 Clement Rouault
|
c7b0b8d0aa
|
Update doc for COMImplementation usage
|
2016-08-22 13:50:08 +02:00 |
|
|
Clement Rouault
|
fe4d41db47
|
Add/Update some doc
|
2016-07-27 18:20:36 +02:00 |
|
|
Clement Rouault
|
f54a64670e
|
Add context_syswow/set_syswow_context + debugger able to handle BP in 64b part of syswow process
|
2016-07-20 18:21:28 +02:00 |
|
|
Clement Rouault
|
9ebb25017b
|
Better message / WindowsError raised when process die during safe_execute_python
|
2016-07-18 14:04:37 +02:00 |
|
|
Clement Rouault
|
19205f73a1
|
Improve debugger handling of memBP for future use + fix MemBP prot init + add failing test of multitple BP with diff prot
|
2016-07-13 18:23:26 +02:00 |
|
|
Clement Rouault
|
d90e461bcf
|
Playing with advanced breakpoint
|
2016-07-13 13:54:42 +02:00 |
|
|
Clement Rouault
|
4069c0892a
|
Add com sample + update readme/todo
|
2016-07-08 13:58:05 +02:00 |
|
|
Clement Rouault
|
9a980d87b3
|
First try at single_step and memory breakpoints in Debugger + test
|
2016-07-07 17:43:28 +02:00 |
|
|
Clement Rouault
|
3069b93d21
|
Remove winproxy.OptionExport + Add some classes ton MEMORY_INFORMATION enum
|
2016-07-01 18:12:28 +02:00 |
|
|
Clement Rouault
|
86fe9c9f82
|
Update generation for ntstatus and add a parallele define module to ApiProxy
|
2016-06-24 16:55:25 +02:00 |
|
|
Clement Rouault
|
0b32302591
|
Remove generate_callback_stub (only IATHook are impacted)
|
2016-06-09 18:51:48 +02:00 |
|
|
Clement Rouault
|
e1f7f1e500
|
execute_python doest not reinject the shellcode everytime + test hook 64b
|
2016-06-08 11:01:19 +02:00 |
|
|
Clement Rouault
|
f23357c13e
|
Testing hook without generated stub + new hook test in new file
|
2016-06-07 19:59:00 +02:00 |
|
|
Clement Rouault
|
bc9d3b61ef
|
Draft version of system handles
|
2016-06-07 17:13:44 +02:00 |
|
|
Clement Rouault
|
976ce78455
|
First try to replace unexisting GetThreadId on XP
|
2016-05-20 18:03:36 +02:00 |
|
|
Clement Rouault
|
3243f6e8fc
|
more doc
|
2016-04-27 16:36:17 +02:00 |
|
|
hakril
|
c2c3fe2dc2
|
more doc
|
2016-04-27 00:33:02 +02:00 |
|
|
Clement Rouault
|
a988ad03e3
|
Add struct + thread.teb_base
|
2016-04-25 17:48:49 +02:00 |
|
|
Clement Rouault
|
5b66242680
|
writing some doc
|
2016-04-18 23:09:26 +02:00 |
|
|
Clement Rouault
|
3454801ad0
|
small fix in Debugger.add_bp
|
2016-04-11 19:15:39 +02:00 |
|
|
hakril
|
53e131831d
|
Writing / updating some doc
|
2016-03-29 23:41:54 +02:00 |
|
|
Clement Rouault
|
480cbcf1dc
|
Improving com / wmi API / code
|
2016-03-25 15:14:53 +01:00 |
|
|
Clement Rouault
|
fb0171b8b9
|
WinpProcess in not a PROCESSENTRY32 anymore
|
2016-03-21 13:18:01 +01:00 |
|
|
Clement Rouault
|
78f9733295
|
Add del_bp + import LocalDebugger
|
2016-03-18 11:16:53 +01:00 |
|
|
Clement Rouault
|
a4090ea215
|
Add some defs + wintrust catalog functions
|
2016-03-16 16:33:38 +01:00 |
|
|
hakril
|
9a1088daab
|
Small fixes in DOC + update winproxy function list
|
2016-02-10 23:01:32 +01:00 |
|
|
Clement Rouault
|
b789a12040
|
Improve debugger + pe_parse 'guess' the PE type (32/64)
|
2016-02-10 16:27:53 +01:00 |
|
|
Clement Rouault
|
6cf4a9cae4
|
Add test / fix Winprocess.load_library / free some of the memory
|
2016-02-03 17:47:07 +01:00 |
|
|
Clement Rouault
|
9fbba331ca
|
Add NTSTATUS to windef/add virtual_free/improve nativeutils GetProcAddr + test
|
2016-02-02 18:45:24 +01:00 |
|
|
Clement Rouault
|
3f06e95617
|
First - shameful version of syswow64 debugging
|
2016-02-01 18:45:51 +01:00 |
|
|
Clement Rouault
|
d720170781
|
Big commit GetProcAddrss 32 and 64 (fixed)
|
2016-01-29 18:05:21 +01:00 |
|
|
Clement Rouault
|
5b5db57e17
|
Rewrite injected stub for remote python -> now have nice threads handling
|
2016-01-29 13:51:35 +01:00 |
|
|
Clement Rouault
|
f307f8202a
|
Add Process.write_[dq]word + rewrite injection.py to use PEB parsing if needed
|
2016-01-28 17:00:32 +01:00 |
|
|
Clement Rouault
|
588a1e0461
|
Update TODO
|
2016-01-26 18:12:59 +01:00 |
|
|
Clement Rouault
|
7c35615319
|
Working / testing the debugger
|
2016-01-25 19:11:51 +01:00 |
|
|
Clement Rouault
|
99788d0368
|
Writting a debugger is fun :D
|
2016-01-22 18:19:00 +01:00 |
|
|
hakril
|
fad8121cbf
|
Updated TODO and test for CreateFile error_check fix
|
2016-01-13 23:43:04 +01:00 |
|
|
Clement Rouault
|
b459e291c4
|
More doc + regitry PyPhKey.get()
|
2016-01-07 19:26:40 +01:00 |
|
|
Clement Rouault
|
9c8a4dcfad
|
Adding more and more documentation
|
2016-01-06 20:11:20 +01:00 |
|
|
hakril
|
0b2eabde5c
|
Documenting winproxy
|
2016-01-04 01:26:07 +01:00 |
|
|
hakril
|
eebaade97a
|
Add sample iat_hook
|
2016-01-02 00:52:25 +01:00 |
|
|
hakril
|
3d0b50a00c
|
REAME / TODO / AUTHORS
|
2016-01-01 22:50:40 +01:00 |
|