 hakril
|
d8b1ec6536
|
Update CurrentProcess.virtual_alloc to match Winprocess.virtual_alloc parameters + tests
|
2025-05-15 09:46:38 +02:00 |
|
|
hakril
|
7446517863
|
Add type parameter for WinProcess.virtual_alloc
|
2025-05-15 09:27:45 +02:00 |
|
|
hakril
|
d4952e21ba
|
More arm64 heaven gate NotImplementedError()
|
2025-02-11 14:03:35 +01:00 |
|
|
hakril
|
a93c9b7f11
|
Fix typo
|
2025-02-08 19:31:45 +01:00 |
|
|
hakril
|
06b96e65d0
|
More NotImplementedError for ARM64
|
2025-02-08 13:12:05 +01:00 |
|
|
hakril
|
54b518ca5f
|
More x86->arm64 limitation exploration
|
2025-02-05 22:52:06 +01:00 |
|
|
hakril
|
d094fb8209
|
More limitation identification for x86 on arm64 heaven gate
|
2025-02-05 22:40:12 +01:00 |
|
|
hakril
|
017867d79d
|
Fox typo
|
2025-02-05 22:30:51 +01:00 |
|
|
hakril
|
e58d80c3c5
|
More raise NotImplementedError on x86 -> arm64 heaven gate
|
2025-02-05 22:24:40 +01:00 |
|
|
hakril
|
d7ff43a829
|
Working on expliciting limitation of x86-on-arm64 NotImplementedError
|
2025-02-05 22:09:02 +01:00 |
|
|
hakril
|
6a54bca39a
|
Fix process.py simple_arm64 import
|
2025-02-04 20:02:43 +01:00 |
|
|
hakril
|
2a1217e7b8
|
Implem current_thread.teb for ARM64 + recognize ARM64 PE in pe_parse
|
2025-02-04 20:00:58 +01:00 |
|
|
hakril
|
4e5325c8ea
|
Process.architecture now returns flags
|
2025-02-02 19:19:12 +01:00 |
|
|
hakril
|
9b5be5ffd5
|
more arm testing of process.architecture
|
2025-02-02 19:19:12 +01:00 |
|
|
hakril
|
720385d15a
|
Still playing with process.architecture
|
2025-02-02 19:19:12 +01:00 |
|
|
hakril
|
ce13bf08e3
|
First try at WinProcess.architecture
|
2025-02-02 19:19:12 +01:00 |
|
|
hakril
|
2c9a159a81
|
Add system.architecture & process.architecture
|
2025-02-02 19:18:43 +01:00 |
|
|
hakril
|
6fd32762da
|
Try improving CurrentProcessReadSyswow stability
|
2025-02-02 16:54:23 +01:00 |
|
|
hakril
|
d7cf3e0f8b
|
Fix CurrentThread.teb_base being a property and not a fixedproperty
|
2025-02-01 14:22:02 +01:00 |
|
|
hakril
|
f7542e686c
|
More teb64 fix
|
2025-02-01 11:34:09 +01:00 |
|
|
hakril
|
029f7cba35
|
More TEB syswow fix
|
2025-01-31 17:37:07 +01:00 |
|
|
hakril
|
36c1eb647f
|
Fix WinThread.teb_syswow
|
2025-01-31 17:13:33 +01:00 |
|
|
hakril
|
4bbdb538de
|
Add support for remote TEB + tests
|
2025-01-31 17:00:04 +01:00 |
|
|
hakril
|
6ccccf7e90
|
V1 of WinThread.teb
|
2025-01-31 13:46:11 +01:00 |
|
|
hakril
|
13c28422d4
|
process improv : bitness based on PVOID size + CurrentProcess.name based on GetProcessImageFileNameW + peb addr based on RtlGetCurrentPeb
|
2025-01-31 13:46:11 +01:00 |
|
|
hakril
|
92b3cfcb2b
|
Adapt sample + docs for microsoft-store-python-injection
|
2025-01-28 19:45:36 +01:00 |
|
|
Darius Houle
|
082b13112d
|
missed docstring*
|
2025-01-26 23:46:19 -07:00 |
|
|
Darius Houle
|
52859d19c4
|
feedback revisions
|
