Clement Rouault
|
4183646b28
|
add Handle.infos + Process.open_token
|
2017-04-12 17:20:36 +02:00 |
|
Clement Rouault
|
5431b57560
|
fix ImprovedVariant.asbool + com.create_instance accept a context parameter + fix RemoteWCharP.value logic + winutils.decompress_buffer
|
2017-04-12 17:20:36 +02:00 |
|
Clement Rouault
|
a107656402
|
Add SACL/DACL related struct to func/def/structs + some winerror + some crypto func + utility func
|
2017-04-12 17:20:36 +02:00 |
|
Clement Rouault
|
64f56d3977
|
Identified a possible bug with Debugger._explicit_single_step + some DBGPRINT
|
2017-04-12 17:20:35 +02:00 |
|
Clement Rouault
|
d2582d5e09
|
Renamed some error check method with intelligible name + some security functions def
|
2017-04-12 17:20:35 +02:00 |
|
Clement Rouault
|
3f39ca9f0c
|
More work on windows.crypto and Add an encryption sample POC
|
2017-04-12 17:20:35 +02:00 |
|
Clement Rouault
|
8743883068
|
working on crypto.certificate.CryptObject
|
2017-04-12 17:19:01 +02:00 |
|
hakril
|
ae02d9e916
|
Add some User32 API
|
2017-04-12 17:19:01 +02:00 |
|
Clement Rouault
|
98bc95204d
|
still Working on windows.crypto object + API + test
|
2017-04-12 17:19:01 +02:00 |
|
Clement Rouault
|
68e809728a
|
Working on windows.crypto object + API + test
|
2017-04-12 17:19:01 +02:00 |
|
hakril
|
d5b70d829f
|
Playing with future windows.crypto API / class
|
2017-04-12 17:19:01 +02:00 |
|
hakril
|
28b2596483
|
Fix PVOID arguments in function generated + add some func/struct from CryptoAPI
|
2017-04-12 17:19:01 +02:00 |
|
Clement Rouault
|
50e7a1f2e3
|
Still Working on CryptoAPI
|
2017-04-12 17:19:01 +02:00 |
|
Clement Rouault
|
5478bda8bc
|
Working on CryptoAPI
|
2017-04-12 17:19:01 +02:00 |
|
hakril
|
15e40da1ca
|
Playing with CryptoApi
|
2017-04-12 17:19:01 +02:00 |
|
hakril
|
d2b801cada
|
Fix handle_exit_process + detach in Debugger to prevent keeping ref on process + fix pe_parse IATHook: all test pass
|
2017-04-12 17:19:01 +02:00 |
|
hakril
|
8653c4c1e4
|
No-closure pe_parse pass the test of WindowsTestCase
|
2017-04-12 17:19:01 +02:00 |
|
hakril
|
f863d75eee
|
exception is raised if remote dll injection fails
|
2017-04-12 17:19:01 +02:00 |
|
hakril
|
bc7656da05
|
[WIP] pe_parse refactor, imports and exports works without closure by code in dirty
|
2017-04-12 17:19:01 +02:00 |
|
hakril
|
03aec90d63
|
WIP: fixing handle 'leak' in dbg that require manual garbare collection for now
|
2017-04-12 17:19:01 +02:00 |
|
hakril
|
861884099f
|
Better handling of read_string for string at the end of readable memory
|
2017-04-12 17:19:00 +02:00 |
|
hakril
|
63cdb3bbeb
|
Better handling of read_wstring for wstring at the end of readable memory
|
2017-04-12 17:19:00 +02:00 |
|
hakril
|
e17400ed63
|
Debugger.detach remove self.target + better handling/clean of Thread/Process handles
|
2017-04-12 17:19:00 +02:00 |
|
Clement Rouault
|
e58fb73f3b
|
Fix VARIANT interpretation of VT_BOOL
|
2016-12-06 16:20:02 +01:00 |
|
Clement Rouault
|
11bdbd8873
|
Remove TrapFlag when detaching debugger
|
2016-08-23 11:56:54 +02:00 |
|
Clement Rouault
|
8942efa36c
|
Fix sample for FunctionBP
|
2016-08-22 14:05:29 +02:00 |
|
