 hakril
|
91cbcce38f
|
Added some definition + POC of FlagExtractor
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
33ca0c9c34
|
Added many security-related defines + moved improved-psid in extended_structs
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
967c18d521
|
Added POC WinProcess.memory_info + some crypto defines
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
570436120b
|
Added some functions
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
7a313f57c1
|
Added some crypto-related ctypes_generation definitions + generate.py now try to check for out-of-order definition
|
2018-11-24 22:59:00 +01:00 |
|
|
hakril
|
c97d149630
|
Added some ctypes_generation definitions
|
2018-08-02 18:42:36 +02:00 |
|
|
hakril
|
e6a022f8be
|
Add windows.system.edition
|
2018-07-13 18:08:00 +02:00 |
|
|
hakril
|
d232928780
|
Added some generated def + some winproxy functions
|
2018-07-13 14:33:50 +02:00 |
|
|
hakril
|
3dcd27a1ca
|
Fix ntdll-registry winproxy error check + add LocalDebugger.current_thread to match Debugger API
|
2018-06-05 21:53:35 +02:00 |
|
|
hakril
|
3d69ad3cb5
|
Add some definition in ctypes generation + winproxy wrappers; fix com.py imports
|
2018-06-05 11:38:57 +02:00 |
|
|
hakril
|
849d64378f
|
Commit current work on scheduled tasks
|
2018-05-12 00:11:10 +02:00 |
|
|
hakril
|
b88ce36acb
|
Add somme Evt-related define/structs/functions
|
2018-03-27 20:46:54 +02:00 |
|
|
hakril
|
4564be8488
|
Adding IShellLinkW + commit generated defs
|
2018-03-27 20:44:54 +02:00 |
|
|
hakril
|
094979f7c0
|
Add NtWriteVirtualMemory + fix some winfunc param/ret-val type
|
2018-03-22 19:28:54 +01:00 |
|
|
hakril
|
af6943992a
|
cgen: Function generated after COM, handle COM variadic (cdecl) defintion + Comimplem.IID generated avec _functions_ + Add some COM/ComInterceptor definitions
|
2018-03-08 22:35:54 +01:00 |
|
|
hakril
|
8840b9fdb9
|
updated doc
|
2018-03-07 10:24:46 +01:00 |
|
|
hakril
|
1dc13b1a35
|
Adding some PE related windef + CertFreeCertificateContext
|
2018-03-04 18:45:23 +01:00 |
|
|
hakril
|
805e735a88
|
Added some ctypes definitions
|
2018-03-03 16:49:53 +01:00 |
|
|
hakril
|
b2a72f11cc
|
Add windows.pipe for simpler communication with injected process
|
2018-02-02 10:27:04 +01:00 |
|
|
hakril
|
4251b18041
|
Fix ctypes generation + COM interface dependance check + add IPersistFile, IShellLink, strucs/defs
|
2018-01-25 16:51:04 +01:00 |
|
|
hakril
|
82e464d527
|
Replaced old generate.py with new ctypes generation code !
