 hakril
|
f882bd1e35
|
Add wmi.gen_select for class select returning a generator + fom E_CRYPT define + CryptObj.nb_signer return 0 if CRYPT_E_INVALID_MSG_TYPE
|
2017-12-08 16:54:49 +01:00 |
|
|
hakril
|
4a75453a8b
|
Clean and Improve WMI query API that now accept a Timeout
|
2017-12-08 14:49:03 +01:00 |
|
|
hakril
|
3490dc987f
|
Default encrypt algo is now AES256_CBC + Fix import_pfx default flags to be able to use it for AES256_CBC simply
|
2017-12-07 15:40:47 +01:00 |
|
|
hakril
|
32de3cb824
|
Improve ApiSetMap resolve to match ntdll behavior + add sizekey option to encryption_demo genkey option
|
2017-12-06 10:21:40 +01:00 |
|
|
hakril
|
23837a0713
|
Improving volume objects + adding CurrentProcess.peb.apisetmap with ApiSetMap parsing capabilities
|
2017-12-04 10:12:41 +01:00 |
|
|
hakril
|
8f7adb8da1
|
Add fuller PEB structure + Improved UNICODE_STRING + other define
|
2017-12-04 10:01:40 +01:00 |
|
|
hakril
|
f03bb89ae6
|
Working on time translation (filetime - unix - datetime) and windows volume objects
|
2017-11-28 10:50:02 +01:00 |
|
|
hakril
|
22224b52e2
|
Added utils.query_file_informations wrapper arround new winproxy.NtQueryInformationFile
|
2017-11-27 10:13:13 +01:00 |
|
|
hakril
|
c135780ba9
|
Add Process.virtual_protect default value for 'old_protect' + add test for Improved LSA_UNICODE_STRING used in PEB.ProcessParameters + find_value now search in ntstatus values
|
2017-11-24 17:46:07 +01:00 |
|
|
hakril
|
f54599568d
|
Working on eventlog
|
2017-11-24 17:17:35 +01:00 |
|
|
Clement Rouault
|
5a5baa7bcd
|
Add ctypes_generation extended structs _LSA_UNICODE_STRING.py
|
2017-11-17 15:14:10 +01:00 |
|
|
Clement Rouault
|
d12bae6dbb
|
Remove 'WinUnicodeString' and add un extended struct _LSA_UNICODE_STRING: simplify lots of things
|
2017-11-17 15:13:34 +01:00 |
|
|
Clement Rouault
|
d3ca30b229
|
Winstruct parser now handle comments in winstructs source files
|
2017-11-17 15:10:19 +01:00 |
|
|
Clement Rouault
|
a0ffea68b7
|
Add a example of x86.assemble in the README
|
2017-11-15 17:29:11 +01:00 |
|
|
Clement Rouault
|
51bc3fdf7c
|
Improve _GUID & typedef definition + add a sample using gdef.meta to search for a name/value in generated defs
|
2017-11-15 15:20:38 +01:00 |
|
|
Clement Rouault
|
a6aa8b86ea
|
Fix typo in rpc windef and improve NDR-related exception message
|
2017-11-15 11:05:54 +01:00 |
|
|
hakril
|
d9db5ba428
|
utils.create_file_from_handle now handles binary opening mode
|
2017-11-15 09:00:38 +01:00 |
|
|
Clement Rouault
|
be68ba8b15
|
Testing a new generated file: meta.py
|
2017-11-10 17:29:50 +01:00 |
|
|
Clement Rouault
|
7929a31bf7
|
clean wintrust.py: add def to generated_ctypes + use gdef.IID for wintrust IID
|
2017-11-10 14:40:16 +01:00 |
|
|
Clement Rouault
|
4e5733c2c5
|
Process.prioroty now use the FlagMapper
|
2017-11-10 14:20:59 +01:00 |
|
|
Clement Rouault
|
8ba325afd2
|
Add a new FlagMapper to easily transform int to Flag and change to code use it
|
2017-11-10 13:47:27 +01:00 |
|
|
Clement Rouault
|
4efae2194d
|
Adding Process.priority + fix in WMI raised exceptions + add x86.Iret
|
2017-11-10 11:12:24 +01:00 |
|
|
hakril
|
14b1cbcf75
|
Adding improved MEMORY_BASIC_INFORMATION structs
|
2017-11-10 09:04:22 +01:00 |
|
|
Clement Rouault
|
5a79e15440
|
Improve WMI capabilities by adding access to various namespaces + listing methods + add CurrentProcess.load_library
