Commit Graph

50 Commits

Author SHA1 Message Date
Clement Rouault 4efae2194d Adding Process.priority + fix in WMI raised exceptions + add x86.Iret 2017-11-10 11:12:24 +01:00
hakril 14b1cbcf75 Adding improved MEMORY_BASIC_INFORMATION structs 2017-11-10 09:04:22 +01:00
Clement Rouault c7fef877f0 Testing some crypto stuff 2017-10-13 17:56:36 +02:00
hakril 930c992be3 Working on improving crypto stuff 2017-10-09 09:11:48 +02:00
Clement Rouault f6e151a7d5 Adding some crypto api 2017-10-06 17:32:24 +02:00
Clement Rouault 5ee74d5b8f Update rpc doc + sample + new rpc function + new winfunc definition file + fix setup.py 2017-10-05 16:22:16 +02:00
Clement Rouault 7947ace02d Add alpc[Client|Server] __del__ to close handles + NtAlpcDisconnectPort + test 2017-09-15 17:54:19 +02:00
Clement Rouault 1941adc93f Working on RtlGetUnloadEventTraceEx - adding function and struct + fix remotectypes char-array in struct 2017-08-17 18:51:07 +02:00
hakril 3d33c97335 add system.windir + needed winfuncs 2017-08-16 09:25:23 +02:00
Clement Rouault 6898ac02fa First try at MemBP.on_error callback 2017-07-18 12:48:45 +02:00
Clement Rouault 89fe39fadf Adding some ALPC struct/funcs 2017-07-11 18:42:51 +02:00
Clement Rouault 4c8747b628 Add winproxy.MessageBox[AW] 2017-06-07 11:39:37 +02:00
Clement Rouault 9461d4a2fb Add structs/def/funcs + Service.start() 2017-05-24 17:40:31 +02:00
Clement Rouault bc3c033e84 Added some definitions for SID/Privilege/others 2017-05-19 15:37:26 +02:00
hakril f1b1bec903 Working on documentation of windows.crypto 2017-04-12 17:20:36 +02:00
Clement Rouault a107656402 Add SACL/DACL related struct to func/def/structs + some winerror + some crypto func + utility func 2017-04-12 17:20:36 +02:00
Clement Rouault 3f39ca9f0c More work on windows.crypto and Add an encryption sample POC 2017-04-12 17:20:35 +02:00
hakril ae02d9e916 Add some User32 API 2017-04-12 17:19:01 +02:00
Clement Rouault 98bc95204d still Working on windows.crypto object + API + test 2017-04-12 17:19:01 +02:00
hakril 28b2596483 Fix PVOID arguments in function generated + add some func/struct from CryptoAPI 2017-04-12 17:19:01 +02:00
Clement Rouault 5478bda8bc Working on CryptoAPI 2017-04-12 17:19:01 +02:00
hakril 15e40da1ca Playing with CryptoApi 2017-04-12 17:19:01 +02:00
Clement Rouault 0d38c1e268 Add NtAlpcConnectPortEx in winproxy 2016-08-19 10:34:41 +02:00
Clement Rouault 3184cbdeab MemBP has explicit event RWX, add GetProcessDEPPolicy, add Debugger API to disable/re-enable memory BP 2016-07-18 16:23:11 +02:00
Clement Rouault 1590f634d7 Add ReadFile to winproxy 2016-07-13 10:11:05 +02:00
Clement Rouault 2f4eef23aa Add NtCreateFile to winproxy 2016-07-04 18:32:36 +02:00
Clement Rouault 37de039b65 Improve ctypes generation + new struct/func/def for crypt32.dll 2016-07-01 18:13:09 +02:00
Clement Rouault 4436be72c0 first working version of new_generate 2016-06-16 13:31:16 +02:00
Clement Rouault 5c8125a9ff Add get_short_path / get_long_path to windows.utils 2016-05-03 11:23:38 +02:00
Clement Rouault 57634f076c Add process.time_info 2016-04-21 10:58:35 +02:00
Clement Rouault b621e6a09f fix queryworkingset / add test / add virtual protect context manager 2016-04-18 11:24:41 +02:00
Clement Rouault e781e3493f Playing with workingset 2016-04-11 19:15:23 +02:00
Clement Rouault b698b27a6f Add process.query_working_set 2016-04-08 13:45:27 +02:00
Clement Rouault da52b1a014 More Nt def/structs/funcs 2016-03-29 17:19:17 +02:00
Clement Rouault cbd4f0b6b7 More struct/defs/funcs 2016-03-25 15:13:49 +01:00
Clement Rouault 9856a1614b Add firewall interface to system.network 2016-03-25 13:44:04 +01:00
Clement Rouault 1a85d99b0e windows.com with a cleaner interface + use in wmi.pu 2016-03-24 16:03:13 +01:00
Clement Rouault 1422db08ae More winproxy functions 2016-03-22 13:30:44 +01:00
Clement Rouault fb0171b8b9 WinpProcess in not a PROCESSENTRY32 anymore 2016-03-21 13:18:01 +01:00
Clement Rouault 8628ff5595 new funcs + struct + fix winobject 2016-03-18 18:04:50 +01:00
Clement Rouault 78f9733295 Add del_bp + import LocalDebugger 2016-03-18 11:16:53 +01:00
Clement Rouault a4090ea215 Add some defs + wintrust catalog functions 2016-03-16 16:33:38 +01:00
Clement Rouault c40cb0c8b0 Add get_mapped_filename to WinProcess 2016-02-10 16:29:46 +01:00
Clement Rouault 0da86e20aa SetThreadContext 32<->64 + test 2016-02-01 17:31:56 +01:00
hakril ec4862439f Add LdrLoadDLL + Fix winproxy.VirtualProtect Commit2 2016-01-27 12:41:41 +01:00
hakril f6f206b842 Still playing will debug API + add Winprocess.read_[dq]word 2016-01-21 00:43:41 +01:00
Clement Rouault 6b75fe3185 Playing with Token and Debugger API 2016-01-20 19:07:18 +01:00
hakril 8aa2382799 Clean stuff in wintrust + Registry object 2016-01-02 01:38:22 +01:00
hakril 65f3c95539 Including ctypes_generation code in the project 2015-12-30 23:12:56 +01:00
hakril 28eb4df2d0 Testing of project tree rewriting 2015-12-30 22:49:34 +01:00