hakril
|
967c18d521
|
Added POC WinProcess.memory_info + some crypto defines
|
2018-11-24 22:59:00 +01:00 |
|
hakril
|
570436120b
|
Added some functions
|
2018-11-24 22:59:00 +01:00 |
|
hakril
|
1c21b77292
|
Add sign/verify methods to windows.crypto + POC/Play with improved ctypes buffer/array
|
2018-11-24 22:59:00 +01:00 |
|
hakril
|
c228a0d5cb
|
Added Certificate.distinguished_name and BaseSystemModule.name + some winproxy functions
|
2018-08-02 18:51:41 +02:00 |
|
hakril
|
e6a022f8be
|
Add windows.system.edition
|
2018-07-13 18:08:00 +02:00 |
|
hakril
|
d232928780
|
Added some generated def + some winproxy functions
|
2018-07-13 14:33:50 +02:00 |
|
hakril
|
3dcd27a1ca
|
Fix ntdll-registry winproxy error check + add LocalDebugger.current_thread to match Debugger API
|
2018-06-05 21:53:35 +02:00 |
|
hakril
|
3d69ad3cb5
|
Add some definition in ctypes generation + winproxy wrappers; fix com.py imports
|
2018-06-05 11:38:57 +02:00 |
|
hakril
|
66852aae37
|
Add function NtAllocateVirtualMemory + NtFreeVirtualMemory
|
2018-03-23 12:43:31 +01:00 |
|
hakril
|
094979f7c0
|
Add NtWriteVirtualMemory + fix some winfunc param/ret-val type
|
2018-03-22 19:28:54 +01:00 |
|
hakril
|
af6943992a
|
cgen: Function generated after COM, handle COM variadic (cdecl) defintion + Comimplem.IID generated avec _functions_ + Add some COM/ComInterceptor definitions
|
2018-03-08 22:35:54 +01:00 |
|
hakril
|
8840b9fdb9
|
updated doc
|
2018-03-07 10:24:46 +01:00 |
|
hakril
|
1dc13b1a35
|
Adding some PE related windef + CertFreeCertificateContext
|
2018-03-04 18:45:23 +01:00 |
|
hakril
|
805e735a88
|
Added some ctypes definitions
|
2018-03-03 16:49:53 +01:00 |
|
hakril
|
b2a72f11cc
|
Add windows.pipe for simpler communication with injected process
|
2018-02-02 10:27:04 +01:00 |
|
hakril
|
f682fbd8c1
|
Add transaction + window APIs to winproxy + get_mapped_filename raise on non-standard error (like aborted transaction)
|
2018-01-26 11:05:53 +01:00 |
|
hakril
|
715a7fee95
|
Add CryptMsgVerifyCountersignatureEncoded[Ex] and some crypto definition
|
2018-01-13 16:39:53 +01:00 |
|
hakril
|
23837a0713
|
Improving volume objects + adding CurrentProcess.peb.apisetmap with ApiSetMap parsing capabilities
|
2017-12-04 10:12:41 +01:00 |
|
hakril
|
f03bb89ae6
|
Working on time translation (filetime - unix - datetime) and windows volume objects
|
2017-11-28 10:50:02 +01:00 |
|
hakril
|
22224b52e2
|
Added utils.query_file_informations wrapper arround new winproxy.NtQueryInformationFile
|
2017-11-27 10:13:13 +01:00 |
|
hakril
|
f54599568d
|
Working on eventlog
|
2017-11-24 17:17:35 +01:00 |
|
Clement Rouault
|
d12bae6dbb
|
Remove 'WinUnicodeString' and add un extended struct _LSA_UNICODE_STRING: simplify lots of things
|
2017-11-17 15:13:34 +01:00 |
|
Clement Rouault
|
4efae2194d
|
Adding Process.priority + fix in WMI raised exceptions + add x86.Iret
|
2017-11-10 11:12:24 +01:00 |
|
Clement Rouault
|
c7fef877f0
|
Testing some crypto stuff
|
2017-10-13 17:56:36 +02:00 |
|
hakril
|
930c992be3
|
Working on improving crypto stuff
|
