Clement Rouault
|
56b8264ffd
|
Add x64.assemble + sample test_code
|
2016-06-28 11:31:53 +02:00 |
|
Clement Rouault
|
ce7866cbf3
|
Improve x86.assemble for int + a demo of code tester
|
2016-06-28 11:03:57 +02:00 |
|
Clement Rouault
|
ed42580b4e
|
Fix some x64 encoding of [NEW_REG] | pop/push [RAX] doest not contains a useless prefix anymore
|
2016-06-27 14:51:47 +02:00 |
|
Clement Rouault
|
75c64e4490
|
Create usable API for sub ctypes generator
|
2016-06-24 16:57:21 +02:00 |
|
Clement Rouault
|
86fe9c9f82
|
Update generation for ntstatus and add a parallele define module to ApiProxy
|
2016-06-24 16:55:25 +02:00 |
|
Clement Rouault
|
75c48103c4
|
Added SetConsoleCtrlHandler to winproxy
|
2016-06-17 11:14:46 +02:00 |
|
Clement Rouault
|
4a0669ad41
|
Add COMImplementation
|
2016-06-17 10:18:12 +02:00 |
|
Clement Rouault
|
acdd3ac93e
|
new_generate.py replace old one
|
2016-06-16 15:45:18 +02:00 |
|
Clement Rouault
|
48f6eed961
|
Working on 'API' to easily import/use new_generate
|
2016-06-16 15:11:29 +02:00 |
|
Clement Rouault
|
4436be72c0
|
first working version of new_generate
|
2016-06-16 13:31:16 +02:00 |
|
Clement Rouault
|
e42dafee7c
|
working on cleaner generate.py
|
2016-06-16 11:16:33 +02:00 |
|
Clement Rouault
|
2289895423
|
Add test + fix Imm32 stuff in x64
|
2016-06-13 18:19:38 +02:00 |
|
Clement Rouault
|
0f5fce424b
|
Fix test_hook to disable the hook after test
|
2016-06-13 18:18:59 +02:00 |
|
Clement Rouault
|
0b32302591
|
Remove generate_callback_stub (only IATHook are impacted)
|
2016-06-09 18:51:48 +02:00 |
|
Clement Rouault
|
e1f7f1e500
|
execute_python doest not reinject the shellcode everytime + test hook 64b
|
2016-06-08 11:01:19 +02:00 |
|
Clement Rouault
|
f23357c13e
|
Testing hook without generated stub + new hook test in new file
|
2016-06-07 19:59:00 +02:00 |
|
Clement Rouault
|
bc9d3b61ef
|
Draft version of system handles
|
2016-06-07 17:13:44 +02:00 |
|
Clement Rouault
|
971610bbe3
|
[WIP] system.handles
|
2016-06-06 17:24:30 +02:00 |
|
Clement Rouault
|
3d51278039
|
fix UNICODE_STRING.str / test assemblers / improve com_parser for future work
|
2016-06-06 17:24:10 +02:00 |
|
Clement Rouault
|
899e6b9147
|
Removed a debug print
|
2016-05-23 09:48:00 +02:00 |
|
hakril
|
aaa680c61c
|
Fix CurrentProcessReadSyswow for windows10
|
2016-05-22 12:00:34 +02:00 |
|
Clement Rouault
|
976ce78455
|
First try to replace unexisting GetThreadId on XP
|
2016-05-20 18:03:36 +02:00 |
|
Clement Rouault
|
8bee07b8dc
|
Add REG_QWORD handling in registry.py
|
2016-05-19 10:59:43 +02:00 |
|
Clement Rouault
|
d09cb4ca51
|
Add winproxy.is_implemented
|
2016-05-18 10:54:58 +02:00 |
|
Clement Rouault
|
dfe8217259
|
Fix system.version_name on windows10
|
2016-05-13 16:31:07 +02:00 |
|
Clement Rouault
|
55c4721774
|
Fix exception stack update in LocalDebugger
|
2016-05-09 18:52:55 +02:00 |
|
Clement Rouault
|
5c8125a9ff
|
Add get_short_path / get_long_path to windows.utils
|
2016-05-03 11:23:38 +02:00 |
|
Clement Rouault
|
10a803e9c9
|
Add shr/shl + small fix simple_x64 Imm8 + execute_64bits_code_from_syswow able to return ULONG64
|
2016-05-02 18:21:09 +02:00 |
|
Clement Rouault
|
d7127c108c
|
NtStatusException is a WindowsError
|
2016-05-02 16:23:13 +02:00 |
|
Clement Rouault
|
dfdeb82682
|
Let's call it a version 0.2
V0.2
|
2016-04-27 18:27:11 +02:00 |
|
Clement Rouault
|
feeb2e406e
|
Update readme with more features + some simple demos
|
2016-04-27 18:25:21 +02:00 |
|
Clement Rouault
|
3243f6e8fc
|
more doc
|
2016-04-27 16:36:17 +02:00 |
|
hakril
|
c2c3fe2dc2
|
more doc
|
2016-04-27 00:33:02 +02:00 |
|
Clement Rouault
|
a988ad03e3
|
Add struct + thread.teb_base
|
2016-04-25 17:48:49 +02:00 |
|
Clement Rouault
|
57634f076c
|
Add process.time_info
|
2016-04-21 10:58:35 +02:00 |
|
Clement Rouault
|
085c36c706
|
fix/simplify get_string in pe_parse / adapt syswow.py
|
2016-04-21 10:47:00 +02:00 |
|
Clement Rouault
|
09e9b7efbb
|
Fix get_mapped_filename 32 -> 64 (use NtQueryVirtualMemory)
|
2016-04-19 11:49:33 +02:00 |
|
Clement Rouault
|
5b66242680
|
writing some doc
|
2016-04-18 23:09:26 +02:00 |
|
Clement Rouault
|
4ab9e97667
|
fix setup.py to include windows.test
|
2016-04-18 21:20:02 +02:00 |
|
Clement Rouault
|
cb3c0f20c0
|
pe_parse: fix read string PE32 in process 64b
|
2016-04-18 11:54:51 +02:00 |
|
Clement Rouault
|
b621e6a09f
|
fix queryworkingset / add test / add virtual protect context manager
|
2016-04-18 11:24:41 +02:00 |
|
Clement Rouault
|
3454801ad0
|
small fix in Debugger.add_bp
|
2016-04-11 19:15:39 +02:00 |
|
Clement Rouault
|
e781e3493f
|
Playing with workingset
|
2016-04-11 19:15:23 +02:00 |
|
Clement Rouault
|
85cb4eef1b
|
add some additional info to full_signature_information
|
2016-04-11 10:16:06 +02:00 |
|
Clement Rouault
|
18bba9b24e
|
Fix pe_parse to handle 32bits PE in 64bits process (PE32 .NET)
|
2016-04-08 16:11:55 +02:00 |
|
Clement Rouault
|
ef9b2486ec
|
fix + add some info in Section
|
2016-04-08 13:46:06 +02:00 |
|
Clement Rouault
|
b698b27a6f
|
Add process.query_working_set
|
2016-04-08 13:45:27 +02:00 |
|
Clement Rouault
|
0e9ec9ed82
|
add / fix in registry and registry sample
|
2016-04-01 17:34:56 +02:00 |
|
Clement Rouault
|
6c1b4cf5e6
|
More doc / sample
|
2016-03-30 18:27:40 +02:00 |
|
Clement Rouault
|
96c8d68297
|
kernobj.py -> WinObj explorer
|
2016-03-30 15:28:04 +02:00 |
|