8b90c96c1a
utils.create_process now use CreateProcessW for simpler py3 usage + fix code in WinProcess.read_[w]string + associated tests
2021-07-13 13:22:50 +02:00
fb9ff96a11
Fixed current_process.read_string/wstring for page end + tests
2021-06-22 19:03:35 +02:00
6552312275
Added a custom version of SYSTEM_PROCESS_INFORMATION
2021-06-22 19:02:45 +02:00
408fe8aaa4
Added some crypto definitions + POC of dpapi with crypto.protect/unprotect
2021-06-15 15:38:14 +02:00
c68dc4e29a
Syswow.py 32->64 calls should now work with multi-threads
2021-06-15 15:33:28 +02:00
cd87544fc7
Fix a concurrency error in simple_x86
2021-06-15 15:32:23 +02:00
015517cd71
Fixed tests for new import windows.pipe requirement
2021-05-24 15:13:30 +02:00
eab219610d
add Pushad/Pushfd/Pushfq mnemonics and alias to Jz ( #20 )
...
* add register mnemonics and alias to Jz
* remove push/popal use expected_result to overwrite result
* add x64 instructions
* fix an issue with pushfd popfd Instructions not matching the intel specification
2021-05-04 19:31:42 +02:00
542eb33aa6
Fix issue #19 about x86/x64 bad Test encoding
2021-04-27 21:32:49 +02:00
39d683ffeb
Fix & Test infinite look in regkey.values in certains conditions
2021-04-19 09:23:37 +02:00
04cbbf3888
Fixed a Evthandle leak on evtlog code
2020-09-08 13:34:20 +02:00
9bf2e61431
Improved test for NDR + added timeout for debugger test (if pytest-timeout present)
2020-07-16 23:31:35 +02:00
d8ac02e6a2
Improved NDR padding capabilities for primitive types
2020-06-15 10:00:05 +02:00
466d94c03c
Fixed broken basestring for py3 compatibility (see issue #15 )
2020-05-02 23:12:25 +02:00
c691d8eb84
Added EvtQuery.seek() + IsDebuggerPresent API for sample purpose
2020-03-19 10:33:12 +01:00
7921e74647
Fixed a GC issue with system.modules + added deprecation warning to utils.get_kernel_modules()
2020-03-10 20:50:04 +01:00
9f69b1cefa
Adapted some stuff in security.py for py3
2020-02-13 23:17:43 +01:00
80c6a747da
Updated test for py3
2020-02-13 22:12:40 +01:00
f403856e26
Debugger test pass on py3
2020-02-08 00:15:41 +01:00
6a74c83670
test_process pass for python3 + added some pe_parse test
2020-02-07 23:06:26 +01:00
bac3dcb55b
Fix simple_x64 REX for python3
2020-02-05 23:57:34 +01:00
a7175be425
Added/fixed some test
2020-02-02 18:11:13 +01:00
6f55d2e48f
Fix a bug in debugger when detaching after a Ctrl+c during a BP
2019-10-19 00:39:03 +02:00
30b05d25f1
Improved MultipleInstr capabilities + fix a bug in x64 that failed to recognize 32b register name not uppercase
2019-09-20 16:18:16 +02:00
6bd45e8503
Added regkey.empty() based on RegDeleteTreeW
2019-08-13 14:57:56 +02:00
1e42553112
Added some test + added a com security fixture allowing allowed correct COM init accross all tests
2019-08-12 13:53:15 +02:00
6fcba46739
Added <Raw> pseudo instruction to both assemblers + corresponding test
2019-08-07 17:42:56 +02:00
960838ae3c
handle code now use gdef + added some handle tests
2019-08-07 17:25:36 +02:00
8a32e00f68
Handle documented key type and unkown one + add code to handle badly encoded values (REG_MULTI_SZ notably)
2019-08-07 14:48:26 +02:00
670bb713a2
Fix a bug about REG_SZ key non-null terminated in values enumeration
2019-08-07 09:47:31 +02:00
7f4ff75854
Rewrote windows.system.registry to handle unicode. added registry test (including unicode testing)
2019-08-05 16:56:48 +02:00
252f6f8efa
Update replace deprecated use of getfuncargvalue to please new pytest versions
2019-01-03 22:32:19 +01:00
370210a610
Fix a bug in MEMORY_BASIC_INFORMATION64 extended struct + add related test
2019-01-03 21:51:35 +01:00
4f62434dfb
Moved lookup_sid to windows.utils + add Token to window.security + update doc about official Token path
2018-12-21 18:50:22 +01:00
fb567c6a76
Added some samples output + document change Kernel32Error -> WinproxyError + fix sample/readme/doc related
2018-12-21 18:13:28 +01:00
79ff18e06f
Update doc/samples/test of windows.security
2018-12-21 15:26:29 +01:00
986664d01f
update Doc + test + sample for token.py
2018-12-20 22:48:16 +01:00
d936942d28
[WIP] improving Token object possibilities
2018-11-24 22:59:01 +01:00
c3b85068e5
Added Retn to x86/64 assemblers + encryption_demo sample can now sign a file + [WIP] token improvement
2018-11-24 22:59:01 +01:00
fff2f37781
Add WMI create-process sample + improved some sample feature/doc
2018-11-24 22:59:01 +01:00
267eddb5fe
Reworking windows.com.Variant + working on new wmi API + wmi test
2018-11-24 22:59:01 +01:00
e46dc48c37
Addapt codebase and tests to winproxy refactoring (replace Kernel32Error to WinproxyError)
2018-11-24 22:59:00 +01:00
bbde38ffe4
First version of windows.security based on clmntb work
2018-11-24 22:59:00 +01:00
1c21b77292
Add sign/verify methods to windows.crypto + POC/Play with improved ctypes buffer/array
2018-11-24 22:59:00 +01:00
19095f0e2f
Fix typo in certificate test + add very simple test of windows.system.modules
2018-08-02 18:52:35 +02:00
e53f7ef34b
Added some test for windows.system.object_manager
2018-08-02 18:38:48 +02:00
b223ed233e
Fix stuff in service.py + update test
2018-06-05 11:59:06 +02:00
a559c5c295
Update some doc / test + some ctypes generation definition
2018-06-05 11:34:52 +02:00
93bb9b6540
Add doc/sample/test for event log code
2018-06-05 11:30:25 +02:00
057d4e5408
Add scheduled_task code/doc-source/tests
2018-06-01 12:20:13 +02:00
clement rouault