2017-10-09 09:11:48 +02:00 |
|
Clement Rouault
|
f6e151a7d5
|
Adding some crypto api
|
2017-10-06 17:32:24 +02:00 |
|
Clement Rouault
|
5ee74d5b8f
|
Update rpc doc + sample + new rpc function + new winfunc definition file + fix setup.py
|
2017-10-05 16:22:16 +02:00 |
|
Clement Rouault
|
7947ace02d
|
Add alpc[Client|Server] __del__ to close handles + NtAlpcDisconnectPort + test
|
2017-09-15 17:54:19 +02:00 |
|
Clement Rouault
|
1941adc93f
|
Working on RtlGetUnloadEventTraceEx - adding function and struct + fix remotectypes char-array in struct
|
2017-08-17 18:51:07 +02:00 |
|
hakril
|
3d33c97335
|
add system.windir + needed winfuncs
|
2017-08-16 09:25:23 +02:00 |
|
Clement Rouault
|
f43749aa07
|
[WIP] new hook method + winfunc APIs in winproxy
|
2017-08-04 17:19:27 +02:00 |
|
Clement Rouault
|
aa22f1515d
|
Working on new windows.alpc
|
2017-07-28 09:20:40 +02:00 |
|
Clement Rouault
|
89fe39fadf
|
Adding some ALPC struct/funcs
|
2017-07-11 18:42:51 +02:00 |
|
Clement Rouault
|
4c8747b628
|
Add winproxy.MessageBox[AW]
|
2017-06-07 11:39:37 +02:00 |
|
Clement Rouault
|
9461d4a2fb
|
Add structs/def/funcs + Service.start()
|
2017-05-24 17:40:31 +02:00 |
|
Clement Rouault
|
bc3c033e84
|
Added some definitions for SID/Privilege/others
|
2017-05-19 15:37:26 +02:00 |
|
hakril
|
f1b1bec903
|
Working on documentation of windows.crypto
|
2017-04-12 17:20:36 +02:00 |
|
Clement Rouault
|
5431b57560
|
fix ImprovedVariant.asbool + com.create_instance accept a context parameter + fix RemoteWCharP.value logic + winutils.decompress_buffer
|
2017-04-12 17:20:36 +02:00 |
|
Clement Rouault
|
d2582d5e09
|
Renamed some error check method with intelligible name + some security functions def
|
2017-04-12 17:20:35 +02:00 |
|
Clement Rouault
|
3f39ca9f0c
|
More work on windows.crypto and Add an encryption sample POC
|
2017-04-12 17:20:35 +02:00 |
|
Clement Rouault
|
8743883068
|
working on crypto.certificate.CryptObject
|
2017-04-12 17:19:01 +02:00 |
|
hakril
|
ae02d9e916
|
Add some User32 API
|
2017-04-12 17:19:01 +02:00 |
|
Clement Rouault
|
98bc95204d
|
still Working on windows.crypto object + API + test
|
2017-04-12 17:19:01 +02:00 |
|
hakril
|
28b2596483
|
Fix PVOID arguments in function generated + add some func/struct from CryptoAPI
|
2017-04-12 17:19:01 +02:00 |
|
Clement Rouault
|
5478bda8bc
|
Working on CryptoAPI
|
2017-04-12 17:19:01 +02:00 |
|
hakril
|
15e40da1ca
|
Playing with CryptoApi
|
2017-04-12 17:19:01 +02:00 |
|
Clement Rouault
|
19b168df07
|
Add target_dll and target_func to TransparentApiProxy + test_code.py handles raw [x86|x64]
|
2016-08-19 15:15:04 +02:00 |
|
Clement Rouault
|
943945225a
|
Improve debugger/BP doc + add sample + small fixes in WMI/LocalDebugger + new data in ApiProxy for FunctionBP
|
2016-08-19 15:06:26 +02:00 |
|
Clement Rouault
|
0d38c1e268
|
Add NtAlpcConnectPortEx in winproxy
|
2016-08-19 10:34:41 +02:00 |
|
Clement Rouault
|
3184cbdeab
|
MemBP has explicit event RWX, add GetProcessDEPPolicy, add Debugger API to disable/re-enable memory BP
|
2016-07-18 16:23:11 +02:00 |
|