Commit Graph

205 Commits

Author SHA1 Message Date
Clement Rouault 56b8264ffd Add x64.assemble + sample test_code 2016-06-28 11:31:53 +02:00
Clement Rouault ce7866cbf3 Improve x86.assemble for int + a demo of code tester 2016-06-28 11:03:57 +02:00
Clement Rouault ed42580b4e Fix some x64 encoding of [NEW_REG] | pop/push [RAX] doest not contains a useless prefix anymore 2016-06-27 14:51:47 +02:00
Clement Rouault 75c64e4490 Create usable API for sub ctypes generator 2016-06-24 16:57:21 +02:00
Clement Rouault 86fe9c9f82 Update generation for ntstatus and add a parallele define module to ApiProxy 2016-06-24 16:55:25 +02:00
Clement Rouault 75c48103c4 Added SetConsoleCtrlHandler to winproxy 2016-06-17 11:14:46 +02:00
Clement Rouault 4a0669ad41 Add COMImplementation 2016-06-17 10:18:12 +02:00
Clement Rouault acdd3ac93e new_generate.py replace old one 2016-06-16 15:45:18 +02:00
Clement Rouault 48f6eed961 Working on 'API' to easily import/use new_generate 2016-06-16 15:11:29 +02:00
Clement Rouault 4436be72c0 first working version of new_generate 2016-06-16 13:31:16 +02:00
Clement Rouault e42dafee7c working on cleaner generate.py 2016-06-16 11:16:33 +02:00
Clement Rouault 2289895423 Add test + fix Imm32 stuff in x64 2016-06-13 18:19:38 +02:00
Clement Rouault 0f5fce424b Fix test_hook to disable the hook after test 2016-06-13 18:18:59 +02:00
Clement Rouault 0b32302591 Remove generate_callback_stub (only IATHook are impacted) 2016-06-09 18:51:48 +02:00
Clement Rouault e1f7f1e500 execute_python doest not reinject the shellcode everytime + test hook 64b 2016-06-08 11:01:19 +02:00
Clement Rouault f23357c13e Testing hook without generated stub + new hook test in new file 2016-06-07 19:59:00 +02:00
Clement Rouault bc9d3b61ef Draft version of system handles 2016-06-07 17:13:44 +02:00
Clement Rouault 971610bbe3 [WIP] system.handles 2016-06-06 17:24:30 +02:00
Clement Rouault 3d51278039 fix UNICODE_STRING.str / test assemblers / improve com_parser for future work 2016-06-06 17:24:10 +02:00
Clement Rouault 899e6b9147 Removed a debug print 2016-05-23 09:48:00 +02:00
hakril aaa680c61c Fix CurrentProcessReadSyswow for windows10 2016-05-22 12:00:34 +02:00
Clement Rouault 976ce78455 First try to replace unexisting GetThreadId on XP 2016-05-20 18:03:36 +02:00
Clement Rouault 8bee07b8dc Add REG_QWORD handling in registry.py 2016-05-19 10:59:43 +02:00
Clement Rouault d09cb4ca51 Add winproxy.is_implemented 2016-05-18 10:54:58 +02:00
Clement Rouault dfe8217259 Fix system.version_name on windows10 2016-05-13 16:31:07 +02:00
Clement Rouault 55c4721774 Fix exception stack update in LocalDebugger 2016-05-09 18:52:55 +02:00
Clement Rouault 5c8125a9ff Add get_short_path / get_long_path to windows.utils 2016-05-03 11:23:38 +02:00
Clement Rouault 10a803e9c9 Add shr/shl + small fix simple_x64 Imm8 + execute_64bits_code_from_syswow able to return ULONG64 2016-05-02 18:21:09 +02:00
Clement Rouault d7127c108c NtStatusException is a WindowsError 2016-05-02 16:23:13 +02:00
Clement Rouault dfdeb82682 Let's call it a version 0.2 V0.2 2016-04-27 18:27:11 +02:00
Clement Rouault feeb2e406e Update readme with more features + some simple demos 2016-04-27 18:25:21 +02:00
Clement Rouault 3243f6e8fc more doc 2016-04-27 16:36:17 +02:00
hakril c2c3fe2dc2 more doc 2016-04-27 00:33:02 +02:00
Clement Rouault a988ad03e3 Add struct + thread.teb_base 2016-04-25 17:48:49 +02:00
Clement Rouault 57634f076c Add process.time_info 2016-04-21 10:58:35 +02:00
Clement Rouault 085c36c706 fix/simplify get_string in pe_parse / adapt syswow.py 2016-04-21 10:47:00 +02:00
Clement Rouault 09e9b7efbb Fix get_mapped_filename 32 -> 64 (use NtQueryVirtualMemory) 2016-04-19 11:49:33 +02:00
Clement Rouault 5b66242680 writing some doc 2016-04-18 23:09:26 +02:00
Clement Rouault 4ab9e97667 fix setup.py to include windows.test 2016-04-18 21:20:02 +02:00
Clement Rouault cb3c0f20c0 pe_parse: fix read string PE32 in process 64b 2016-04-18 11:54:51 +02:00
Clement Rouault b621e6a09f fix queryworkingset / add test / add virtual protect context manager 2016-04-18 11:24:41 +02:00
Clement Rouault 3454801ad0 small fix in Debugger.add_bp 2016-04-11 19:15:39 +02:00
Clement Rouault e781e3493f Playing with workingset 2016-04-11 19:15:23 +02:00
Clement Rouault 85cb4eef1b add some additional info to full_signature_information 2016-04-11 10:16:06 +02:00
Clement Rouault 18bba9b24e Fix pe_parse to handle 32bits PE in 64bits process (PE32 .NET) 2016-04-08 16:11:55 +02:00
Clement Rouault ef9b2486ec fix + add some info in Section 2016-04-08 13:46:06 +02:00
Clement Rouault b698b27a6f Add process.query_working_set 2016-04-08 13:45:27 +02:00
Clement Rouault 0e9ec9ed82 add / fix in registry and registry sample 2016-04-01 17:34:56 +02:00
Clement Rouault 6c1b4cf5e6 More doc / sample 2016-03-30 18:27:40 +02:00
Clement Rouault 96c8d68297 kernobj.py -> WinObj explorer 2016-03-30 15:28:04 +02:00