 hakril
|
c19241098a
|
Improve object manager doc + add samples
|
2018-07-13 14:24:55 +02:00 |
|
|
hakril
|
eb3b13016f
|
Fix right-margin in sphinx doc CSS (thanks bruno)
|
2018-07-11 11:57:39 +02:00 |
|
|
hakril
|
c59af86910
|
Renamed kernobj.py to object_manager.py and added to windows.system.object_manager + improve API + beginning of doc
|
2018-06-11 17:55:11 +02:00 |
|
|
hakril
|
041a354d17
|
Update some doc + document windows.system.modules
|
2018-06-11 11:09:48 +02:00 |
|
|
hakril
|
525432fecd
|
Add a POC for windows.system.modules to replace winutils.get_kernel_modules()
|
2018-06-05 21:55:54 +02:00 |
|
|
hakril
|
1ee9a8bc46
|
new POC for breakpoint with parameters extraction
|
2018-06-05 21:54:26 +02:00 |
|
|
hakril
|
3dcd27a1ca
|
Fix ntdll-registry winproxy error check + add LocalDebugger.current_thread to match Debugger API
|
2018-06-05 21:53:35 +02:00 |
|
|
hakril
|
b223ed233e
|
Fix stuff in service.py + update test
|
2018-06-05 11:59:06 +02:00 |
|
|
hakril
|
3d69ad3cb5
|
Add some definition in ctypes generation + winproxy wrappers; fix com.py imports
|
2018-06-05 11:38:57 +02:00 |
|
|
hakril
|
a559c5c295
|
Update some doc / test + some ctypes generation definition
|
2018-06-05 11:34:52 +02:00 |
|
|
hakril
|
93bb9b6540
|
Add doc/sample/test for event log code
|
2018-06-05 11:30:25 +02:00 |
|
|
hakril
|
057d4e5408
|
Add scheduled_task code/doc-source/tests
|
2018-06-01 12:20:13 +02:00 |
|
|
hakril
|
2bea15ffe8
|
add current word on event logs
|
2018-05-12 00:17:34 +02:00 |
|
|
hakril
|
11e4afeef5
|
ctypes generation : added bitfield parsing/generation + update/fix some definitions
|
2018-05-12 00:16:45 +02:00 |
|
|
hakril
|
05e7b755b0
|
Fix CurrentProcess read/write memory to use ctypes.memmove -> raise on bad address -> no more segv
|
2018-05-12 00:13:57 +02:00 |
|
|
hakril
|
849d64378f
|
Commit current work on scheduled tasks
|
2018-05-12 00:11:10 +02:00 |
|
|
hakril
|
8cc361b1f9
|
ctypes generation allow COM mission interface autocopy from a directory + support anon structs/enum in typedef
|
2018-04-16 19:54:09 +02:00 |
|
|
hakril
|
e918d735a1
|
Tests injecting python in remote process now check that target python is installed
|
2018-03-28 23:14:41 +02:00 |
|
|
hakril
|
9e1400e4ad
|
Forgot a file.. This is the real v0.4
V0.4
|
2018-03-28 01:03:37 +02:00 |
|
|
hakril
|
3565474693
|
Let's call it a 0.4 !