Clement Rouault
|
59776e40c3
|
Let's call it a V0.3
V0.3
|
2016-08-22 13:50:44 +02:00 |
|
Clement Rouault
|
c7b0b8d0aa
|
Update doc for COMImplementation usage
|
2016-08-22 13:50:08 +02:00 |
|
Clement Rouault
|
f045b58391
|
Fix README links for new /docs tree
|
2016-08-22 09:47:06 +02:00 |
|
Clement Rouault
|
83e8dcd56b
|
Rename /doc to /docs + commit build/ for the new source of github pages method
|
2016-08-19 16:21:34 +02:00 |
|
Clement Rouault
|
3773d87993
|
Add missing sample debug_functionbp.py
|
2016-08-19 15:18:10 +02:00 |
|
Clement Rouault
|
19b168df07
|
Add target_dll and target_func to TransparentApiProxy + test_code.py handles raw [x86|x64]
|
2016-08-19 15:15:04 +02:00 |
|
Clement Rouault
|
943945225a
|
Improve debugger/BP doc + add sample + small fixes in WMI/LocalDebugger + new data in ApiProxy for FunctionBP
|
2016-08-19 15:06:26 +02:00 |
|
Clement Rouault
|
0d38c1e268
|
Add NtAlpcConnectPortEx in winproxy
|
2016-08-19 10:34:41 +02:00 |
|
Clement Rouault
|
c7a2f7663a
|
Add PRAGMA_PACK for struct defintion in struct_parser and use it for tagBITMAPFILEHEADER
|
2016-08-08 18:11:44 +02:00 |
|
Clement Rouault
|
20fe59cf78
|
Implement Debugger.detach
|
2016-08-08 10:39:25 +02:00 |
|
Clement Rouault
|
304c7788db
|
Add structure def for BITMAP (screenshot API)
|
2016-08-05 18:14:24 +02:00 |
|
Clement Rouault
|
2767a08624
|
Fix bug in Process.name + create_process show_windows=True by default
|
2016-07-29 17:32:14 +02:00 |
|
Clement Rouault
|
fe4d41db47
|
Add/Update some doc
|
2016-07-27 18:20:36 +02:00 |
|
Clement Rouault
|
bc4952d513
|
Fix test_debugger with new dll format in _resolve + some test of syswow peb/context
|
2016-07-21 18:40:49 +02:00 |
|
Clement Rouault
|
f54a64670e
|
Add context_syswow/set_syswow_context + debugger able to handle BP in 64b part of syswow process
|
2016-07-20 18:21:28 +02:00 |
|
Clement Rouault
|
53acf21a2f
|
Fix x64 Mov Reg, Imm32 (sign extended)
|
2016-07-20 13:16:39 +02:00 |
|
Clement Rouault
|
48a40fa520
|
Improve MemBP API + restore target memory on break
|
2016-07-20 13:16:06 +02:00 |
|
Clement Rouault
|
2fec6a68b1
|
Fix calcul of full_page_events (translate events to set) in remove_bp
|
2016-07-18 17:40:50 +02:00 |
|
Clement Rouault
|
98a481ca93
|
DisabledMemoryBreakpoint now reput only the non-deleted BP + fix syntax (cc heurs <3)
|
2016-07-18 17:38:46 +02:00 |
|
Clement Rouault
|
13f231d6ad
|
debugger disable memory breakpoint before calling membp.trigger()
|
2016-07-18 16:30:17 +02:00 |
|
Clement Rouault
|
3184cbdeab
|
MemBP has explicit event RWX, add GetProcessDEPPolicy, add Debugger API to disable/re-enable memory BP
|
2016-07-18 16:23:11 +02:00 |
|
Clement Rouault
|
9ebb25017b
|
Better message / WindowsError raised when process die during safe_execute_python
|
2016-07-18 14:04:37 +02:00 |
|
Clement Rouault
|
19205f73a1
|
Improve debugger handling of memBP for future use + fix MemBP prot init + add failing test of multitple BP with diff prot
|
2016-07-13 18:23:26 +02:00 |
|
Clement Rouault
|
82621b881a
|
Add get_memory_breakpoint_at to debugger + fix token_user in process + add prot param to virtual_alloc
|
2016-07-13 16:28:31 +02:00 |
|