 hakril
|
e7679ecfcf
|
[WIP] simple_arm64 + testsuite
|
2025-02-02 19:19:12 +01:00 |
|
|
hakril
|
4e5325c8ea
|
Process.architecture now returns flags
|
2025-02-02 19:19:12 +01:00 |
|
|
hakril
|
9b5be5ffd5
|
more arm testing of process.architecture
|
2025-02-02 19:19:12 +01:00 |
|
|
hakril
|
720385d15a
|
Still playing with process.architecture
|
2025-02-02 19:19:12 +01:00 |
|
|
hakril
|
ce13bf08e3
|
First try at WinProcess.architecture
|
2025-02-02 19:19:12 +01:00 |
|
|
hakril
|
8151292042
|
Adding ctypes defintion associated with process & architecture
|
2025-02-02 19:19:12 +01:00 |
|
|
hakril
|
646e55c740
|
fix typo
|
2025-02-02 19:18:43 +01:00 |
|
|
hakril
|
00a2f1a7d6
|
add utils.image_file_machine_to_processor_architecture()
|
2025-02-02 19:18:43 +01:00 |
|
|
hakril
|
2c9a159a81
|
Add system.architecture & process.architecture
|
2025-02-02 19:18:43 +01:00 |
|
|
hakril
|
314cd2b862
|
More arm exploration of api responses
|
2025-02-02 19:16:24 +01:00 |
|
|
hakril
|
234844cf12
|
Remove breakpoint
|
2025-02-02 19:15:21 +01:00 |
|
|
hakril
|
1297996725
|
New implem of is_wow_64(handle)
|
2025-02-02 19:15:21 +01:00 |
|
|
hakril
|
1a9b680fba
|
Added some wow64 definition + created functions/syswow64.txt
|
2025-02-02 19:15:21 +01:00 |
|
|
hakril
|
6fd32762da
|
Try improving CurrentProcessReadSyswow stability
|
2025-02-02 16:54:23 +01:00 |
|
|
hakril
|
aab4fdc02d
|
Try new handle method for CurrentProcessReadSyswow
|
2025-02-02 16:35:16 +01:00 |
|
|
hakril
|
ff4161602c
|
Small improvments
|
2025-02-02 16:29:05 +01:00 |
|
|
hakril
|
f668288dfc
|
Fix bad escape in some docstrings
|
2025-02-01 22:44:53 +01:00 |
|
|
hakril
|
d7cf3e0f8b
|
Fix CurrentThread.teb_base being a property and not a fixedproperty
|
2025-02-01 14:22:02 +01:00 |
|
|
hakril
|
54be297828
|
Trying to improve print output when stubborn call fails
|
2025-02-01 11:55:49 +01:00 |
|
|
hakril
|
5da27a78d2
|
Fix badcode in syswo64.py
|
2025-02-01 11:35:22 +01:00 |
|
|
hakril
|
f7542e686c
|
More teb64 fix
|
2025-02-01 11:34:09 +01:00 |
|
|
hakril
|
029f7cba35
|
More TEB syswow fix
|
2025-01-31 17:37:07 +01:00 |
|
|
hakril
|
36c1eb647f
|
Fix WinThread.teb_syswow
|
2025-01-31 17:13:33 +01:00 |
|
|
hakril
|
4bbdb538de
|
Add support for remote TEB + tests
|
2025-01-31 17:00:04 +01:00 |
|
|
hakril
|
6ccccf7e90
|
V1 of WinThread.teb
|
2025-01-31 13:46:11 +01:00 |
|
|
hakril
|
d05801dd46
|
Regen generated_def
|
2025-01-31 13:46:11 +01:00 |
|
|
hakril
|
c6898a429c
|
Add definition of TEB + tests on offset of generated ctypes
|
2025-01-31 13:46:11 +01:00 |
|
|
hakril
|
13c28422d4
|
process improv : bitness based on PVOID size + CurrentProcess.name based on GetProcessImageFileNameW + peb addr based on RtlGetCurrentPeb
|
2025-01-31 13:46:11 +01:00 |
|
|
hakril
|
2b64a6d316
|
Add definition for _TEB
|
2025-01-31 13:46:11 +01:00 |
|
|
hakril
|
5d7e074039
|
Merge pull request #73 from dariushoule/windows_store_interpreter_tweaks
Improved behavior when running under Microsoft Store python interpreters
|
2025-01-29 00:57:08 -08:00 |
|
|
hakril
|
92b3cfcb2b
|
Adapt sample + docs for microsoft-store-python-injection
|
2025-01-28 19:45:36 +01:00 |
|
|
Darius Houle
|
082b13112d
|
missed docstring*
|
2025-01-26 23:46:19 -07:00 |
|
|
Darius Houle
|
52859d19c4
|
feedback revisions
|
2025-01-26 23:38:50 -07:00 |
|
|
hakril
|
98abd731e4
|
Improve injection.perform_manual_getproc_loadlib_X with error reporting
|
2025-01-24 10:37:18 +01:00 |
|
|
hakril
|
d0a5dc3c61
|
more testing
|
2025-01-24 10:37:18 +01:00 |
|
|
hakril
|
2644b53563
|
Adding error reporting for injection via k32 imports
|
2025-01-24 10:37:18 +01:00 |
|
|
hakril
|
db8d782e3a
|
Update _PEB_LDR_DATA definition with fields known since WinXP
|
2025-01-24 08:59:37 +01:00 |
|
|
Darius Houle
|
6715b08ed7
|
2 test robustness improvements, helpful message on interpreter sandbox error
|
2025-01-20 12:53:27 -07:00 |
|
|
hakril
|
99c28ac035
|
stubborn: add support for new PRIV_RESOLVER_INFO_17763 seen on 10.0.17763
|
2025-01-15 22:32:00 +01:00 |
|
|
hakril
|
0c9c7d3f49
|
Improve system.versionstr + doc + reset CI to windows-latest
|
2025-01-10 11:41:40 +01:00 |
|
|
hakril
|
0a0b96a9ca
|
Fix new version_name to unicode
|
2025-01-10 11:09:00 +01:00 |
|
|
hakril
|
766f1f5e0a
|
Improving system.version_number for 10+ by taking build number into account
|
2025-01-10 11:01:05 +01:00 |
|
|
hakril
|
68ea3c3a02
|
Regenerate ctypes
|
2025-01-08 19:50:45 +01:00 |
|
|
hakril
|
ee37178bcf
|
improve RpcClient error reporting in call()
|
2025-01-08 19:33:29 +01:00 |
|
|
hakril
|
315ad8ed9e
|
Small refactor in RPCCLient.call()
|
2025-01-07 19:14:33 +01:00 |
|
|
hakril
|
31f7d1c593
|
Add windows.system.display_version + update version number + doc
|
2025-01-07 18:23:32 +01:00 |
|
|
hakril
|
0e9edcf440
|
Improve AlpcClient/Server __del__ method
|
2025-01-07 18:23:01 +01:00 |
|
|
hakril
|
0b0b88a270
|
more ORPC test : windows iexplore this time
|
2025-01-07 18:23:01 +01:00 |
|
|
hakril
|
d535440a44
|
Add stubborn implementation + first orpc test based on that
|
2025-01-07 18:23:01 +01:00 |
|
|
hakril
|
4b034fc0fe
|
Add RpcClient with DCOM capabilities handling multiple versions (localthis/localthat)
|
2025-01-07 18:23:01 +01:00 |
|