|
2017-11-08 17:55:47 +01:00 |
|
|
Clement Rouault
|
e07d4dbe0c
|
Added th description from the readme at the beginning of the documentation
v3.5
|
2017-10-20 17:10:30 +02:00 |
|
|
hakril
|
c848f33729
|
Pushed new HTML doc, changed version to 0.3. Ready for hack.lu
|
2017-10-15 00:17:43 +02:00 |
|
|
hakril
|
c3f9d87c82
|
Add missing doc sources
|
2017-10-15 00:13:56 +02:00 |
|
|
hakril
|
2094ab4ad4
|
Fix some docstring + re-add windows.test.pop_proc_[32|64] + fix all samples + few doc adapt
|
2017-10-15 00:13:07 +02:00 |
|
|
Clement Rouault
|
c7fef877f0
|
Testing some crypto stuff
|
2017-10-13 17:56:36 +02:00 |
|
|
hakril
|
ba6b22ac84
|
testing crypto stuff
|
2017-10-12 08:13:42 +02:00 |
|
|
hakril
|
930c992be3
|
Working on improving crypto stuff
|
2017-10-09 09:11:48 +02:00 |
|
|
Clement Rouault
|
f6e151a7d5
|
Adding some crypto api
|
2017-10-06 17:32:24 +02:00 |
|
|
Clement Rouault
|
c12a0c45f9
|
Add windows.system + ALPC + RPC + winproxy demo to README.md
|
2017-10-06 15:10:04 +02:00 |
|
|
Clement Rouault
|
5ee74d5b8f
|
Update rpc doc + sample + new rpc function + new winfunc definition file + fix setup.py
|
2017-10-05 16:22:16 +02:00 |
|
|
Clement Rouault
|
a183e468ca
|
fix dbgprint to use hardcoded dict + improve rpc client forge_call + new ndr varying string
|
2017-10-03 17:30:38 +02:00 |
|
|
Clement Rouault
|
bd5976dce2
|
Added alpc + rpc tests files
|
2017-09-18 11:11:33 +02:00 |
|
|
Clement Rouault
|
7947ace02d
|
Add alpc[Client|Server] __del__ to close handles + NtAlpcDisconnectPort + test
|
2017-09-15 17:54:19 +02:00 |
|
|
Clement Rouault
|
b9a00b2ed7
|
add rpc.rst doc + rename endpoint_map_alpc + rename ndr EptMapAuth
|
2017-09-14 17:24:18 +02:00 |
|
|
Clement Rouault
|
5301f91927
|
Add sample for thread + fix code to get a WinProcess from a pid not using WinProcess(pid=xxx) + test
|
2017-09-11 18:20:49 +02:00 |
|
|
hakril
|
b3117ce4e3
|
pytest integration finished + moved tests/ to top dir
|
2017-09-10 18:57:59 +02:00 |
|
|
Clement Rouault
|
492b6f4f02
|
pytest added --leaks for leak check + test Handle.description
|
2017-09-08 17:53:59 +02:00 |
|
|
Clement Rouault
|
7db5620210
|
more pytest POC + fixed debugger code + test FunctionHXBP
|
2017-09-07 17:13:59 +02:00 |
|
|
Clement Rouault
|
89e486cd95
|
Working on rewriting of tests with pytest
|
2017-09-06 18:42:54 +02:00 |
|
|
Clement Rouault
|
fccd2a49e6
|
Add doc to RPC + RPC_IF_ID generated-extended + lsass sample
|
2017-08-30 18:29:49 +02:00 |
|
|
Clement Rouault
|
d44a3b032e
|
Add extended struct to ctypes generation + extended IID now in winstructs.py and used everywhere
|
2017-08-29 11:39:43 +02:00 |
|
|
Clement Rouault
|
1fe5b912be
|
Add some ALPC samples to the documentation
|
2017-08-28 17:09:49 +02:00 |
|
|
Clement Rouault
|
1941adc93f
|
Working on RtlGetUnloadEventTraceEx - adding function and struct + fix remotectypes char-array in struct
|
2017-08-17 18:51:07 +02:00 |
|
|
Clement Rouault
|
e9c62a125c
|
add system.build_number + better handling of closing python in Winprocess.__del__
|
2017-08-17 18:49:42 +02:00 |
|
|
Clement Rouault
|
c75dda60b5
|
Fixed get_kernel_modules for syswow64 process
|
2017-08-17 13:51:36 +02:00 |
|
|
Clement Rouault
|
16e29bd938
|
Added a sample for Debugger.attach
|
2017-08-16 18:07:00 +02:00 |
|