 Clement Rouault
|
7db5620210
|
more pytest POC + fixed debugger code + test FunctionHXBP
|
2017-09-07 17:13:59 +02:00 |
|
|
Clement Rouault
|
89e486cd95
|
Working on rewriting of tests with pytest
|
2017-09-06 18:42:54 +02:00 |
|
|
Clement Rouault
|
fccd2a49e6
|
Add doc to RPC + RPC_IF_ID generated-extended + lsass sample
|
2017-08-30 18:29:49 +02:00 |
|
|
Clement Rouault
|
d44a3b032e
|
Add extended struct to ctypes generation + extended IID now in winstructs.py and used everywhere
|
2017-08-29 11:39:43 +02:00 |
|
|
Clement Rouault
|
1fe5b912be
|
Add some ALPC samples to the documentation
|
2017-08-28 17:09:49 +02:00 |
|
|
Clement Rouault
|
1941adc93f
|
Working on RtlGetUnloadEventTraceEx - adding function and struct + fix remotectypes char-array in struct
|
2017-08-17 18:51:07 +02:00 |
|
|
Clement Rouault
|
e9c62a125c
|
add system.build_number + better handling of closing python in Winprocess.__del__
|
2017-08-17 18:49:42 +02:00 |
|
|
Clement Rouault
|
c75dda60b5
|
Fixed get_kernel_modules for syswow64 process
|
2017-08-17 13:51:36 +02:00 |
|
|
Clement Rouault
|
16e29bd938
|
Added a sample for Debugger.attach
|
2017-08-16 18:07:00 +02:00 |
|
|
Clement Rouault
|
c76a50c045
|
add doc to alpc.py + improve doc now that Winstruct are documented
|
2017-08-16 17:38:18 +02:00 |
|
|
Clement Rouault
|
bd6a3d35d5
|
Created sub-directories in samples/
|
2017-08-16 17:37:26 +02:00 |
|
|
Clement Rouault
|
8b9a71edc2
|
Add real doc for windows.generated_def
|
2017-08-16 15:11:23 +02:00 |
|
|
hakril
|
3d33c97335
|
add system.windir + needed winfuncs
|
2017-08-16 09:25:23 +02:00 |
|
|
Clement Rouault
|
8d139bce79
|
Working on sphinx doc generation for windows.generated_def
|
2017-08-11 19:06:50 +02:00 |
|
|
Clement Rouault
|
61ac5c8c5d
|
Fix EnumValue pickling for protocol 2
|
2017-08-10 17:07:41 +02:00 |
|
|
Clement Rouault
|
928a2744d5
|
Change RPC_SYNTAX_IDENTIFIER to RPC_IF_ID + update setup_hook + some add to wincli
|
2017-08-04 17:28:46 +02:00 |
|
|
Clement Rouault
|
f43749aa07
|
[WIP] new hook method + winfunc APIs in winproxy
|
2017-08-04 17:19:27 +02:00 |
|
|
Clement Rouault
|
d1cadf062a
|
working on windows.alpc + fix in current_process.threads
|
2017-08-04 17:18:41 +02:00 |
|
|
Clement Rouault
|
aa22f1515d
|
Working on new windows.alpc
|
2017-07-28 09:20:40 +02:00 |
|
|
Clement Rouault
|
6898ac02fa
|
First try at MemBP.on_error callback
|
2017-07-18 12:48:45 +02:00 |
|
|
Clement Rouault
|
f08953f4ae
|
rewrite of alpc.py + adapt rpc/client.py
|
2017-07-12 16:29:02 +02:00 |
|
|
Clement Rouault
|
5d34493356
|
commit alpc.py before rewriting
|
2017-07-12 16:27:43 +02:00 |
|
|
Clement Rouault
|
89fe39fadf
|
Adding some ALPC struct/funcs
|
2017-07-11 18:42:51 +02:00 |
|
|
Clement Rouault
|
5e2ecf2af9
|
Still working on RPC over alpc
|
2017-07-06 18:11:32 +02:00 |
|
|
Clement Rouault
|
aff6ee4e17
|
replace PORT_MESSAGE struct def with PORT_MESSAGE[32|64] + FunctionBP can get the function via a class parameter
|
2017-06-21 13:16:22 +02:00 |
|
|
Clement Rouault
|
ae5a211613
|
fix SIZE_T definition to ctypes.c_size_t + fix MessageAttribute._get_required_buffer_size