|
2018-01-19 18:11:16 +01:00 |
|
|
hakril
|
445de0b007
|
Commit generated def before switching generator code
|
2018-01-19 17:33:33 +01:00 |
|
|
hakril
|
715a7fee95
|
Add CryptMsgVerifyCountersignatureEncoded[Ex] and some crypto definition
|
2018-01-13 16:39:53 +01:00 |
|
|
hakril
|
32de3cb824
|
Improve ApiSetMap resolve to match ntdll behavior + add sizekey option to encryption_demo genkey option
|
2017-12-06 10:21:40 +01:00 |
|
|
hakril
|
8f7adb8da1
|
Add fuller PEB structure + Improved UNICODE_STRING + other define
|
2017-12-04 10:01:40 +01:00 |
|
|
hakril
|
f03bb89ae6
|
Working on time translation (filetime - unix - datetime) and windows volume objects
|
2017-11-28 10:50:02 +01:00 |
|
|
hakril
|
22224b52e2
|
Added utils.query_file_informations wrapper arround new winproxy.NtQueryInformationFile
|
2017-11-27 10:13:13 +01:00 |
|
|
hakril
|
f54599568d
|
Working on eventlog
|
2017-11-24 17:17:35 +01:00 |
|
|
Clement Rouault
|
d12bae6dbb
|
Remove 'WinUnicodeString' and add un extended struct _LSA_UNICODE_STRING: simplify lots of things
|
2017-11-17 15:13:34 +01:00 |
|
|
Clement Rouault
|
51bc3fdf7c
|
Improve _GUID & typedef definition + add a sample using gdef.meta to search for a name/value in generated defs
|
2017-11-15 15:20:38 +01:00 |
|
|
Clement Rouault
|
8ba325afd2
|
Add a new FlagMapper to easily transform int to Flag and change to code use it
|
2017-11-10 13:47:27 +01:00 |
|
|
Clement Rouault
|
4efae2194d
|
Adding Process.priority + fix in WMI raised exceptions + add x86.Iret
|
2017-11-10 11:12:24 +01:00 |
|
|
hakril
|
14b1cbcf75
|
Adding improved MEMORY_BASIC_INFORMATION structs
|
2017-11-10 09:04:22 +01:00 |
|
|
hakril
|
2094ab4ad4
|
Fix some docstring + re-add windows.test.pop_proc_[32|64] + fix all samples + few doc adapt
|
2017-10-15 00:13:07 +02:00 |
|
|
hakril
|
930c992be3
|
Working on improving crypto stuff
|
2017-10-09 09:11:48 +02:00 |
|
|
Clement Rouault
|
f6e151a7d5
|
Adding some crypto api
|
2017-10-06 17:32:24 +02:00 |
|
|
Clement Rouault
|
fccd2a49e6
|
Add doc to RPC + RPC_IF_ID generated-extended + lsass sample
|
2017-08-30 18:29:49 +02:00 |
|
|
Clement Rouault
|
d44a3b032e
|
Add extended struct to ctypes generation + extended IID now in winstructs.py and used everywhere
|
2017-08-29 11:39:43 +02:00 |
|
|
Clement Rouault
|
1941adc93f
|
Working on RtlGetUnloadEventTraceEx - adding function and struct + fix remotectypes char-array in struct
|
2017-08-17 18:51:07 +02:00 |
|
|
hakril
|
3d33c97335
|
add system.windir + needed winfuncs
|
2017-08-16 09:25:23 +02:00 |
|
|
Clement Rouault
|
61ac5c8c5d
|
Fix EnumValue pickling for protocol 2
|
2017-08-10 17:07:41 +02:00 |
|
|
Clement Rouault
|
aa22f1515d
|
Working on new windows.alpc
|
2017-07-28 09:20:40 +02:00 |
|
|
Clement Rouault
|
6898ac02fa
|
First try at MemBP.on_error callback
|
2017-07-18 12:48:45 +02:00 |
|
|
Clement Rouault
|
89fe39fadf
|
Adding some ALPC struct/funcs
|
2017-07-11 18:42:51 +02:00 |
|
|
Clement Rouault
|
aff6ee4e17
|
replace PORT_MESSAGE struct def with PORT_MESSAGE[32|64] + FunctionBP can get the function via a class parameter
|
2017-06-21 13:16:22 +02:00 |
|
|
Clement Rouault
|
ae5a211613
|
fix SIZE_T definition to ctypes.c_size_t + fix MessageAttribute._get_required_buffer_size
|
2017-06-08 18:22:24 +02:00 |
|
|
Clement Rouault
|
9461d4a2fb
|
Add structs/def/funcs + Service.start()
|
2017-05-24 17:40:31 +02:00 |
|
|
Clement Rouault
|
bc3c033e84
|
Added some definitions for SID/Privilege/others
|
2017-05-19 15:37:26 +02:00 |
|
|
Clement Rouault
|
dbd98c93ed
|
fix Process.ppid implem + new version does not enum processes
|
2017-04-28 17:29:17 +02:00 |
|
|
Clement Rouault
|
db6cec9031
|
Add PEB.Mutant + PEB.ImageBaseAddress in PEB definition
|
2017-04-21 17:01:45 +02:00 |
|