 hakril
|
546818f91b
|
Added a sample for windows.debug.FunctionCallBP : change_function_ret_value.py
|
2020-03-10 23:59:50 +01:00 |
|
|
hakril
|
fe22a5ad0d
|
Testing/Fixing some sample for py3
|
2020-02-13 23:16:46 +01:00 |
|
|
hakril
|
2f778b69f9
|
windows.pipe.create now accept a custom security descriptor as parameter
|
2020-02-03 21:42:34 +01:00 |
|
|
1orenz0
|
5b55d4d693
|
[event_log] Add some more format type to support
|
2019-10-14 22:03:49 +02:00 |
|
|
1orenz0
|
fbfe4344d4
|
[event_log] some events does not have a template message
|
2019-10-14 22:03:49 +02:00 |
|
|
1orenz0
|
215afaa418
|
[event_log] add verbose option to wevtutil.py
|
2019-10-14 22:03:49 +02:00 |
|
|
1orenz0
|
91ef7da2e1
|
[event_log] Fix typo in wevtutil
|
2019-10-14 22:03:49 +02:00 |
|
|
1orenz0
|
8a14fe9174
|
[event_log] add realtime logger to wevtutil
|
2019-10-14 22:03:49 +02:00 |
|
|
1orenz0
|
44d9d0dd35
|
[event log] Add example of what can be done with events
|
2019-10-14 22:03:49 +02:00 |
|
|
hakril
|
4f62434dfb
|
Moved lookup_sid to windows.utils + add Token to window.security + update doc about official Token path
|
2018-12-21 18:50:22 +01:00 |
|
|
hakril
|
f522f08e7f
|
Fix token.py doc + improve NDR with new class + doc NdrString new behavior + update uac.py sample to match new NdrString
|
2018-12-21 16:05:37 +01:00 |
|
|
hakril
|
45ace331cb
|
Added token sample + Debugger.on_setup sample
|
2018-12-21 15:27:04 +01:00 |
|
|
hakril
|
79ff18e06f
|
Update doc/samples/test of windows.security
|
2018-12-21 15:26:29 +01:00 |
|
|
hakril
|
8dc2d443d5
|
Update WMI docs / samples
|
2018-12-17 23:40:08 +01:00 |
|
|
hakril
|
c3b85068e5
|
Added Retn to x86/64 assemblers + encryption_demo sample can now sign a file + [WIP] token improvement
|
2018-11-24 22:59:01 +01:00 |
|
|
hakril
|
fff2f37781
|
Add WMI create-process sample + improved some sample feature/doc
|
2018-11-24 22:59:01 +01:00 |
|
|
hakril
|
b6f57b8342
|
Code now use renamed/improved windows.com.Variant
|
2018-11-24 22:59:01 +01:00 |
|
|
hakril
|
c19241098a
|
Improve object manager doc + add samples
|
2018-07-13 14:24:55 +02:00 |
|
|
hakril
|
041a354d17
|
Update some doc + document windows.system.modules
|
2018-06-11 11:09:48 +02:00 |
|
|
hakril
|
3d69ad3cb5
|
Add some definition in ctypes generation + winproxy wrappers; fix com.py imports
|
2018-06-05 11:38:57 +02:00 |
|
|
hakril
|
93bb9b6540
|
Add doc/sample/test for event log code
|
2018-06-05 11:30:25 +02:00 |
|
|
hakril
|
849d64378f
|
Commit current work on scheduled tasks
|
2018-05-12 00:11:10 +02:00 |
|
|
hakril
|
83f4b0c48b
|
Fixing some doc / samples
|
2018-03-27 21:24:56 +02:00 |
|
|
hakril
|
34c2d94bc2
|
Some fixes in code/samples/test
|
2018-03-27 20:37:30 +02:00 |
|
|
hakril
|
b2c3493f46
|
Improve com generated interface
|
2018-03-09 16:10:59 +01:00 |
|
|
hakril
|
9ef71ad9e1
|
Clean ICallInterceptor POC
|
2018-03-08 23:12:06 +01:00 |
|
|
hakril
|
e40b9fb2ff
|
Add quick POC of ICallInterceptor to COM samples
|
2018-03-08 22:45:26 +01:00 |
|
|
hakril
|
8840b9fdb9
|
updated doc
|
2018-03-07 10:24:46 +01:00 |
|
|
hakril
|
03e252b53a
|
