Clement Rouault
|
96c8d68297
|
kernobj.py -> WinObj explorer
|
2016-03-30 15:28:04 +02:00 |
|
hakril
|
53e131831d
|
Writing / updating some doc
|
2016-03-29 23:41:54 +02:00 |
|
Clement Rouault
|
4c1192bf75
|
Fix crash du to bad declaration / size of CONTEXT64
|
2016-03-29 18:53:04 +02:00 |
|
Clement Rouault
|
da52b1a014
|
More Nt def/structs/funcs
|
2016-03-29 17:19:17 +02:00 |
|
Clement Rouault
|
cf8386400f
|
Fix WinUnicodeString to use Length
|
2016-03-29 14:01:40 +02:00 |
|
Clement Rouault
|
ff5ce9ae86
|
Add EnumType for generated enum
|
2016-03-25 16:59:40 +01:00 |
|
Clement Rouault
|
480cbcf1dc
|
Improving com / wmi API / code
|
2016-03-25 15:14:53 +01:00 |
|
Clement Rouault
|
cbd4f0b6b7
|
More struct/defs/funcs
|
2016-03-25 15:13:49 +01:00 |
|
Clement Rouault
|
9856a1614b
|
Add firewall interface to system.network
|
2016-03-25 13:44:04 +01:00 |
|
Clement Rouault
|
eadc0c6963
|
More COM interfaces/ API
|
2016-03-24 18:14:45 +01:00 |
|
Clement Rouault
|
374e842d3d
|
Add com interfaces generated file
|
2016-03-24 16:05:09 +01:00 |
|
Clement Rouault
|
1a85d99b0e
|
windows.com with a cleaner interface + use in wmi.pu
|
2016-03-24 16:03:13 +01:00 |
|
Clement Rouault
|
d794ac8ceb
|
Cleaning/working on windows.com API
|
2016-03-24 15:23:15 +01:00 |
|
Clement Rouault
|
641790f917
|
Still working on COM ctypes generation
|
2016-03-24 14:14:39 +01:00 |
|
Clement Rouault
|
1b33bbb025
|
Beginning to generate ctypes for COM interfaces
|
2016-03-23 22:11:35 +01:00 |
|
Clement Rouault
|
34ae5084cd
|
Working/Trying com ctypes generator
|
2016-03-23 19:04:15 +01:00 |
|
Clement Rouault
|
3cb8cc6f9e
|
Refactor: new winobject directory
|
2016-03-23 13:42:54 +01:00 |
|
Clement Rouault
|
c24816f51f
|
Improve create_process + test some other utils
|
2016-03-22 13:40:03 +01:00 |
|
Clement Rouault
|
d096da3709
|
Exploring on system attribute and Token
|
2016-03-22 13:39:37 +01:00 |
|
Clement Rouault
|
9cae319c11
|
New registry API
|
2016-03-22 13:39:11 +01:00 |
|
Clement Rouault
|
f06afc9b79
|
winproxy imported directly, use same format for call
|
2016-03-22 13:38:45 +01:00 |
|
Clement Rouault
|
db4c51dc67
|
Syswow64ApiProxy now handle None from OptionalExport
|
2016-03-22 13:37:22 +01:00 |
|
Clement Rouault
|
1422db08ae
|
More winproxy functions
|
2016-03-22 13:30:44 +01:00 |
|
Clement Rouault
|
16ef768f3f
|
Unifor the import / use of winproxy
|
2016-03-21 13:27:23 +01:00 |
|
Clement Rouault
|
fb0171b8b9
|
WinpProcess in not a PROCESSENTRY32 anymore
|
2016-03-21 13:18:01 +01:00 |
|
Clement Rouault
|
8628ff5595
|
new funcs + struct + fix winobject
|
2016-03-18 18:04:50 +01:00 |
|
Clement Rouault
|
5f1c841b75
|
Add ctypes struct pprinter
|
2016-03-18 18:03:45 +01:00 |
|
Clement Rouault
|
6a305458d5
|
Add signature verification by catalog
|
2016-03-18 18:01:57 +01:00 |
|
Clement Rouault
|
faa0acd030
|
Add services and volumes files
|
2016-03-18 11:24:02 +01:00 |
|
Clement Rouault
|
78f9733295
|
Add del_bp + import LocalDebugger
|
2016-03-18 11:16:53 +01:00 |
|
Clement Rouault
|
a4090ea215
|
Add some defs + wintrust catalog functions
|
2016-03-16 16:33:38 +01:00 |
|
Clement Rouault
|
9db75b0226
|
Add some doc/sample on LocalDebugger
|
2016-02-12 15:06:41 +01:00 |
|
Clement Rouault
|
5ffa21cd8a
|
LocalDebugger sample + fix
|
2016-02-12 14:44:00 +01:00 |
|
hakril
|
9a1088daab
|
Small fixes in DOC + update winproxy function list
|
2016-02-10 23:01:32 +01:00 |
|
Clement Rouault
|
f9ce637ffa
|
Small doc stuff + fix setup.py
|
2016-02-10 17:51:54 +01:00 |
|
Clement Rouault
|
c5e021f10d
|
Writing samples and doc !
|
2016-02-10 17:30:54 +01:00 |
|
Clement Rouault
|
c40cb0c8b0
|
Add get_mapped_filename to WinProcess
|
2016-02-10 16:29:46 +01:00 |
|
Clement Rouault
|
b789a12040
|
Improve debugger + pe_parse 'guess' the PE type (32/64)
|
2016-02-10 16:27:53 +01:00 |
|
Clement Rouault
|
401db9c347
|
Working on debugger (str address + rewrite + test)
|
2016-02-10 11:53:13 +01:00 |
|
Clement Rouault
|
6cf4a9cae4
|
Add test / fix Winprocess.load_library / free some of the memory
|
2016-02-03 17:47:07 +01:00 |
|
Clement Rouault
|
9fbba331ca
|
Add NTSTATUS to windef/add virtual_free/improve nativeutils GetProcAddr + test
|
2016-02-02 18:45:24 +01:00 |
|
Clement Rouault
|
3f06e95617
|
First - shameful version of syswow64 debugging
|
2016-02-01 18:45:51 +01:00 |
|
Clement Rouault
|
0da86e20aa
|
SetThreadContext 32<->64 + test
|
2016-02-01 17:31:56 +01:00 |
|
Clement Rouault
|
d720170781
|
Big commit GetProcAddrss 32 and 64 (fixed)
|
2016-01-29 18:05:21 +01:00 |
|
Clement Rouault
|
5b5db57e17
|
Rewrite injected stub for remote python -> now have nice threads handling
|
2016-01-29 13:51:35 +01:00 |
|
Clement Rouault
|
7be3561ccf
|
Better remote veh sample :)
|
2016-01-28 17:02:18 +01:00 |
|
Clement Rouault
|
ee62d6a972
|
Add sample on veh handle setup in remote process
|
2016-01-28 17:00:33 +01:00 |
|
Clement Rouault
|
f307f8202a
|
Add Process.write_[dq]word + rewrite injection.py to use PEB parsing if needed
|
2016-01-28 17:00:32 +01:00 |
|
Clement Rouault
|
38a2298dee
|
Add nativeutils.py with GetProcAddress64 + add instr to x86/x64 assembler + add merge of labels in multipleinstr (dummy function support)
|
2016-01-28 17:00:31 +01:00 |
|
hakril
|
ec4862439f
|
Add LdrLoadDLL + Fix winproxy.VirtualProtect Commit2
|
2016-01-27 12:41:41 +01:00 |
|