Commit Graph

275 Commits

Author SHA1 Message Date
Clement Rouault 4183646b28 add Handle.infos + Process.open_token 2017-04-12 17:20:36 +02:00
Clement Rouault 5431b57560 fix ImprovedVariant.asbool + com.create_instance accept a context parameter + fix RemoteWCharP.value logic + winutils.decompress_buffer 2017-04-12 17:20:36 +02:00
Clement Rouault a107656402 Add SACL/DACL related struct to func/def/structs + some winerror + some crypto func + utility func 2017-04-12 17:20:36 +02:00
Clement Rouault 64f56d3977 Identified a possible bug with Debugger._explicit_single_step + some DBGPRINT 2017-04-12 17:20:35 +02:00
Clement Rouault d2582d5e09 Renamed some error check method with intelligible name + some security functions def 2017-04-12 17:20:35 +02:00
Clement Rouault 3f39ca9f0c More work on windows.crypto and Add an encryption sample POC 2017-04-12 17:20:35 +02:00
Clement Rouault 8743883068 working on crypto.certificate.CryptObject 2017-04-12 17:19:01 +02:00
hakril ae02d9e916 Add some User32 API 2017-04-12 17:19:01 +02:00
Clement Rouault 98bc95204d still Working on windows.crypto object + API + test 2017-04-12 17:19:01 +02:00
Clement Rouault 68e809728a Working on windows.crypto object + API + test 2017-04-12 17:19:01 +02:00
hakril d5b70d829f Playing with future windows.crypto API / class 2017-04-12 17:19:01 +02:00
hakril 28b2596483 Fix PVOID arguments in function generated + add some func/struct from CryptoAPI 2017-04-12 17:19:01 +02:00
Clement Rouault 50e7a1f2e3 Still Working on CryptoAPI 2017-04-12 17:19:01 +02:00
Clement Rouault 5478bda8bc Working on CryptoAPI 2017-04-12 17:19:01 +02:00
hakril 15e40da1ca Playing with CryptoApi 2017-04-12 17:19:01 +02:00
hakril d2b801cada Fix handle_exit_process + detach in Debugger to prevent keeping ref on process + fix pe_parse IATHook: all test pass 2017-04-12 17:19:01 +02:00
hakril 8653c4c1e4 No-closure pe_parse pass the test of WindowsTestCase 2017-04-12 17:19:01 +02:00
hakril f863d75eee exception is raised if remote dll injection fails 2017-04-12 17:19:01 +02:00
hakril bc7656da05 [WIP] pe_parse refactor, imports and exports works without closure by code in dirty 2017-04-12 17:19:01 +02:00
hakril 03aec90d63 WIP: fixing handle 'leak' in dbg that require manual garbare collection for now 2017-04-12 17:19:01 +02:00
hakril 861884099f Better handling of read_string for string at the end of readable memory 2017-04-12 17:19:00 +02:00
hakril 63cdb3bbeb Better handling of read_wstring for wstring at the end of readable memory 2017-04-12 17:19:00 +02:00
hakril e17400ed63 Debugger.detach remove self.target + better handling/clean of Thread/Process handles 2017-04-12 17:19:00 +02:00
Clement Rouault e58fb73f3b Fix VARIANT interpretation of VT_BOOL 2016-12-06 16:20:02 +01:00
Clement Rouault 11bdbd8873 Remove TrapFlag when detaching debugger 2016-08-23 11:56:54 +02:00
Clement Rouault 8942efa36c Fix sample for FunctionBP 2016-08-22 14:05:29 +02:00
Clement Rouault 59776e40c3 Let's call it a V0.3 V0.3 2016-08-22 13:50:44 +02:00
Clement Rouault c7b0b8d0aa Update doc for COMImplementation usage 2016-08-22 13:50:08 +02:00
Clement Rouault f045b58391 Fix README links for new /docs tree 2016-08-22 09:47:06 +02:00
Clement Rouault 83e8dcd56b Rename /doc to /docs + commit build/ for the new source of github pages method 2016-08-19 16:21:34 +02:00
Clement Rouault 3773d87993 Add missing sample debug_functionbp.py 2016-08-19 15:18:10 +02:00
Clement Rouault 19b168df07 Add target_dll and target_func to TransparentApiProxy + test_code.py handles raw [x86|x64] 2016-08-19 15:15:04 +02:00
Clement Rouault 943945225a Improve debugger/BP doc + add sample + small fixes in WMI/LocalDebugger + new data in ApiProxy for FunctionBP 2016-08-19 15:06:26 +02:00
Clement Rouault 0d38c1e268 Add NtAlpcConnectPortEx in winproxy 2016-08-19 10:34:41 +02:00
Clement Rouault c7a2f7663a Add PRAGMA_PACK for struct defintion in struct_parser and use it for tagBITMAPFILEHEADER 2016-08-08 18:11:44 +02:00
Clement Rouault 20fe59cf78 Implement Debugger.detach 2016-08-08 10:39:25 +02:00
Clement Rouault 304c7788db Add structure def for BITMAP (screenshot API) 2016-08-05 18:14:24 +02:00
Clement Rouault 2767a08624 Fix bug in Process.name + create_process show_windows=True by default 2016-07-29 17:32:14 +02:00
Clement Rouault fe4d41db47 Add/Update some doc 2016-07-27 18:20:36 +02:00
Clement Rouault bc4952d513 Fix test_debugger with new dll format in _resolve + some test of syswow peb/context 2016-07-21 18:40:49 +02:00
Clement Rouault f54a64670e Add context_syswow/set_syswow_context + debugger able to handle BP in 64b part of syswow process 2016-07-20 18:21:28 +02:00
Clement Rouault 53acf21a2f Fix x64 Mov Reg, Imm32 (sign extended) 2016-07-20 13:16:39 +02:00
Clement Rouault 48a40fa520 Improve MemBP API + restore target memory on break 2016-07-20 13:16:06 +02:00
Clement Rouault 2fec6a68b1 Fix calcul of full_page_events (translate events to set) in remove_bp 2016-07-18 17:40:50 +02:00
Clement Rouault 98a481ca93 DisabledMemoryBreakpoint now reput only the non-deleted BP + fix syntax (cc heurs <3) 2016-07-18 17:38:46 +02:00
Clement Rouault 13f231d6ad debugger disable memory breakpoint before calling membp.trigger() 2016-07-18 16:30:17 +02:00
Clement Rouault 3184cbdeab MemBP has explicit event RWX, add GetProcessDEPPolicy, add Debugger API to disable/re-enable memory BP 2016-07-18 16:23:11 +02:00
Clement Rouault 9ebb25017b Better message / WindowsError raised when process die during safe_execute_python 2016-07-18 14:04:37 +02:00
Clement Rouault 19205f73a1 Improve debugger handling of memBP for future use + fix MemBP prot init + add failing test of multitple BP with diff prot 2016-07-13 18:23:26 +02:00
Clement Rouault 82621b881a Add get_memory_breakpoint_at to debugger + fix token_user in process + add prot param to virtual_alloc 2016-07-13 16:28:31 +02:00