|
2018-03-27 21:33:06 +02:00 |
|
|
hakril
|
83f4b0c48b
|
Fixing some doc / samples
|
2018-03-27 21:24:56 +02:00 |
|
|
hakril
|
b88ce36acb
|
Add somme Evt-related define/structs/functions
|
2018-03-27 20:46:54 +02:00 |
|
|
hakril
|
4564be8488
|
Adding IShellLinkW + commit generated defs
|
2018-03-27 20:44:54 +02:00 |
|
|
hakril
|
34c2d94bc2
|
Some fixes in code/samples/test
|
2018-03-27 20:37:30 +02:00 |
|
|
hakril
|
66852aae37
|
Add function NtAllocateVirtualMemory + NtFreeVirtualMemory
|
2018-03-23 12:43:31 +01:00 |
|
|
hakril
|
094979f7c0
|
Add NtWriteVirtualMemory + fix some winfunc param/ret-val type
|
2018-03-22 19:28:54 +01:00 |
|
|
hakril
|
b2c3493f46
|
Improve com generated interface
|
2018-03-09 16:10:59 +01:00 |
|
|
hakril
|
9ef71ad9e1
|
Clean ICallInterceptor POC
|
2018-03-08 23:12:06 +01:00 |
|
|
hakril
|
e40b9fb2ff
|
Add quick POC of ICallInterceptor to COM samples
|
2018-03-08 22:45:26 +01:00 |
|
|
hakril
|
af6943992a
|
cgen: Function generated after COM, handle COM variadic (cdecl) defintion + Comimplem.IID generated avec _functions_ + Add some COM/ComInterceptor definitions
|
2018-03-08 22:35:54 +01:00 |
|
|
hakril
|
babb743096
|
check we are on windows
|
2018-03-07 10:28:39 +01:00 |
|
|
hakril
|
8840b9fdb9
|
updated doc
|
2018-03-07 10:24:46 +01:00 |
|
|
hakril
|
03e252b53a
|
Upgrade to sphinx 1.7.1 + small css fix + review/update/refactor doc samples
|
2018-03-05 01:06:30 +01:00 |
|
|
hakril
|
1dc13b1a35
|
Adding some PE related windef + CertFreeCertificateContext
|
2018-03-04 18:45:23 +01:00 |
|
|
hakril
|
d91bc1a45a
|
Fix a bug in com.init() when CoInitializeEx failed + fix test: test_wmi fail du to pytest default COM-security settings
|
2018-03-04 18:34:40 +01:00 |
|
|
hakril
|
a057f8c130
|
class CertificateContext(PCERT_CONTEXT) replaced by Certificate(CERT_CONTEXT) + multi-received encrypt/decrypt test
|
2018-03-04 18:28:20 +01:00 |
|
|
hakril
|
c20d443c29
|
windows.com.init does not raise anymore if CoInitializeEx fails but return error code + cosmetic
|
2018-03-03 16:55:40 +01:00 |
|
|
hakril
|
262b80c8c3
|
utils.get_(long|short)_path now handle unicode path using W func
|
2018-03-03 16:51:51 +01:00 |
|
|
hakril
|
805e735a88
|
Added some ctypes definitions
|
2018-03-03 16:49:53 +01:00 |
|
|
hakril
|
4499080a77
|
Remote load library now use LoadLibraryW and get_mapped_filename use GetMappedFileNameW: return unicode str in every case
|
2018-02-07 13:14:25 +01:00 |
|
|
hakril
|
b2a72f11cc
|
Add windows.pipe for simpler communication with injected process
|
2018-02-02 10:27:04 +01:00 |
|
|
hakril
|
f682fbd8c1
|
Add transaction + window APIs to winproxy + get_mapped_filename raise on non-standard error (like aborted transaction)
|
2018-01-26 11:05:53 +01:00 |
|
|
hakril
|
4251b18041
|
Fix ctypes generation + COM interface dependance check + add IPersistFile, IShellLink, strucs/defs
|
2018-01-25 16:51:04 +01:00 |
|
|
hakril
|
82e464d527
|
Replaced old generate.py with new ctypes generation code !
|
2018-01-19 18:11:16 +01:00 |
|
|
hakril
|
445de0b007
|
Commit generated def before switching generator code
|
2018-01-19 17:33:33 +01:00 |
|
|
hakril
|
61ddb4821a
|
Working in new ctypes generation code and features
|
2018-01-17 01:17:55 +01:00 |
|
|
hakril
|
65726e706f
|
Add Int X86/64 instruction
|
2018-01-13 16:40:21 +01:00 |
|
|
hakril
|
715a7fee95
|
Add CryptMsgVerifyCountersignatureEncoded[Ex] and some crypto definition
|
2018-01-13 16:39:53 +01:00 |
|
|
hakril
|
48b6758f7f
|
Add exists/create to PyHKey
|
2018-01-13 16:38:29 +01:00 |
|
|
hakril
|
f882bd1e35
|
Add wmi.gen_select for class select returning a generator + fom E_CRYPT define + CryptObj.nb_signer return 0 if CRYPT_E_INVALID_MSG_TYPE
|
2017-12-08 16:54:49 +01:00 |
|