Commit Graph

38 Commits

Author SHA1 Message Date
Clement Rouault ea78f81468 Add 64->32 bits pe/peb parsing + stuff in simple_x86/64 2015-11-13 09:25:05 +01:00
Clement Rouault 694f10c095 Fix a bug introduced in the 64b hook stub 2015-09-23 15:58:10 +02:00
Clement Rouault f5b0c0294f cosmetic: fucking linter :( 2015-09-23 14:32:27 +02:00
Clement Rouault 663de130b5 renamed k32testing.py -> winproxy.py 2015-09-23 10:29:24 +02:00
Clement Rouault da521908ed MultipleInst now know how to handle Prefix 2015-09-22 10:24:41 +02:00
Clement Rouault 32b12daa8f Add Movsb | Movsd to simple_x86 2015-09-22 10:19:26 +02:00
Clement Rouault e38084eefc Add jbe jnb to simple_x86 2015-09-22 10:00:36 +02:00
Clement Rouault da31cc204b add deref(x) to simply create displacement only mem_access 2015-09-22 09:32:17 +02:00
Clement Rouault c94a09d6bd Add inc rm/32 2015-09-21 17:45:54 +02:00
Clement Rouault 21ccc8094d First unittest + fix in x64 iat hook stub 2015-09-21 14:03:37 +02:00
Clement Rouault a7cc77dece simple_x86/64 now handle prefix and prefixed mem_access 2015-09-18 15:34:55 +02:00
Clement Rouault 5be7b185c2 Add pe sections parsing + kernel module by NtQuery by w4kfu + small fixes 2015-09-17 15:58:58 +02:00
Clement Rouault 3c8966aa4b Add some simple Cpuid wrapper in native_exec 2015-09-17 11:10:27 +02:00
Clement Rouault 8ec269bef6 Add Cpuid instruction + test in assembler 2015-09-17 11:10:01 +02:00
Clement Rouault e02bf24e8c Add def for NtQuerySystem + fix in CustomAllocator 2015-09-16 16:42:21 +02:00
Clement Rouault 4384f40bb7 Fix return value of JmpImm in 64bits 2015-09-16 15:23:31 +02:00
Clement Rouault 8a718c6e06 Fix bug + remove debug print 2015-09-16 14:47:23 +02:00
Clement Rouault 7532172813 Rewrite 32->64 CreateThread (parse own 64ntdll + shellcode in simple_x64) 2015-09-16 10:13:18 +02:00
Clement Rouault 0fc55b24fd Clean X64 hook stub 2015-09-15 10:20:05 +02:00
Clement Rouault c74447ec23 Add call [mem] and xchg REG,[RE]AX 2015-09-15 10:05:49 +02:00
Clement Rouault 03aa598514 Rewrite x64 SIB/Immediat logic to match x86 + fixes + test_x64 2015-09-15 09:17:25 +02:00
Clement Rouault 3cb26102ca Add simple_x86 test + small fixes 2015-09-14 15:36:36 +02:00
Clement Rouault 24d05aa3d5 Rewrite immediat logique of simple_x86 2015-09-14 13:27:11 +02:00
Clement Rouault ce7661260f Fix SIB generation 2015-09-10 16:55:25 +02:00
Clement Rouault bd855ce7d5 New assembler 2015-09-03 12:55:41 +02:00
Clement Rouault 4ba46979d9 Fix hook with new assembler + fix python3 compat for hook 2015-07-20 13:56:45 +02:00
Clement Rouault ebb23fd275 Big commit <3 2015-07-10 16:50:46 +02:00
Clement Rouault e1bee9f8e8 Commit simple_x86 before full rewriting 2015-06-26 11:08:53 +02:00
Clement Rouault eb741a4429 Add stuff about vectored exception 2015-04-13 17:54:45 +02:00
Clement Rouault b459125f27 Add LOT of doc + play on vertored exception 2015-04-13 15:56:25 +02:00
Clement Rouault 481b8861f0 Add TCP connections + Syswow64 injection 2015-04-01 18:22:42 +02:00
Clement Rouault a7b463c05a Add some functions + utility to create a console into injected process 2015-03-18 16:31:42 +01:00
Clement Rouault 00d670378d Fix 64bits stub: no more deadlock and arg non-preserved (I hope) 2015-03-13 15:48:59 +01:00
Clement Rouault 7510ad3f54 New 64bits callback stub that preserv x64 registers 2015-03-13 13:49:05 +01:00
Clement Rouault bcda1ac5c5 Fix 64bits callback stub, i now preserve the return value 2015-03-13 10:27:39 +01:00
Clement Rouault a1ee711a93 Fix INT import parsing for 64bits 2015-03-13 10:08:13 +01:00
Clement Rouault e2c2bdc236 Add support for 64bits injection + hooks 2015-03-12 18:25:49 +01:00
Clement Rouault 9c80593a97 Committing all the stuff 2015-03-11 15:51:00 +01:00