hakril
|
e0d430b3fc
|
Fix the lookup path for 64bits pythonDLL fron 32bits process
V0.1
|
2016-01-08 00:41:36 +01:00 |
|
hakril
|
5c0ed1edfe
|
Update and clean the README one more time
|
2016-01-08 00:33:15 +01:00 |
|
hakril
|
21edf14888
|
Add online documentation to README
|
2016-01-08 00:23:47 +01:00 |
|
hakril
|
910f82e95e
|
Adapting README for github
|
2016-01-08 00:13:16 +01:00 |
|
hakril
|
bd42d05e95
|
Add LICENSE
|
2016-01-07 23:58:22 +01:00 |
|
hakril
|
32fe601b1f
|
Still more doc
|
2016-01-07 23:51:17 +01:00 |
|
Clement Rouault
|
a4e61c74e5
|
Adding a setup.py (this looks like a real project now :D)
|
2016-01-07 20:16:44 +01:00 |
|
Clement Rouault
|
8e706fa4d2
|
Fix timing issue in test / might exist in real code
|
2016-01-07 20:16:11 +01:00 |
|
Clement Rouault
|
745e853736
|
Change name of the project on main page of documentation
|
2016-01-07 19:36:17 +01:00 |
|
Clement Rouault
|
b459e291c4
|
More doc + regitry PyPhKey.get()
|
2016-01-07 19:26:40 +01:00 |
|
Clement Rouault
|
9c8a4dcfad
|
Adding more and more documentation
|
2016-01-06 20:11:20 +01:00 |
|
Clement Rouault
|
b2eede98b1
|
More doc (registry / network)
|
2016-01-05 18:03:53 +01:00 |
|
hakril
|
c73fc7934a
|
Add doc on PEB + samples in sphinx
|
2016-01-05 08:43:40 +01:00 |
|
Clement Rouault
|
4e9cf7684e
|
Add documentation for windows.native_exec
|
2016-01-04 18:15:03 +01:00 |
|
hakril
|
0b2eabde5c
|
Documenting winproxy
|
2016-01-04 01:26:07 +01:00 |
|
hakril
|
269b6dde58
|
Writing documentation
|
2016-01-03 01:51:46 +01:00 |
|
hakril
|
1d4ce6986b
|
update new winfunc.txt
|
2016-01-02 01:39:47 +01:00 |
|
hakril
|
8aa2382799
|
Clean stuff in wintrust + Registry object
|
2016-01-02 01:38:22 +01:00 |
|
hakril
|
eebaade97a
|
Add sample iat_hook
|
2016-01-02 00:52:25 +01:00 |
|
hakril
|
55d1063200
|
Add samples for current_process and remote process interface
|
2016-01-02 00:21:34 +01:00 |
|
hakril
|
795cad5b02
|
Fix stuff in simple_[x86|x64] + add mov [REG], IMM32
|
2016-01-02 00:16:05 +01:00 |
|
hakril
|
3d0b50a00c
|
REAME / TODO / AUTHORS
|
2016-01-01 22:50:40 +01:00 |
|
hakril
|
8cae7c477b
|
Moving doc at the root
|
2015-12-30 23:17:51 +01:00 |
|
hakril
|
65f3c95539
|
Including ctypes_generation code in the project
|
2015-12-30 23:12:56 +01:00 |
|
hakril
|
28eb4df2d0
|
Testing of project tree rewriting
|
2015-12-30 22:49:34 +01:00 |
|
hakril
|
c8bf7d04f8
|
Add injected python dll presence verification
|
2015-12-29 18:13:16 +01:00 |
|
Clement Rouault
|
3ed7c651da
|
Fix GetContext 32<->64 + Thread.start_address 32<->64
|
2015-12-22 17:23:38 +01:00 |
|
Clement Rouault
|
5a29c59b3e
|
execute_python is now safe + test
|
2015-12-22 16:17:30 +01:00 |
|
Clement Rouault
|
dea58c8c77
|
winproxy lazy load the DLL
|
2015-12-22 16:12:40 +01:00 |
|
Clement Rouault
|
718df2ba95
|
Fix a bug in WMI for 64b process
|
2015-12-14 15:13:17 +01:00 |
|
Clement Rouault
|
b5d0a513fe
|
add simple_com / fix alignement issu in syswow64 stub
|
2015-12-11 18:44:18 +01:00 |
|
Clement Rouault
|
d767ae5b8b
|
Add And/Or + Fix Sub in simple_x[86|64]
|
2015-12-11 18:42:31 +01:00 |
|
Clement Rouault
|
e99e3aa39d
|
syswow 64bits stub are now generated :)
|
2015-12-11 11:41:14 +01:00 |
|
Clement Rouault
|
59621034f5
|
Add some play-code for wintrust/registry/wmi
|
2015-12-11 09:54:43 +01:00 |
|
Clement Rouault
|
62f7ee674f
|
Add a network object to windows.system
|
2015-12-11 09:54:11 +01:00 |
|
Clement Rouault
|
46d0a45e17
|
Get PEB of other process without injection
|
2015-12-11 09:53:13 +01:00 |
|
Clement Rouault
|
419e65324f
|
Add 32bits register support in simple_x64
|
2015-12-11 09:51:34 +01:00 |
|
Clement Rouault
|
ea78f81468
|
Add 64->32 bits pe/peb parsing + stuff in simple_x86/64
|
2015-11-13 09:25:05 +01:00 |
|
Clement Rouault
|
2523c8e63e
|
Add CreateFileW to winproxy + add GENERIC_READ as default dwDesiredAccess
|
2015-09-24 10:15:11 +02:00 |
|
Clement Rouault
|
694f10c095
|
Fix a bug introduced in the 64b hook stub
|
2015-09-23 15:58:10 +02:00 |
|
Clement Rouault
|
c884122b29
|
Fix remote peb64 moodule parsing fail
|
2015-09-23 14:40:49 +02:00 |
|
Clement Rouault
|
f5b0c0294f
|
cosmetic: fucking linter :(
|
2015-09-23 14:32:27 +02:00 |
|
Clement Rouault
|
663de130b5
|
renamed k32testing.py -> winproxy.py
|
2015-09-23 10:29:24 +02:00 |
|
Clement Rouault
|
b1d4f23bb7
|
widows.utils is now a directory
|
2015-09-23 09:47:58 +02:00 |
|
Clement Rouault
|
da521908ed
|
MultipleInst now know how to handle Prefix
|
2015-09-22 10:24:41 +02:00 |
|
Clement Rouault
|
32b12daa8f
|
Add Movsb | Movsd to simple_x86
|
2015-09-22 10:19:26 +02:00 |
|
Clement Rouault
|
e38084eefc
|
Add jbe jnb to simple_x86
|
2015-09-22 10:00:36 +02:00 |
|
Clement Rouault
|
da31cc204b
|
add deref(x) to simply create displacement only mem_access
|
2015-09-22 09:32:17 +02:00 |
|
Clement Rouault
|
c94a09d6bd
|
Add inc rm/32
|
2015-09-21 17:45:54 +02:00 |
|
Clement Rouault
|
600ac6dffd
|
New ntstatus.py with ntstatus definition for NtDllProxy
|
2015-09-21 17:13:56 +02:00 |
|