Upgrade to sphinx 1.7.1 + small css fix + review/update/refactor doc samples
|
2018-03-05 01:06:30 +01:00 |
|
|
hakril
|
a057f8c130
|
class CertificateContext(PCERT_CONTEXT) replaced by Certificate(CERT_CONTEXT) + multi-received encrypt/decrypt test
|
2018-03-04 18:28:20 +01:00 |
|
|
hakril
|
4499080a77
|
Remote load library now use LoadLibraryW and get_mapped_filename use GetMappedFileNameW: return unicode str in every case
|
2018-02-07 13:14:25 +01:00 |
|
|
hakril
|
3490dc987f
|
Default encrypt algo is now AES256_CBC + Fix import_pfx default flags to be able to use it for AES256_CBC simply
|
2017-12-07 15:40:47 +01:00 |
|
|
hakril
|
32de3cb824
|
Improve ApiSetMap resolve to match ntdll behavior + add sizekey option to encryption_demo genkey option
|
2017-12-06 10:21:40 +01:00 |
|
|
hakril
|
23837a0713
|
Improving volume objects + adding CurrentProcess.peb.apisetmap with ApiSetMap parsing capabilities
|
2017-12-04 10:12:41 +01:00 |
|
|
hakril
|
c135780ba9
|
Add Process.virtual_protect default value for 'old_protect' + add test for Improved LSA_UNICODE_STRING used in PEB.ProcessParameters + find_value now search in ntstatus values
|
2017-11-24 17:46:07 +01:00 |
|
|
Clement Rouault
|
51bc3fdf7c
|
Improve _GUID & typedef definition + add a sample using gdef.meta to search for a name/value in generated defs
|
2017-11-15 15:20:38 +01:00 |
|
|
hakril
|
2094ab4ad4
|
Fix some docstring + re-add windows.test.pop_proc_[32|64] + fix all samples + few doc adapt
|
2017-10-15 00:13:07 +02:00 |
|
|
Clement Rouault
|
5ee74d5b8f
|
Update rpc doc + sample + new rpc function + new winfunc definition file + fix setup.py
|
2017-10-05 16:22:16 +02:00 |
|
|
Clement Rouault
|
5301f91927
|
Add sample for thread + fix code to get a WinProcess from a pid not using WinProcess(pid=xxx) + test
|
2017-09-11 18:20:49 +02:00 |
|
|
Clement Rouault
|
fccd2a49e6
|
Add doc to RPC + RPC_IF_ID generated-extended + lsass sample
|
2017-08-30 18:29:49 +02:00 |
|
|
Clement Rouault
|
1fe5b912be
|
Add some ALPC samples to the documentation
|
2017-08-28 17:09:49 +02:00 |
|
|
Clement Rouault
|
16e29bd938
|
Added a sample for Debugger.attach
|
2017-08-16 18:07:00 +02:00 |
|
|
Clement Rouault
|
bd6a3d35d5
|
Created sub-directories in samples/
|
2017-08-16 17:37:26 +02:00 |
|
|
Clement Rouault
|
928a2744d5
|
Change RPC_SYNTAX_IDENTIFIER to RPC_IF_ID + update setup_hook + some add to wincli
|
2017-08-04 17:28:46 +02:00 |
|
|
Clement Rouault
|
d1cadf062a
|
working on windows.alpc + fix in current_process.threads
|
2017-08-04 17:18:41 +02:00 |
|
|
Clement Rouault
|
a5688076a6
|
add uac sample
|
2017-06-07 11:45:59 +02:00 |
|
|
Clement Rouault
|
a13b287202
|
Clean some rpc/alpc code + add ndr.NdrCString
|
2017-06-07 11:45:11 +02:00 |
|
|
Clement Rouault
|
1a73fe713b
|
Add missing psid.py + some rpc fix + alpc sample + wincli
|
2017-05-24 17:49:46 +02:00 |
|
|
Clement Rouault
|
654e6bff71
|
change remote_calc sample to use notepad + add demo of test_code sample + Stos[BWD] in simple_x86 +
|
2017-04-13 11:14:09 +02:00 |
|
|
Clement Rouault
|
344678de02
|
Add doc/sample for CryptObject
|
2017-04-12 17:20:37 +02:00 |
|