2025-01-26 23:38:50 -07:00 |
|
|
hakril
|
13dc869af6
|
Add unicode tests + comments
|
2024-06-05 22:47:26 +02:00 |
|
|
hakril
|
33766c2ffd
|
Working on WinAPI Wide-transition
|
2024-06-05 22:43:30 +02:00 |
|
|
hakril
|
9eb4405cce
|
Passed process relation API to Wide functions
|
2024-06-05 22:43:30 +02:00 |
|
|
hakril
|
e3bcde7d63
|
Add github actions for pytest CI (#48)
Integration of github CI testing workflows for python2.7 / 3.6 & 3.11 + Fix some tests & code failing
|
2024-05-14 18:44:04 +02:00 |
|
|
clement rouault
|
d7d2dacf33
|
Fixed thread.teb_base + add thread.teb_syswow_base for TEB64 of Syswow process
|
2022-08-05 11:30:45 +02:00 |
|
|
clement rouault
|
447069df32
|
Process listing now use Wide API (process name is still temporary a ascii string with backslashreplace)
|
2022-02-07 17:10:54 +01:00 |
|
|
clement rouault
|
8b90c96c1a
|
utils.create_process now use CreateProcessW for simpler py3 usage + fix code in WinProcess.read_[w]string + associated tests
|
2021-07-13 13:22:50 +02:00 |
|
|
clement rouault
|
fb9ff96a11
|
Fixed current_process.read_string/wstring for page end + tests
|
2021-06-22 19:03:35 +02:00 |
|
|
clement rouault
|
3149961634
|
Retrieving process ppid now use limited_handle, allowed more case of sucessful retrieval
|
2021-03-05 16:37:48 +01:00 |
|
|
hakril
|
466d94c03c
|
Fixed broken basestring for py3 compatibility (see issue #15)
|
2020-05-02 23:12:25 +02:00 |
|
|
hakril
|
4d3b3e18ad
|
Lot of small py3 compat fix
|
2020-02-13 22:23:20 +01:00 |
|
|
hakril
|
6a74c83670
|
test_process pass for python3 + added some pe_parse test
|
2020-02-07 23:06:26 +01:00 |
|
|
hakril
|
15f399df6d
|
Still playing with security-descriptor / SACL / required rights (MAXIMUM_ALLOWED does not work)
|
2019-06-28 10:34:20 +02:00 |
|
|
hakril
|
b628ca336b
|
Working on api to set security descriptor
|
2019-06-28 09:38:35 +02:00 |
|
|
hakril
|
44e5a09564
|
Few improvement in existing API + test of Winprocess.handles
|
2019-01-22 15:06:23 +01:00 |
|
|
hakril
|
db44087bba
|
Refactor thread code for simple token retrieving on Process/Thread objects
|
2018-12-21 16:07:10 +01:00 |
|
|
hakril
|
460274d532
|
Process object now return new Token object (still WIP)
|
2018-11-24 22:59:01 +01:00 |
|
|
hakril
|
e46dc48c37
|
Addapt codebase and tests to winproxy refactoring (replace Kernel32Error to WinproxyError)
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
967c18d521
|
Added POC WinProcess.memory_info + some crypto defines
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
05e7b755b0
|
Fix CurrentProcess read/write memory to use ctypes.memmove -> raise on bad address -> no more segv
|
2018-05-12 00:13:57 +02:00 |
|
|
hakril
|
34c2d94bc2
|
Some fixes in code/samples/test
|
2018-03-27 20:37:30 +02:00 |
|
|
hakril
|
8840b9fdb9
|
updated doc
|
2018-03-07 10:24:46 +01:00 |
|