|
2017-06-08 18:22:24 +02:00 |
|
|
hakril
|
1a7e342318
|
Add Winprocess.limited_handle for QUERY_LIMITED_INFORMATION api call
|
2017-06-07 20:00:37 +02:00 |
|
|
Clement Rouault
|
a5688076a6
|
add uac sample
|
2017-06-07 11:45:59 +02:00 |
|
|
Clement Rouault
|
a13b287202
|
Clean some rpc/alpc code + add ndr.NdrCString
|
2017-06-07 11:45:11 +02:00 |
|
|
Clement Rouault
|
4c8747b628
|
Add winproxy.MessageBox[AW]
|
2017-06-07 11:39:37 +02:00 |
|
|
Clement Rouault
|
1a73fe713b
|
Add missing psid.py + some rpc fix + alpc sample + wincli
|
2017-05-24 17:49:46 +02:00 |
|
|
Clement Rouault
|
a89854a045
|
PrintBP now accept a pre-format fonction to forge new format parameters
|
2017-05-24 17:45:27 +02:00 |
|
|
Clement Rouault
|
3c21d8c59c
|
token.integrity is now settable
|
2017-05-24 17:43:34 +02:00 |
|
|
Clement Rouault
|
9461d4a2fb
|
Add structs/def/funcs + Service.start()
|
2017-05-24 17:40:31 +02:00 |
|
|
Clement Rouault
|
5b17cc988f
|
simple_x64 does not add extra unwanted REX for some 'Slash [MEM]' instruction
|
2017-05-24 17:33:40 +02:00 |
|
|
Clement Rouault
|
e5e9ff7a47
|
windows.alpc + windows.rpc first version (manual_uac works with those)
|
2017-05-19 17:14:10 +02:00 |
|
|
Clement Rouault
|
d24e62e319
|
Add PrintBP + few fix in Debugger + simple string-address resolution in localdebugger
|
2017-05-19 15:39:32 +02:00 |
|
|
Clement Rouault
|
bc3c033e84
|
Added some definitions for SID/Privilege/others
|
2017-05-19 15:37:26 +02:00 |
|
|
Clement Rouault
|
dbd98c93ed
|
fix Process.ppid implem + new version does not enum processes
|
2017-04-28 17:29:17 +02:00 |
|
|
Clement Rouault
|
48fbeaee77
|
Fix bug in debugger: close EVENT_INFO hFile only if not NULL
|
2017-04-27 14:10:03 +02:00 |
|
|
Clement Rouault
|
f9a650fcf3
|
WinThread is not a THREADENTRY32 anymore + add Winprocess.peb.exe
|
2017-04-27 12:06:04 +02:00 |
|
|
Clement Rouault
|
c0d03a2f58
|
Fix some handle leak, debugger close hFile on event + enumerate processes/threads close snap handle
|
2017-04-26 14:46:45 +02:00 |
|
|
Clement Rouault
|
feb76b48c3
|
unit tests now check for uncollectable-object (gc.garbage)
|
2017-04-26 11:07:52 +02:00 |
|
|
hakril
|
be5cbe2631
|
Winprocess.peb not a fixedproperty anymore to prevent ref-cycle + add windows.crypto to setup.py
|
2017-04-24 22:43:49 +02:00 |
|
|
hakril
|
8aa71f8c44
|
Fix remote execute_python in multiple process where python.dll is load at differents addresses
|
2017-04-21 21:22:24 +02:00 |
|
|
Clement Rouault
|
b418d85a5a
|
Fix test_exe_in_module_list for python 64b
|
2017-04-21 17:39:05 +02:00 |
|
|
Clement Rouault
|
3f6131d621
|
Fix implem of bp exe!(offset|API) + add test for this case
|
2017-04-21 17:30:18 +02:00 |
|
|
Clement Rouault
|
db6cec9031
|
Add PEB.Mutant + PEB.ImageBaseAddress in PEB definition
|
2017-04-21 17:01:45 +02:00 |
|
|
Clement Rouault
|
120e9bfa6f
|
Add exe in the debugger list of modules (for bp)
|
2017-04-21 15:03:48 +02:00 |
|
|
Clement Rouault
|
799bca8d3f
|
Fix BitsCopyCallback callback prototype + print error code on bits job error
|
2017-04-20 11:52:56 +02:00 |
|