33 Commits

Author SHA1 Message Date
Clement Rouault 19b168df07 Add target_dll and target_func to TransparentApiProxy + test_code.py handles raw [x86|x64] 2016-08-19 15:15:04 +02:00
Clement Rouault 943945225a Improve debugger/BP doc + add sample + small fixes in WMI/LocalDebugger + new data in ApiProxy for FunctionBP 2016-08-19 15:06:26 +02:00
Clement Rouault 0d38c1e268 Add NtAlpcConnectPortEx in winproxy 2016-08-19 10:34:41 +02:00
Clement Rouault 3184cbdeab MemBP has explicit event RWX, add GetProcessDEPPolicy, add Debugger API to disable/re-enable memory BP 2016-07-18 16:23:11 +02:00
Clement Rouault 1590f634d7 Add ReadFile to winproxy 2016-07-13 10:11:05 +02:00
Clement Rouault 2f4eef23aa Add NtCreateFile to winproxy 2016-07-04 18:32:36 +02:00
Clement Rouault 3069b93d21 Remove winproxy.OptionExport + Add some classes ton MEMORY_INFORMATION enum 2016-07-01 18:12:28 +02:00
Clement Rouault 86fe9c9f82 Update generation for ntstatus and add a parallele define module to ApiProxy 2016-06-24 16:55:25 +02:00
Clement Rouault 75c48103c4 Added SetConsoleCtrlHandler to winproxy 2016-06-17 11:14:46 +02:00
Clement Rouault d09cb4ca51 Add winproxy.is_implemented 2016-05-18 10:54:58 +02:00
Clement Rouault 5c8125a9ff Add get_short_path / get_long_path to windows.utils 2016-05-03 11:23:38 +02:00
Clement Rouault 57634f076c Add process.time_info 2016-04-21 10:58:35 +02:00
Clement Rouault 09e9b7efbb Fix get_mapped_filename 32 -> 64 (use NtQueryVirtualMemory) 2016-04-19 11:49:33 +02:00
Clement Rouault b621e6a09f fix queryworkingset / add test / add virtual protect context manager 2016-04-18 11:24:41 +02:00
Clement Rouault e781e3493f Playing with workingset 2016-04-11 19:15:23 +02:00
Clement Rouault b698b27a6f Add process.query_working_set 2016-04-08 13:45:27 +02:00
Clement Rouault da52b1a014 More Nt def/structs/funcs 2016-03-29 17:19:17 +02:00
Clement Rouault cbd4f0b6b7 More struct/defs/funcs 2016-03-25 15:13:49 +01:00
Clement Rouault 1a85d99b0e windows.com with a cleaner interface + use in wmi.pu 2016-03-24 16:03:13 +01:00
Clement Rouault 1422db08ae More winproxy functions 2016-03-22 13:30:44 +01:00
Clement Rouault fb0171b8b9 WinpProcess in not a PROCESSENTRY32 anymore 2016-03-21 13:18:01 +01:00
Clement Rouault 6a305458d5 Add signature verification by catalog 2016-03-18 18:01:57 +01:00
Clement Rouault c40cb0c8b0 Add get_mapped_filename to WinProcess 2016-02-10 16:29:46 +01:00
Clement Rouault 0da86e20aa SetThreadContext 32<->64 + test 2016-02-01 17:31:56 +01:00
hakril ec4862439f Add LdrLoadDLL + Fix winproxy.VirtualProtect Commit2 2016-01-27 12:41:41 +01:00
hakril f6f206b842 Still playing will debug API + add Winprocess.read_[dq]word 2016-01-21 00:43:41 +01:00
Clement Rouault 6b75fe3185 Playing with Token and Debugger API 2016-01-20 19:07:18 +01:00
hakril c35e517b35 Fix CreateFile error_check: now raise on INVALID_HANDLE_VALUE 2016-01-13 23:35:49 +01:00
Clement Rouault b459e291c4 More doc + regitry PyPhKey.get() 2016-01-07 19:26:40 +01:00
Clement Rouault b2eede98b1 More doc (registry / network) 2016-01-05 18:03:53 +01:00
hakril 8aa2382799 Clean stuff in wintrust + Registry object 2016-01-02 01:38:22 +01:00
hakril 3d0b50a00c REAME / TODO / AUTHORS 2016-01-01 22:50:40 +01:00
hakril 28eb4df2d0 Testing of project tree rewriting 2015-12-30 22:49:34 +01:00