Clement Rouault
|
5c8125a9ff
|
Add get_short_path / get_long_path to windows.utils
|
2016-05-03 11:23:38 +02:00 |
|
Clement Rouault
|
10a803e9c9
|
Add shr/shl + small fix simple_x64 Imm8 + execute_64bits_code_from_syswow able to return ULONG64
|
2016-05-02 18:21:09 +02:00 |
|
Clement Rouault
|
d7127c108c
|
NtStatusException is a WindowsError
|
2016-05-02 16:23:13 +02:00 |
|
Clement Rouault
|
dfdeb82682
|
Let's call it a version 0.2
V0.2
|
2016-04-27 18:27:11 +02:00 |
|
Clement Rouault
|
feeb2e406e
|
Update readme with more features + some simple demos
|
2016-04-27 18:25:21 +02:00 |
|
Clement Rouault
|
3243f6e8fc
|
more doc
|
2016-04-27 16:36:17 +02:00 |
|
hakril
|
c2c3fe2dc2
|
more doc
|
2016-04-27 00:33:02 +02:00 |
|
Clement Rouault
|
a988ad03e3
|
Add struct + thread.teb_base
|
2016-04-25 17:48:49 +02:00 |
|
Clement Rouault
|
57634f076c
|
Add process.time_info
|
2016-04-21 10:58:35 +02:00 |
|
Clement Rouault
|
085c36c706
|
fix/simplify get_string in pe_parse / adapt syswow.py
|
2016-04-21 10:47:00 +02:00 |
|
Clement Rouault
|
09e9b7efbb
|
Fix get_mapped_filename 32 -> 64 (use NtQueryVirtualMemory)
|
2016-04-19 11:49:33 +02:00 |
|
Clement Rouault
|
5b66242680
|
writing some doc
|
2016-04-18 23:09:26 +02:00 |
|
Clement Rouault
|
4ab9e97667
|
fix setup.py to include windows.test
|
2016-04-18 21:20:02 +02:00 |
|
Clement Rouault
|
cb3c0f20c0
|
pe_parse: fix read string PE32 in process 64b
|
2016-04-18 11:54:51 +02:00 |
|
Clement Rouault
|
b621e6a09f
|
fix queryworkingset / add test / add virtual protect context manager
|
2016-04-18 11:24:41 +02:00 |
|
Clement Rouault
|
3454801ad0
|
small fix in Debugger.add_bp
|
2016-04-11 19:15:39 +02:00 |
|
Clement Rouault
|
e781e3493f
|
Playing with workingset
|
2016-04-11 19:15:23 +02:00 |
|
Clement Rouault
|
85cb4eef1b
|
add some additional info to full_signature_information
|
2016-04-11 10:16:06 +02:00 |
|
Clement Rouault
|
18bba9b24e
|
Fix pe_parse to handle 32bits PE in 64bits process (PE32 .NET)
|
2016-04-08 16:11:55 +02:00 |
|
Clement Rouault
|
ef9b2486ec
|
fix + add some info in Section
|
2016-04-08 13:46:06 +02:00 |
|
Clement Rouault
|
b698b27a6f
|
Add process.query_working_set
|
2016-04-08 13:45:27 +02:00 |
|
Clement Rouault
|
0e9ec9ed82
|
add / fix in registry and registry sample
|
2016-04-01 17:34:56 +02:00 |
|
Clement Rouault
|
6c1b4cf5e6
|
More doc / sample
|
2016-03-30 18:27:40 +02:00 |
|
Clement Rouault
|
96c8d68297
|
kernobj.py -> WinObj explorer
|
2016-03-30 15:28:04 +02:00 |
|
hakril
|
53e131831d
|
Writing / updating some doc
|
2016-03-29 23:41:54 +02:00 |
|
Clement Rouault
|
4c1192bf75
|
Fix crash du to bad declaration / size of CONTEXT64
|
2016-03-29 18:53:04 +02:00 |
|
Clement Rouault
|
da52b1a014
|
More Nt def/structs/funcs
|
2016-03-29 17:19:17 +02:00 |
|
Clement Rouault
|
cf8386400f
|
Fix WinUnicodeString to use Length
|
2016-03-29 14:01:40 +02:00 |
|
Clement Rouault
|
ff5ce9ae86
|
Add EnumType for generated enum
|
2016-03-25 16:59:40 +01:00 |
|
Clement Rouault
|
480cbcf1dc
|
Improving com / wmi API / code
|
2016-03-25 15:14:53 +01:00 |
|
Clement Rouault
|
cbd4f0b6b7
|
More struct/defs/funcs
|
2016-03-25 15:13:49 +01:00 |
|
Clement Rouault
|
9856a1614b
|
Add firewall interface to system.network
|
2016-03-25 13:44:04 +01:00 |
|
Clement Rouault
|
eadc0c6963
|
More COM interfaces/ API
|
2016-03-24 18:14:45 +01:00 |
|
Clement Rouault
|
374e842d3d
|
Add com interfaces generated file
|
2016-03-24 16:05:09 +01:00 |
|
Clement Rouault
|
1a85d99b0e
|
windows.com with a cleaner interface + use in wmi.pu
|
2016-03-24 16:03:13 +01:00 |
|
Clement Rouault
|
d794ac8ceb
|
Cleaning/working on windows.com API
|
2016-03-24 15:23:15 +01:00 |
|
Clement Rouault
|
641790f917
|
Still working on COM ctypes generation
|
2016-03-24 14:14:39 +01:00 |
|
Clement Rouault
|
1b33bbb025
|
Beginning to generate ctypes for COM interfaces
|
2016-03-23 22:11:35 +01:00 |
|
Clement Rouault
|
34ae5084cd
|
Working/Trying com ctypes generator
|
2016-03-23 19:04:15 +01:00 |
|
Clement Rouault
|
3cb8cc6f9e
|
Refactor: new winobject directory
|
2016-03-23 13:42:54 +01:00 |
|
Clement Rouault
|
c24816f51f
|
Improve create_process + test some other utils
|
2016-03-22 13:40:03 +01:00 |
|
Clement Rouault
|
d096da3709
|
Exploring on system attribute and Token
|
2016-03-22 13:39:37 +01:00 |
|
Clement Rouault
|
9cae319c11
|
New registry API
|
2016-03-22 13:39:11 +01:00 |
|
Clement Rouault
|
f06afc9b79
|
winproxy imported directly, use same format for call
|
2016-03-22 13:38:45 +01:00 |
|
Clement Rouault
|
db4c51dc67
|
Syswow64ApiProxy now handle None from OptionalExport
|
2016-03-22 13:37:22 +01:00 |
|
Clement Rouault
|
1422db08ae
|
More winproxy functions
|
2016-03-22 13:30:44 +01:00 |
|
Clement Rouault
|
16ef768f3f
|
Unifor the import / use of winproxy
|
2016-03-21 13:27:23 +01:00 |
|
Clement Rouault
|
fb0171b8b9
|
WinpProcess in not a PROCESSENTRY32 anymore
|
2016-03-21 13:18:01 +01:00 |
|
Clement Rouault
|
8628ff5595
|
new funcs + struct + fix winobject
|
2016-03-18 18:04:50 +01:00 |
|
Clement Rouault
|
5f1c841b75
|
Add ctypes struct pprinter
|
2016-03-18 18:03:45 +01:00 |
|