6bf8f77617
Added IO definitions + ability to use CTL_CODE() macro in windef
2024-06-03 18:53:16 +02:00
ee409e4c72
Merge pull request #55 from hakril/volume_dospath_fix
...
Change LogicalDrive.path logic based on QueryDosDevice returned valudes
2024-05-30 11:56:53 +02:00
f957c640c7
Change LogicalDrive.path logic based on QueryDosDevice returned valudes
2024-05-28 19:03:46 +02:00
328735bd3a
Merge pull request #54 from hakril/improve_simple_x64
...
Implem x64 mem_access [RIP+DISP32]
2024-05-21 18:52:57 +02:00
feafb52c2a
Implem x64 mem_access [RIP+DISP32] + few test + fix raw instr
2024-05-21 16:05:45 +02:00
275d054ba7
Add ntcall.py sample
2024-05-20 11:28:34 +02:00
36db869572
POC code for registry->security descriptor interface
2024-05-20 11:25:56 +02:00
74f5d43159
Improve SafeArray obj+handling in com.py
2024-05-20 11:22:50 +02:00
dade97ff16
Update comments/doc to event_log.py
2024-05-20 11:22:07 +02:00
2db6037658
Small improvement/add to WMI objects/apis
2024-05-20 11:21:47 +02:00
b68369936a
Add some attributes to bits objects
2024-05-20 11:20:34 +02:00
85a41fbca0
Add POC of winutils.lookup_name()
2024-05-20 11:20:14 +02:00
dab2a57d75
Change process pop by windows.test to winver.exe
2024-05-20 11:18:43 +02:00
d3d6410276
Update readme + version number ( #52 )
2024-05-19 19:12:12 +02:00
9a0868da15
Enable debugger testing in CI ( #50 )
...
Fix hang & improves tests related to the debugger + activate Debugger tests in CI
2024-05-18 23:40:34 +02:00
117ea557f7
Trying to improve stability in CI with more sleep()
2024-05-18 23:31:09 +02:00
f92204a16f
Change def of OBJECT_ATTRIBUTES struct to handle remotectypes ( #51 )
2024-05-18 23:11:35 +02:00
d8b2770046
Improve test config/code for better test coverage in CI ( #49 )
...
* Improve test detection of other-bitness installation status
* Install capstone-windows in CI for better test coverage
---------
Co-authored-by: clement rouault <clement.rouault@exatrack.com >
2024-05-14 20:56:50 +02:00
e3bcde7d63
Add github actions for pytest CI ( #48 )
...
Integration of github CI testing workflows for python2.7 / 3.6 & 3.11 + Fix some tests & code failing
2024-05-14 18:44:04 +02:00
494317ee99
Add some ctypes definition associated with file APIs
2024-05-11 22:27:18 +02:00
46daca9539
Merge branch 'fix_alpc_sample_py3'
2024-05-11 22:17:59 +02:00
82d0c5cc5c
Updat eversion number + Add missing ctypes_generation environ.txt
2023-05-26 09:31:06 +02:00
0eb78f21bd
Added Environment API to winproxy + windows.system.environ : a unicode environ even on py2
2023-05-26 09:25:19 +02:00
0f501ab46d
Service API are now full Wide / service object now use unicode strings
2023-01-30 13:12:18 +01:00
f2ac6ea455
Fix alpc sample py3 ( #45 )
...
* ReAdded AF_ flags removed by mistake from ctypes_generation
* Adapt ALPC samples to python3 (fix #44 )
---------
Co-authored-by: clement rouault <clement.rouault@exatrack.com >
2023-01-30 13:03:34 +01:00
2828f496bd
Adapt ALPC samples to python3 ( fix #44 )
2023-01-12 12:53:38 +01:00
f295a081b1
ReAdded AF_ flags removed by mistake from ctypes_generation
2022-11-29 12:58:43 +01:00
681fba942f
Added SecurityDescriptor explain for SYSTEM_RESOURCE_ATTRIBUTE_ACE_TYPE
2022-11-28 17:50:51 +01:00
f4f9798d39
Added some netapi ctypes_generation / winproxy apis
2022-11-28 17:50:17 +01:00
09fa7c49ec
Adding windows.winproxy.RtlMoveMemory
2022-10-31 10:24:25 +01:00
c1aad71dd3
Improved integration of ws2_32 API + add demo_ws2_32.py sample
2022-10-31 10:18:23 +01:00
5d9e9a240f
Added base for ws2_32 winproxy (define/struct/functions) + RtlMoveMemory
2022-10-28 18:23:56 +02:00
267ed1e85d
Add some ctypes_generation and generated def
2022-08-05 11:33:25 +02:00
d7d2dacf33
Fixed thread.teb_base + add thread.teb_syswow_base for TEB64 of Syswow process
2022-08-05 11:30:45 +02:00
3d7266ad50
Added some generated def files
2022-05-27 15:35:13 +02:00
63dd0130f1
POC of windows.system.domain
2022-05-27 15:34:27 +02:00
b8788058e5
Func parser try to not really on presence of WINAPI to search for io_info prefix on parameters
2022-05-09 17:41:01 +02:00
fdef64c57f
Added RegLoad/Unload to winproxy
2022-05-09 17:41:01 +02:00
e156b05e0f
Improving SecurityDescriptor API/functions
2022-05-09 17:41:01 +02:00
a7d547f994
Improve ctypes_generation function parser for new MSDN format of [in] [out] parameters
2022-05-09 17:41:01 +02:00
5fa4ca6aae
Fixed bug introduced in token.privileges in ad592980 + associated tests
2022-05-09 17:24:55 +02:00
ad59298015
Token privilege code use W() API + use of GetNamedSecurityInfoW in security.py (fix issue #40 )
2022-05-07 11:35:36 +02:00
59e2cefee0
Replace binary used for test as notepad.exe is now the Notepad.exe app + add check on pop_proc about result bitness
2022-04-01 14:29:05 +02:00
d23a9813e9
Prevent Token.__repr__ to raise on access denied
2022-04-01 14:10:41 +02:00
447069df32
Process listing now use Wide API (process name is still temporary a ascii string with backslashreplace)
2022-02-07 17:10:54 +01:00
77d90bc4fd
Added Process32NextW/Process32FirstW to winproxy
2022-02-07 17:09:14 +01:00
82e3e0f3d0
Update test_pe_parsing_dotnet_32_current_process_64()
2022-02-03 15:22:18 +01:00
350a11515f
Added winutils datetime_from_systemtime()
2022-02-03 15:16:46 +01:00
61e027a678
Allow custom timeout to eventlog query
2021-12-30 13:39:38 +01:00
f9df80ca20
Improved handling of closing python in BaseSystemHandle.__del__
2021-11-03 09:27:13 +01:00
hakril