Commit Graph

162 Commits

Author SHA1 Message Date
Clement Rouault 85cb4eef1b add some additional info to full_signature_information 2016-04-11 10:16:06 +02:00
Clement Rouault 18bba9b24e Fix pe_parse to handle 32bits PE in 64bits process (PE32 .NET) 2016-04-08 16:11:55 +02:00
Clement Rouault ef9b2486ec fix + add some info in Section 2016-04-08 13:46:06 +02:00
Clement Rouault b698b27a6f Add process.query_working_set 2016-04-08 13:45:27 +02:00
Clement Rouault 0e9ec9ed82 add / fix in registry and registry sample 2016-04-01 17:34:56 +02:00
Clement Rouault 6c1b4cf5e6 More doc / sample 2016-03-30 18:27:40 +02:00
Clement Rouault 96c8d68297 kernobj.py -> WinObj explorer 2016-03-30 15:28:04 +02:00
hakril 53e131831d Writing / updating some doc 2016-03-29 23:41:54 +02:00
Clement Rouault 4c1192bf75 Fix crash du to bad declaration / size of CONTEXT64 2016-03-29 18:53:04 +02:00
Clement Rouault da52b1a014 More Nt def/structs/funcs 2016-03-29 17:19:17 +02:00
Clement Rouault cf8386400f Fix WinUnicodeString to use Length 2016-03-29 14:01:40 +02:00
Clement Rouault ff5ce9ae86 Add EnumType for generated enum 2016-03-25 16:59:40 +01:00
Clement Rouault 480cbcf1dc Improving com / wmi API / code 2016-03-25 15:14:53 +01:00
Clement Rouault cbd4f0b6b7 More struct/defs/funcs 2016-03-25 15:13:49 +01:00
Clement Rouault 9856a1614b Add firewall interface to system.network 2016-03-25 13:44:04 +01:00
Clement Rouault eadc0c6963 More COM interfaces/ API 2016-03-24 18:14:45 +01:00
Clement Rouault 374e842d3d Add com interfaces generated file 2016-03-24 16:05:09 +01:00
Clement Rouault 1a85d99b0e windows.com with a cleaner interface + use in wmi.pu 2016-03-24 16:03:13 +01:00
Clement Rouault d794ac8ceb Cleaning/working on windows.com API 2016-03-24 15:23:15 +01:00
Clement Rouault 641790f917 Still working on COM ctypes generation 2016-03-24 14:14:39 +01:00
Clement Rouault 1b33bbb025 Beginning to generate ctypes for COM interfaces 2016-03-23 22:11:35 +01:00
Clement Rouault 34ae5084cd Working/Trying com ctypes generator 2016-03-23 19:04:15 +01:00
Clement Rouault 3cb8cc6f9e Refactor: new winobject directory 2016-03-23 13:42:54 +01:00
Clement Rouault c24816f51f Improve create_process + test some other utils 2016-03-22 13:40:03 +01:00
Clement Rouault d096da3709 Exploring on system attribute and Token 2016-03-22 13:39:37 +01:00
Clement Rouault 9cae319c11 New registry API 2016-03-22 13:39:11 +01:00
Clement Rouault f06afc9b79 winproxy imported directly, use same format for call 2016-03-22 13:38:45 +01:00
Clement Rouault db4c51dc67 Syswow64ApiProxy now handle None from OptionalExport 2016-03-22 13:37:22 +01:00
Clement Rouault 1422db08ae More winproxy functions 2016-03-22 13:30:44 +01:00
Clement Rouault 16ef768f3f Unifor the import / use of winproxy 2016-03-21 13:27:23 +01:00
Clement Rouault fb0171b8b9 WinpProcess in not a PROCESSENTRY32 anymore 2016-03-21 13:18:01 +01:00
Clement Rouault 8628ff5595 new funcs + struct + fix winobject 2016-03-18 18:04:50 +01:00
Clement Rouault 5f1c841b75 Add ctypes struct pprinter 2016-03-18 18:03:45 +01:00
Clement Rouault 6a305458d5 Add signature verification by catalog 2016-03-18 18:01:57 +01:00
Clement Rouault faa0acd030 Add services and volumes files 2016-03-18 11:24:02 +01:00
Clement Rouault 78f9733295 Add del_bp + import LocalDebugger 2016-03-18 11:16:53 +01:00
Clement Rouault a4090ea215 Add some defs + wintrust catalog functions 2016-03-16 16:33:38 +01:00
Clement Rouault 9db75b0226 Add some doc/sample on LocalDebugger 2016-02-12 15:06:41 +01:00
Clement Rouault 5ffa21cd8a LocalDebugger sample + fix 2016-02-12 14:44:00 +01:00
hakril 9a1088daab Small fixes in DOC + update winproxy function list 2016-02-10 23:01:32 +01:00
Clement Rouault f9ce637ffa Small doc stuff + fix setup.py 2016-02-10 17:51:54 +01:00
Clement Rouault c5e021f10d Writing samples and doc ! 2016-02-10 17:30:54 +01:00
Clement Rouault c40cb0c8b0 Add get_mapped_filename to WinProcess 2016-02-10 16:29:46 +01:00
Clement Rouault b789a12040 Improve debugger + pe_parse 'guess' the PE type (32/64) 2016-02-10 16:27:53 +01:00
Clement Rouault 401db9c347 Working on debugger (str address + rewrite + test) 2016-02-10 11:53:13 +01:00
Clement Rouault 6cf4a9cae4 Add test / fix Winprocess.load_library / free some of the memory 2016-02-03 17:47:07 +01:00
Clement Rouault 9fbba331ca Add NTSTATUS to windef/add virtual_free/improve nativeutils GetProcAddr + test 2016-02-02 18:45:24 +01:00
Clement Rouault 3f06e95617 First - shameful version of syswow64 debugging 2016-02-01 18:45:51 +01:00
Clement Rouault 0da86e20aa SetThreadContext 32<->64 + test 2016-02-01 17:31:56 +01:00
Clement Rouault d720170781 Big commit GetProcAddrss 32 and 64 (fixed) 2016-01-29 18:05:21 +01:00