 hakril
|
460274d532
|
Process object now return new Token object (still WIP)
|
2018-11-24 22:59:01 +01:00 |
|
|
hakril
|
2a4bdd7e30
|
removing crypto ECRYPT_DATA_BLOB. now CRYPT_DATA_BLOB is extended_struct + testing new API in crypto object
|
2018-11-24 22:59:01 +01:00 |
|
|
hakril
|
d936942d28
|
[WIP] improving Token object possibilities
|
2018-11-24 22:59:01 +01:00 |
|
|
hakril
|
24c5083633
|
POC of new Improved buffer utilities + sprint use dunder method __sprint__ if available in objects
|
2018-11-24 22:59:01 +01:00 |
|
|
hakril
|
c3b85068e5
|
Added Retn to x86/64 assemblers + encryption_demo sample can now sign a file + [WIP] token improvement
|
2018-11-24 22:59:01 +01:00 |
|
|
hakril
|
fff2f37781
|
Add WMI create-process sample + improved some sample feature/doc
|
2018-11-24 22:59:01 +01:00 |
|
|
hakril
|
b6f57b8342
|
Code now use renamed/improved windows.com.Variant
|
2018-11-24 22:59:01 +01:00 |
|
|
hakril
|
cf6c813002
|
ComInterface now expose a callback for ctypes error handling. Allow COM interface to change/handle the raised Exception
|
2018-11-24 22:59:01 +01:00 |
|
|
hakril
|
b167c6e70f
|
Made some improvement of error handling by ApiProxy + some new generated def
|
2018-11-24 22:59:01 +01:00 |
|
|
hakril
|
267eddb5fe
|
Reworking windows.com.Variant + working on new wmi API + wmi test
|
2018-11-24 22:59:01 +01:00 |
|
|
hakril
|
a18c08ee53
|
Working on new WMI interface + improved ComInterface errcheck
|
2018-11-24 22:59:01 +01:00 |
|
|
hakril
|
e46dc48c37
|
Addapt codebase and tests to winproxy refactoring (replace Kernel32Error to WinproxyError)
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
77fca8bb0f
|
Refactor winproxy into a directory
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
bbde38ffe4
|
First version of windows.security based on clmntb work
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
0e52272ddc
|
Fixed a warning in simple_x[86|64]
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
91cbcce38f
|
Added some definition + POC of FlagExtractor
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
33ca0c9c34
|
Added many security-related defines + moved improved-psid in extended_structs
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
272ad24f15
|
Added extended-struct capabilities to simple_type.txt
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
967c18d521
|
Added POC WinProcess.memory_info + some crypto defines
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
0125f78c67
|
Quick fix for query_volume_information
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
570436120b
|
Added some functions
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
1c21b77292
|
Add sign/verify methods to windows.crypto + POC/Play with improved ctypes buffer/array
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
7a313f57c1
|
Added some crypto-related ctypes_generation definitions + generate.py now try to check for out-of-order definition
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
b253bc5873
|
Merge pull request #4 from jagotu/master
Ndr: Make sure Strings are null-terminated. Add NULL byte if not present.
|
2018-11-07 22:10:34 +01:00 |
|
|
JaGoTu
|
921f066fb8
|
Ndr: Make sure Strings are null-terminated
Prevents RPC_X_BAD_STUB_DATA when a non-null-terminated string is
provided as an argument.
|
2018-11-07 21:26:28 +01:00 |
|
|
hakril
|
2454bf815b
|
Regenerate sphinx doc
|
2018-08-03 10:10:31 +02:00 |
|
|
hakril
|
b3f1420d46
|
Updated README with new features description
|
2018-08-03 09:48:53 +02:00 |
|
|
hakril
|
19095f0e2f
|
Fix typo in certificate test + add very simple test of windows.system.modules
|
2018-08-02 18:52:35 +02:00 |
|
|
hakril
|
c228a0d5cb
|
Added Certificate.distinguished_name and BaseSystemModule.name + some winproxy functions
|
2018-08-02 18:51:41 +02:00 |
|
|
hakril
|
c97d149630
|
Added some ctypes_generation definitions
|
2018-08-02 18:42:36 +02:00 |
|
|
hakril
|
afccd0da30
|
Added doc about how to install pfw in readme and sphinx doc
|
2018-08-02 18:41:08 +02:00 |
|
|
hakril
|
e53f7ef34b
|
Added some test for windows.system.object_manager
|
2018-08-02 18:38:48 +02:00 |
|
|
hakril
|
e6a022f8be
|
Add windows.system.edition
|
2018-07-13 18:08:00 +02:00 |
|
|
hakril
|
a75de140d6
|
Added object manager samples to doc + fix Certificate.thum[b]print typo
|
2018-07-13 14:41:09 +02:00 |
|
|
hakril
|
d232928780
|
Added some generated def + some winproxy functions
|
2018-07-13 14:33:50 +02:00 |
|
|
hakril
|
c19241098a
|
Improve object manager doc + add samples
|
2018-07-13 14:24:55 +02:00 |
|
|
hakril
|
eb3b13016f
|
Fix right-margin in sphinx doc CSS (thanks bruno)
|
2018-07-11 11:57:39 +02:00 |
|
|
hakril
|
c59af86910
|
Renamed kernobj.py to object_manager.py and added to windows.system.object_manager + improve API + beginning of doc
|
2018-06-11 17:55:11 +02:00 |
|
|
hakril
|
041a354d17
|
Update some doc + document windows.system.modules
|
2018-06-11 11:09:48 +02:00 |
|
|
hakril
|
525432fecd
|
Add a POC for windows.system.modules to replace winutils.get_kernel_modules()
|
2018-06-05 21:55:54 +02:00 |
|
|
hakril
|
1ee9a8bc46
|
new POC for breakpoint with parameters extraction
|
2018-06-05 21:54:26 +02:00 |
|
|
hakril
|
3dcd27a1ca
|
Fix ntdll-registry winproxy error check + add LocalDebugger.current_thread to match Debugger API
|
2018-06-05 21:53:35 +02:00 |
|
|
hakril
|
b223ed233e
|
Fix stuff in service.py + update test
|
2018-06-05 11:59:06 +02:00 |
|
|
hakril
|
3d69ad3cb5
|
Add some definition in ctypes generation + winproxy wrappers; fix com.py imports
|
2018-06-05 11:38:57 +02:00 |
|
|
hakril
|
a559c5c295
|
Update some doc / test + some ctypes generation definition
|
2018-06-05 11:34:52 +02:00 |
|
|
hakril
|
93bb9b6540
|
Add doc/sample/test for event log code
|
2018-06-05 11:30:25 +02:00 |
|
|
hakril
|
057d4e5408
|
Add scheduled_task code/doc-source/tests
|
2018-06-01 12:20:13 +02:00 |
|
|
hakril
|
2bea15ffe8
|
add current word on event logs
|
2018-05-12 00:17:34 +02:00 |
|
|
hakril
|
11e4afeef5
|
ctypes generation : added bitfield parsing/generation + update/fix some definitions
|
2018-05-12 00:16:45 +02:00 |
|
|
hakril
|
05e7b755b0
|
Fix CurrentProcess read/write memory to use ctypes.memmove -> raise on bad address -> no more segv
|
2018-05-12 00:13:57 +02:00 |
|