Commit Graph

173 Commits

Author SHA1 Message Date
hakril c2c3fe2dc2 more doc 2016-04-27 00:33:02 +02:00
Clement Rouault a988ad03e3 Add struct + thread.teb_base 2016-04-25 17:48:49 +02:00
Clement Rouault 57634f076c Add process.time_info 2016-04-21 10:58:35 +02:00
Clement Rouault 085c36c706 fix/simplify get_string in pe_parse / adapt syswow.py 2016-04-21 10:47:00 +02:00
Clement Rouault 09e9b7efbb Fix get_mapped_filename 32 -> 64 (use NtQueryVirtualMemory) 2016-04-19 11:49:33 +02:00
Clement Rouault 5b66242680 writing some doc 2016-04-18 23:09:26 +02:00
Clement Rouault 4ab9e97667 fix setup.py to include windows.test 2016-04-18 21:20:02 +02:00
Clement Rouault cb3c0f20c0 pe_parse: fix read string PE32 in process 64b 2016-04-18 11:54:51 +02:00
Clement Rouault b621e6a09f fix queryworkingset / add test / add virtual protect context manager 2016-04-18 11:24:41 +02:00
Clement Rouault 3454801ad0 small fix in Debugger.add_bp 2016-04-11 19:15:39 +02:00
Clement Rouault e781e3493f Playing with workingset 2016-04-11 19:15:23 +02:00
Clement Rouault 85cb4eef1b add some additional info to full_signature_information 2016-04-11 10:16:06 +02:00
Clement Rouault 18bba9b24e Fix pe_parse to handle 32bits PE in 64bits process (PE32 .NET) 2016-04-08 16:11:55 +02:00
Clement Rouault ef9b2486ec fix + add some info in Section 2016-04-08 13:46:06 +02:00
Clement Rouault b698b27a6f Add process.query_working_set 2016-04-08 13:45:27 +02:00
Clement Rouault 0e9ec9ed82 add / fix in registry and registry sample 2016-04-01 17:34:56 +02:00
Clement Rouault 6c1b4cf5e6 More doc / sample 2016-03-30 18:27:40 +02:00
Clement Rouault 96c8d68297 kernobj.py -> WinObj explorer 2016-03-30 15:28:04 +02:00
hakril 53e131831d Writing / updating some doc 2016-03-29 23:41:54 +02:00
Clement Rouault 4c1192bf75 Fix crash du to bad declaration / size of CONTEXT64 2016-03-29 18:53:04 +02:00
Clement Rouault da52b1a014 More Nt def/structs/funcs 2016-03-29 17:19:17 +02:00
Clement Rouault cf8386400f Fix WinUnicodeString to use Length 2016-03-29 14:01:40 +02:00
Clement Rouault ff5ce9ae86 Add EnumType for generated enum 2016-03-25 16:59:40 +01:00
Clement Rouault 480cbcf1dc Improving com / wmi API / code 2016-03-25 15:14:53 +01:00
Clement Rouault cbd4f0b6b7 More struct/defs/funcs 2016-03-25 15:13:49 +01:00
Clement Rouault 9856a1614b Add firewall interface to system.network 2016-03-25 13:44:04 +01:00
Clement Rouault eadc0c6963 More COM interfaces/ API 2016-03-24 18:14:45 +01:00
Clement Rouault 374e842d3d Add com interfaces generated file 2016-03-24 16:05:09 +01:00
Clement Rouault 1a85d99b0e windows.com with a cleaner interface + use in wmi.pu 2016-03-24 16:03:13 +01:00
Clement Rouault d794ac8ceb Cleaning/working on windows.com API 2016-03-24 15:23:15 +01:00
Clement Rouault 641790f917 Still working on COM ctypes generation 2016-03-24 14:14:39 +01:00
Clement Rouault 1b33bbb025 Beginning to generate ctypes for COM interfaces 2016-03-23 22:11:35 +01:00
Clement Rouault 34ae5084cd Working/Trying com ctypes generator 2016-03-23 19:04:15 +01:00
Clement Rouault 3cb8cc6f9e Refactor: new winobject directory 2016-03-23 13:42:54 +01:00
Clement Rouault c24816f51f Improve create_process + test some other utils 2016-03-22 13:40:03 +01:00
Clement Rouault d096da3709 Exploring on system attribute and Token 2016-03-22 13:39:37 +01:00
Clement Rouault 9cae319c11 New registry API 2016-03-22 13:39:11 +01:00
Clement Rouault f06afc9b79 winproxy imported directly, use same format for call 2016-03-22 13:38:45 +01:00
Clement Rouault db4c51dc67 Syswow64ApiProxy now handle None from OptionalExport 2016-03-22 13:37:22 +01:00
Clement Rouault 1422db08ae More winproxy functions 2016-03-22 13:30:44 +01:00
Clement Rouault 16ef768f3f Unifor the import / use of winproxy 2016-03-21 13:27:23 +01:00
Clement Rouault fb0171b8b9 WinpProcess in not a PROCESSENTRY32 anymore 2016-03-21 13:18:01 +01:00
Clement Rouault 8628ff5595 new funcs + struct + fix winobject 2016-03-18 18:04:50 +01:00
Clement Rouault 5f1c841b75 Add ctypes struct pprinter 2016-03-18 18:03:45 +01:00
Clement Rouault 6a305458d5 Add signature verification by catalog 2016-03-18 18:01:57 +01:00
Clement Rouault faa0acd030 Add services and volumes files 2016-03-18 11:24:02 +01:00
Clement Rouault 78f9733295 Add del_bp + import LocalDebugger 2016-03-18 11:16:53 +01:00
Clement Rouault a4090ea215 Add some defs + wintrust catalog functions 2016-03-16 16:33:38 +01:00
Clement Rouault 9db75b0226 Add some doc/sample on LocalDebugger 2016-02-12 15:06:41 +01:00
Clement Rouault 5ffa21cd8a LocalDebugger sample + fix 2016-02-12 14:44:00 +01:00