 Clement Rouault
|
f9ce637ffa
|
Small doc stuff + fix setup.py
|
2016-02-10 17:51:54 +01:00 |
|
|
Clement Rouault
|
c5e021f10d
|
Writing samples and doc !
|
2016-02-10 17:30:54 +01:00 |
|
|
Clement Rouault
|
c40cb0c8b0
|
Add get_mapped_filename to WinProcess
|
2016-02-10 16:29:46 +01:00 |
|
|
Clement Rouault
|
b789a12040
|
Improve debugger + pe_parse 'guess' the PE type (32/64)
|
2016-02-10 16:27:53 +01:00 |
|
|
Clement Rouault
|
401db9c347
|
Working on debugger (str address + rewrite + test)
|
2016-02-10 11:53:13 +01:00 |
|
|
Clement Rouault
|
6cf4a9cae4
|
Add test / fix Winprocess.load_library / free some of the memory
|
2016-02-03 17:47:07 +01:00 |
|
|
Clement Rouault
|
9fbba331ca
|
Add NTSTATUS to windef/add virtual_free/improve nativeutils GetProcAddr + test
|
2016-02-02 18:45:24 +01:00 |
|
|
Clement Rouault
|
3f06e95617
|
First - shameful version of syswow64 debugging
|
2016-02-01 18:45:51 +01:00 |
|
|
Clement Rouault
|
0da86e20aa
|
SetThreadContext 32<->64 + test
|
2016-02-01 17:31:56 +01:00 |
|
|
Clement Rouault
|
d720170781
|
Big commit GetProcAddrss 32 and 64 (fixed)
|
2016-01-29 18:05:21 +01:00 |
|
|
Clement Rouault
|
5b5db57e17
|
Rewrite injected stub for remote python -> now have nice threads handling
|
2016-01-29 13:51:35 +01:00 |
|
|
Clement Rouault
|
7be3561ccf
|
Better remote veh sample :)
|
2016-01-28 17:02:18 +01:00 |
|
|
Clement Rouault
|
ee62d6a972
|
Add sample on veh handle setup in remote process
|
2016-01-28 17:00:33 +01:00 |
|
|
Clement Rouault
|
f307f8202a
|
Add Process.write_[dq]word + rewrite injection.py to use PEB parsing if needed
|
2016-01-28 17:00:32 +01:00 |
|
|
Clement Rouault
|
38a2298dee
|
Add nativeutils.py with GetProcAddress64 + add instr to x86/x64 assembler + add merge of labels in multipleinstr (dummy function support)
|
2016-01-28 17:00:31 +01:00 |
|
|
hakril
|
ec4862439f
|
Add LdrLoadDLL + Fix winproxy.VirtualProtect Commit2
|
2016-01-27 12:41:41 +01:00 |
|
|
hakril
|
6d8796f3ed
|
Add LdrLoadDLL + Fix winproxy.VirtualProtect + add a first draft on veh sample
|
2016-01-26 22:06:02 +01:00 |
|
|
Clement Rouault
|
588a1e0461
|
Update TODO
|
2016-01-26 18:12:59 +01:00 |
|
|
Clement Rouault
|
010453e96d
|
Fix test + Fix a Use-After-CloseHandle in debugger + add dbgprint on HANDLE
|
2016-01-26 14:50:21 +01:00 |
|
|
Clement Rouault
|
7c35615319
|
Working / testing the debugger
|
2016-01-25 19:11:51 +01:00 |
|
|
hakril
|
cf89d25486
|
Slowly working on debug.py
|
2016-01-25 09:45:09 +01:00 |
|
|
Clement Rouault
|
99788d0368
|
Writting a debugger is fun :D
|
2016-01-22 18:19:00 +01:00 |
|
|
hakril
|
f6f206b842
|
Still playing will debug API + add Winprocess.read_[dq]word
|
