50 Commits

Author	SHA1	Message	Date
clement rouault	dfdad6edf0	Added some fields to windows.debug.symbols.SymbolType	2021-06-21 10:46:54 +02:00
hakril	0fa8026c1b	Fix localdebugger (and sample) for python3	2020-06-05 17:10:45 +02:00
hakril	e4c0f8645e	Adapted symbol code & samples for py3 compat	2020-05-18 23:07:33 +02:00
hakril	2e48f9008a	Multiple docs update some __init__.py code (windows.debug not imported by default anymore)	2020-05-18 22:58:52 +02:00
hakril	e70c97cbfc	Added symbol sample + SymbolDebugger	2020-05-18 22:48:12 +02:00
hakril	027b7c1c64	Working on symbols documentation	2020-05-15 00:30:05 +02:00
hakril	ed0099fd57	PFW symbols engine can now pull dbghelp.dll path from env var PFW_DBGHELP_PATH	2020-05-05 16:29:02 +02:00
hakril	466d94c03c	Fixed broken basestring for py3 compatibility (see issue #15)	2020-05-02 23:12:25 +02:00
hakril	f63f7f308a	Some quick and dirty fix for debugger/breakpoint in python3	2020-03-29 21:41:48 +02:00
hakril	546818f91b	Added a sample for windows.debug.FunctionCallBP : change_function_ret_value.py	2020-03-10 23:59:50 +01:00
hakril	f403856e26	Debugger test pass on py3	2020-02-08 00:15:41 +01:00
hakril	c589a41902	[WIP] saving POC of symbol	2020-01-17 21:07:35 +01:00
hakril	6f55d2e48f	Fix a bug in debugger when detaching after a Ctrl+c during a BP	2019-10-19 00:39:03 +02:00
hakril	3fe7ee2cce	Fix bug in debugger caused by on_setup new code	2019-01-03 22:00:01 +01:00
hakril	784e669597	update debugger.py with new on_setup callback"	2018-12-21 16:22:38 +01:00
hakril	1ee9a8bc46	new POC for breakpoint with parameters extraction	2018-06-05 21:54:26 +02:00
hakril	3dcd27a1ca	Fix ntdll-registry winproxy error check + add LocalDebugger.current_thread to match Debugger API	2018-06-05 21:53:35 +02:00
Clement Rouault	7db5620210	more pytest POC + fixed debugger code + test FunctionHXBP	2017-09-07 17:13:59 +02:00
Clement Rouault	16e29bd938	Added a sample for Debugger.attach	2017-08-16 18:07:00 +02:00
Clement Rouault	c76a50c045	add doc to alpc.py + improve doc now that Winstruct are documented	2017-08-16 17:38:18 +02:00
Clement Rouault	6898ac02fa	First try at MemBP.on_error callback	2017-07-18 12:48:45 +02:00
Clement Rouault	aff6ee4e17	replace PORT_MESSAGE struct def with PORT_MESSAGE[32|64] + FunctionBP can get the function via a class parameter	2017-06-21 13:16:22 +02:00
Clement Rouault	a89854a045	PrintBP now accept a pre-format fonction to forge new format parameters	2017-05-24 17:45:27 +02:00
Clement Rouault	d24e62e319	Add PrintBP + few fix in Debugger + simple string-address resolution in localdebugger	2017-05-19 15:39:32 +02:00
Clement Rouault	48fbeaee77	Fix bug in debugger: close EVENT_INFO hFile only if not NULL	2017-04-27 14:10:03 +02:00
Clement Rouault	c0d03a2f58	Fix some handle leak, debugger close hFile on event + enumerate processes/threads close snap handle	2017-04-26 14:46:45 +02:00
Clement Rouault	feb76b48c3	unit tests now check for uncollectable-object (gc.garbage)	2017-04-26 11:07:52 +02:00
Clement Rouault	3f6131d621	Fix implem of bp exe!(offset|API) + add test for this case	2017-04-21 17:30:18 +02:00
Clement Rouault	120e9bfa6f	Add exe in the debugger list of modules (for bp)	2017-04-21 15:03:48 +02:00
Clement Rouault	64f56d3977	Identified a possible bug with Debugger._explicit_single_step + some DBGPRINT	2017-04-12 17:20:35 +02:00
hakril	d2b801cada	Fix handle_exit_process + detach in Debugger to prevent keeping ref on process + fix pe_parse IATHook: all test pass	2017-04-12 17:19:01 +02:00
hakril	03aec90d63	WIP: fixing handle 'leak' in dbg that require manual garbare collection for now	2017-04-12 17:19:01 +02:00
hakril	e17400ed63	Debugger.detach remove self.target + better handling/clean of Thread/Process handles	2017-04-12 17:19:00 +02:00
Clement Rouault	11bdbd8873	Remove TrapFlag when detaching debugger	2016-08-23 11:56:54 +02:00
Clement Rouault	943945225a	Improve debugger/BP doc + add sample + small fixes in WMI/LocalDebugger + new data in ApiProxy for FunctionBP	2016-08-19 15:06:26 +02:00
Clement Rouault	20fe59cf78	Implement Debugger.detach	2016-08-08 10:39:25 +02:00
Clement Rouault	fe4d41db47	Add/Update some doc	2016-07-27 18:20:36 +02:00
Clement Rouault	f54a64670e	Add context_syswow/set_syswow_context + debugger able to handle BP in 64b part of syswow process	2016-07-20 18:21:28 +02:00
Clement Rouault	48a40fa520	Improve MemBP API + restore target memory on break	2016-07-20 13:16:06 +02:00
Clement Rouault	2fec6a68b1	Fix calcul of full_page_events (translate events to set) in remove_bp	2016-07-18 17:40:50 +02:00
Clement Rouault	98a481ca93	DisabledMemoryBreakpoint now reput only the non-deleted BP + fix syntax (cc heurs <3)	2016-07-18 17:38:46 +02:00
Clement Rouault	13f231d6ad	debugger disable memory breakpoint before calling membp.trigger()	2016-07-18 16:30:17 +02:00
Clement Rouault	3184cbdeab	MemBP has explicit event RWX, add GetProcessDEPPolicy, add Debugger API to disable/re-enable memory BP	2016-07-18 16:23:11 +02:00
Clement Rouault	19205f73a1	Improve debugger handling of memBP for future use + fix MemBP prot init + add failing test of multitple BP with diff prot	2016-07-13 18:23:26 +02:00
Clement Rouault	82621b881a	Add get_memory_breakpoint_at to debugger + fix token_user in process + add prot param to virtual_alloc	2016-07-13 16:28:31 +02:00
Clement Rouault	d90e461bcf	Playing with advanced breakpoint	2016-07-13 13:54:42 +02:00
Clement Rouault	1f6ffd043c	Better implementation of MemoryBP	2016-07-13 13:50:44 +02:00
Clement Rouault	8bf3c0312c	Checking the beginning of the MemBP is important too...	2016-07-08 17:23:26 +02:00
Clement Rouault	400b7b91b0	First try at all BP remove + check range on MemBP for call to .trigger() else ignore	2016-07-08 17:18:57 +02:00
Clement Rouault	2f06e9e844	Commit <a l'arrache> for a quick implem of del_bp on standard BP	2016-07-08 16:21:57 +02:00