11:01:19 +02:00
Clement Rouault
f23357c13e
Testing hook without generated stub + new hook test in new file
2016-06-07 19:59:00 +02:00
Clement Rouault
3d51278039
fix UNICODE_STRING.str / test assemblers / improve com_parser for future work
2016-06-06 17:24:10 +02:00
Clement Rouault
dfe8217259
Fix system.version_name on windows10
2016-05-13 16:31:07 +02:00
Clement Rouault
10a803e9c9
Add shr/shl + small fix simple_x64 Imm8 + execute_64bits_code_from_syswow able to return ULONG64
2016-05-02 18:21:09 +02:00
Clement Rouault
9fbba331ca
Add NTSTATUS to windef/add virtual_free/improve nativeutils GetProcAddr + test
2016-02-02 18:45:24 +01:00
Clement Rouault
d720170781
Big commit GetProcAddrss 32 and 64 (fixed)
2016-01-29 18:05:21 +01:00
Clement Rouault
38a2298dee
Add nativeutils.py with GetProcAddress64 + add instr to x86/x64 assembler + add merge of labels in multipleinstr (dummy function support)
2016-01-28 17:00:31 +01:00
Clement Rouault
b459e291c4
More doc + regitry PyPhKey.get()
2016-01-07 19:26:40 +01:00
Clement Rouault
4e9cf7684e
Add documentation for windows.native_exec
2016-01-04 18:15:03 +01:00