2016-01-21 00:43:41 +01:00 |
|
|
Clement Rouault
|
6b75fe3185
|
Playing with Token and Debugger API
|
2016-01-20 19:07:18 +01:00 |
|
|
hakril
|
f43f7c4838
|
Fix WinProcess.is_exit + test case
|
2016-01-19 23:50:10 +01:00 |
|
|
hakril
|
fad8121cbf
|
Updated TODO and test for CreateFile error_check fix
|
2016-01-13 23:43:04 +01:00 |
|
|
hakril
|
c35e517b35
|
Fix CreateFile error_check: now raise on INVALID_HANDLE_VALUE
|
2016-01-13 23:35:49 +01:00 |
|
|
hakril
|
e0d430b3fc
|
Fix the lookup path for 64bits pythonDLL fron 32bits process
V0.1
|
2016-01-08 00:41:36 +01:00 |
|
|
hakril
|
5c0ed1edfe
|
Update and clean the README one more time
|
2016-01-08 00:33:15 +01:00 |
|
|
hakril
|
21edf14888
|
Add online documentation to README
|
2016-01-08 00:23:47 +01:00 |
|
|
hakril
|
910f82e95e
|
Adapting README for github
|
2016-01-08 00:13:16 +01:00 |
|
|
hakril
|
bd42d05e95
|
Add LICENSE
|
2016-01-07 23:58:22 +01:00 |
|
|
hakril
|
32fe601b1f
|
Still more doc
|
2016-01-07 23:51:17 +01:00 |
|
|
Clement Rouault
|
a4e61c74e5
|
Adding a setup.py (this looks like a real project now :D)
|
2016-01-07 20:16:44 +01:00 |
|
|
Clement Rouault
|
8e706fa4d2
|
Fix timing issue in test / might exist in real code
|
2016-01-07 20:16:11 +01:00 |
|
|
Clement Rouault
|
745e853736
|
Change name of the project on main page of documentation
|
2016-01-07 19:36:17 +01:00 |
|
|
Clement Rouault
|
b459e291c4
|
More doc + regitry PyPhKey.get()
|
2016-01-07 19:26:40 +01:00 |
|
|
Clement Rouault
|
9c8a4dcfad
|
Adding more and more documentation
|
2016-01-06 20:11:20 +01:00 |
|
|
Clement Rouault
|
b2eede98b1
|
More doc (registry / network)
|
2016-01-05 18:03:53 +01:00 |
|
|
hakril
|
c73fc7934a
|
Add doc on PEB + samples in sphinx
|
2016-01-05 08:43:40 +01:00 |
|
|
Clement Rouault
|
4e9cf7684e
|
Add documentation for windows.native_exec
|
2016-01-04 18:15:03 +01:00 |
|
|
hakril
|
0b2eabde5c
|
Documenting winproxy
|
2016-01-04 01:26:07 +01:00 |
|
|
hakril
|
269b6dde58
|
Writing documentation
|
2016-01-03 01:51:46 +01:00 |
|
|
hakril
|
1d4ce6986b
|
update new winfunc.txt
|
2016-01-02 01:39:47 +01:00 |
|
|
hakril
|
8aa2382799
|
Clean stuff in wintrust + Registry object
|
2016-01-02 01:38:22 +01:00 |
|
|
hakril
|
eebaade97a
|
Add sample iat_hook
|
2016-01-02 00:52:25 +01:00 |
|
|
hakril
|
55d1063200
|
Add samples for current_process and remote process interface
|
2016-01-02 00:21:34 +01:00 |
|
|
hakril
|
795cad5b02
|
Fix stuff in simple_[x86|x64] + add mov [REG], IMM32
|
2016-01-02 00:16:05 +01:00 |
|
|
hakril
|
3d0b50a00c
|
REAME / TODO / AUTHORS
|
2016-01-01 22:50:40 +01:00 |
|
|
hakril
|
8cae7c477b
|
Moving doc at the root
|
2015-12-30 23:17:51 +01:00 |
|