39 Commits

Author	SHA1	Message	Date
Clement Rouault	943945225a	Improve debugger/BP doc + add sample + small fixes in WMI/LocalDebugger + new data in ApiProxy for FunctionBP	2016-08-19 15:06:26 +02:00
Clement Rouault	2767a08624	Fix bug in Process.name + create_process show_windows=True by default	2016-07-29 17:32:14 +02:00
Clement Rouault	fe4d41db47	Add/Update some doc	2016-07-27 18:20:36 +02:00
Clement Rouault	f54a64670e	Add context_syswow/set_syswow_context + debugger able to handle BP in 64b part of syswow process	2016-07-20 18:21:28 +02:00
Clement Rouault	48a40fa520	Improve MemBP API + restore target memory on break	2016-07-20 13:16:06 +02:00
Clement Rouault	82621b881a	Add get_memory_breakpoint_at to debugger + fix token_user in process + add prot param to virtual_alloc	2016-07-13 16:28:31 +02:00
Clement Rouault	d90e461bcf	Playing with advanced breakpoint	2016-07-13 13:54:42 +02:00
Clement Rouault	400b7b91b0	First try at all BP remove + check range on MemBP for call to .trigger() else ignore	2016-07-08 17:18:57 +02:00
Clement Rouault	9a980d87b3	First try at single_step and memory breakpoints in Debugger + test	2016-07-07 17:43:28 +02:00
Clement Rouault	cf6c48b418	Remove some commented old code + fix read/write of REG_QWORD values in registry	2016-07-07 17:41:57 +02:00
Clement Rouault	886b445e0e	Token.integrity returns a Flag + fix simple_x64 on SIB use for [r13]	2016-07-04 18:33:35 +02:00
Clement Rouault	3069b93d21	Remove winproxy.OptionExport + Add some classes ton MEMORY_INFORMATION enum	2016-07-01 18:12:28 +02:00
Clement Rouault	c2e7b43b9f	Add R8 to ECONTEXT64	2016-07-01 17:06:20 +02:00
Clement Rouault	56b8264ffd	Add x64.assemble + sample test_code	2016-06-28 11:31:53 +02:00
Clement Rouault	bc9d3b61ef	Draft version of system handles	2016-06-07 17:13:44 +02:00
Clement Rouault	971610bbe3	[WIP] system.handles	2016-06-06 17:24:30 +02:00
Clement Rouault	3d51278039	fix UNICODE_STRING.str / test assemblers / improve com_parser for future work	2016-06-06 17:24:10 +02:00
Clement Rouault	976ce78455	First try to replace unexisting GetThreadId on XP	2016-05-20 18:03:36 +02:00
Clement Rouault	8bee07b8dc	Add REG_QWORD handling in registry.py	2016-05-19 10:59:43 +02:00
Clement Rouault	dfe8217259	Fix system.version_name on windows10	2016-05-13 16:31:07 +02:00
hakril	c2c3fe2dc2	more doc	2016-04-27 00:33:02 +02:00
Clement Rouault	a988ad03e3	Add struct + thread.teb_base	2016-04-25 17:48:49 +02:00
Clement Rouault	57634f076c	Add process.time_info	2016-04-21 10:58:35 +02:00
Clement Rouault	09e9b7efbb	Fix get_mapped_filename 32 -> 64 (use NtQueryVirtualMemory)	2016-04-19 11:49:33 +02:00
Clement Rouault	5b66242680	writing some doc	2016-04-18 23:09:26 +02:00
Clement Rouault	b621e6a09f	fix queryworkingset / add test / add virtual protect context manager	2016-04-18 11:24:41 +02:00
Clement Rouault	e781e3493f	Playing with workingset	2016-04-11 19:15:23 +02:00
Clement Rouault	b698b27a6f	Add process.query_working_set	2016-04-08 13:45:27 +02:00
Clement Rouault	0e9ec9ed82	add / fix in registry and registry sample	2016-04-01 17:34:56 +02:00
Clement Rouault	6c1b4cf5e6	More doc / sample	2016-03-30 18:27:40 +02:00
Clement Rouault	96c8d68297	kernobj.py -> WinObj explorer	2016-03-30 15:28:04 +02:00
hakril	53e131831d	Writing / updating some doc	2016-03-29 23:41:54 +02:00
Clement Rouault	da52b1a014	More Nt def/structs/funcs	2016-03-29 17:19:17 +02:00
Clement Rouault	cf8386400f	Fix WinUnicodeString to use Length	2016-03-29 14:01:40 +02:00
Clement Rouault	ff5ce9ae86	Add EnumType for generated enum	2016-03-25 16:59:40 +01:00
Clement Rouault	480cbcf1dc	Improving com / wmi API / code	2016-03-25 15:14:53 +01:00
Clement Rouault	9856a1614b	Add firewall interface to system.network	2016-03-25 13:44:04 +01:00
Clement Rouault	1a85d99b0e	windows.com with a cleaner interface + use in wmi.pu	2016-03-24 16:03:13 +01:00
Clement Rouault	3cb8cc6f9e	Refactor: new winobject directory	2016-03-23 13:42:54 +01:00