fb23ad2838
Fix syswow64 32<->64 for python3-23b
2020-03-10 21:03:59 +01:00
7921e74647
Fixed a GC issue with system.modules + added deprecation warning to utils.get_kernel_modules()
2020-03-10 20:50:04 +01:00
5c3b0cda88
Merge branch 'gitter-badger-gitter-badge' into dev
2020-02-16 09:53:52 +01:00
50f6b993de
Adapted the gitter link + small update to the README
2020-02-16 09:52:07 +01:00
d7c150b794
Add Gitter badge
2020-02-14 10:42:30 +00:00
0cf6057b98
setup.py is py3-beta ready :)
2020-02-14 10:16:27 +01:00
02b2ba13f9
Added a poc for a WinFile object
2020-02-13 23:24:37 +01:00
92df7eaee0
New generated_def py3 ready \o/ PFW should be ready for py3 testing
2020-02-13 23:18:47 +01:00
9f69b1cefa
Adapted some stuff in security.py for py3
2020-02-13 23:17:43 +01:00
fe22a5ad0d
Testing/Fixing some sample for py3
2020-02-13 23:16:46 +01:00
66382b89f7
Some more py3 compat fix + few feature in POC
2020-02-13 22:30:46 +01:00
4dc71b0449
Added some flags & improved explain()
2020-02-13 22:23:55 +01:00
4d3b3e18ad
Lot of small py3 compat fix
2020-02-13 22:23:20 +01:00
b27d161a6a
Fixed ctypes_generation about some bugs on py3
2020-02-13 22:13:23 +01:00
80c6a747da
Updated test for py3
2020-02-13 22:12:40 +01:00
f403856e26
Debugger test pass on py3
2020-02-08 00:15:41 +01:00
6a74c83670
test_process pass for python3 + added some pe_parse test
2020-02-07 23:06:26 +01:00
889de363ca
windows.injection now handle injection of py3 code !
2020-02-06 00:03:10 +01:00
bac3dcb55b
Fix simple_x64 REX for python3
2020-02-05 23:57:34 +01:00
2f778b69f9
windows.pipe.create now accept a custom security descriptor as parameter
2020-02-03 21:42:34 +01:00
2fddd82f00
Adding pycompat.py for py2/py3 work in progress
2020-02-02 18:18:56 +01:00
46197e763a
Fixed windows.winproxy.resolve (corresponding test already exist)
2020-02-02 18:17:36 +01:00
a7175be425
Added/fixed some test
2020-02-02 18:11:13 +01:00
f2a6489463
Added mov REG/SEGREG in simple_x86 + fix a bug in syswow64 on AMD do to a processor bug (Issue10)
2020-02-02 17:49:42 +01:00
2e1043ead4
Added some code to play with extended attributes
2020-01-26 16:02:38 +01:00
b490130585
Aded new generated ctypes_generation
2020-01-26 15:55:21 +01:00
d20083c57c
windows.crypto.sign accept sin algo as parameter
2020-01-26 15:51:03 +01:00
fb2b63b66d
ctypes_generation now generate py3.6 compatible code :)
2020-01-18 23:18:25 +01:00
b971fa5faf
Added some functions to winproxy
2020-01-17 21:11:24 +01:00
c5d8faaa4a
Winstruct parser accept * in array size expression
2020-01-17 21:09:04 +01:00
5ae6fb2634
Added new ctypes definition
2020-01-17 21:08:20 +01:00
c589a41902
[WIP] saving POC of symbol
2020-01-17 21:07:35 +01:00
7638080ee4
Added new service API allowing to find service by name easily
2019-11-14 13:31:20 +01:00
0ed859b95e
Added support for simple expression in array (like [MAX_PATH + 1])
2019-10-31 16:27:01 +01:00
6f55d2e48f
Fix a bug in debugger when detaching after a Ctrl+c during a BP
2019-10-19 00:39:03 +02:00
5b55d4d693
[event_log] Add some more format type to support
2019-10-14 22:03:49 +02:00
fbfe4344d4
[event_log] some events does not have a template message
2019-10-14 22:03:49 +02:00
215afaa418
[event_log] add verbose option to wevtutil.py
2019-10-14 22:03:49 +02:00
91ef7da2e1
[event_log] Fix typo in wevtutil
2019-10-14 22:03:49 +02:00
8a14fe9174
[event_log] add realtime logger to wevtutil
2019-10-14 22:03:49 +02:00
4f92323abf
[event log] export message_id instead of message_name
...
It's more consistent with the other classes
2019-10-14 22:03:49 +02:00
44d9d0dd35
[event log] Add example of what can be done with events
2019-10-14 22:03:49 +02:00
6dd314659d
[event log] adding event channel metadata message ID
2019-10-14 22:03:49 +02:00
adb7d3b63a
[event log] adding event metadata
2019-10-14 22:03:49 +02:00
b5371ddf33
[event log] still adding publisher metadata
2019-10-14 22:03:49 +02:00
4495eca6d0
[event log] add some more metadata
2019-10-14 22:03:49 +02:00
df28515b97
[event log] Expose message filename
2019-10-14 22:03:49 +02:00
6374f91fef
[event log] Expose channel metadatas
2019-10-14 22:03:49 +02:00
6125a1fb15
[event_trace] Add a way to pass a Python object to an ETW trace's
...
context
It may be useful to pass a python object (e.g. class) to the ETW
processing callback. The ETW tracing API allows the user to fill out a
"Context" field with a pointer value that will be passed to the event
being sent, the rest is ctypes magic for wrapping the python object
into a native pointer value.
2019-10-14 22:03:49 +02:00
bfeb2e6dec
[event_log] Configure an ETW trace to listen on specific keywords
...
By default EnableTrace will listen with a "KeywordsAny" value of
0xffffffff. Some event log providers send events with keywords over
0x100000000, so we need a mecanism to filter on thoses keywords.
2019-10-14 22:03:49 +02:00
hakril