 hakril
|
83f4b0c48b
|
Fixing some doc / samples
|
2018-03-27 21:24:56 +02:00 |
|
|
hakril
|
8840b9fdb9
|
updated doc
|
2018-03-07 10:24:46 +01:00 |
|
|
hakril
|
f54599568d
|
Working on eventlog
|
2017-11-24 17:17:35 +01:00 |
|
|
Clement Rouault
|
e07d4dbe0c
|
Added th description from the readme at the beginning of the documentation
|
2017-10-20 17:10:30 +02:00 |
|
|
Clement Rouault
|
c12a0c45f9
|
Add windows.system + ALPC + RPC + winproxy demo to README.md
|
2017-10-06 15:10:04 +02:00 |
|
|
Clement Rouault
|
a183e468ca
|
fix dbgprint to use hardcoded dict + improve rpc client forge_call + new ndr varying string
|
2017-10-03 17:30:38 +02:00 |
|
|
Clement Rouault
|
9461d4a2fb
|
Add structs/def/funcs + Service.start()
|
2017-05-24 17:40:31 +02:00 |
|
|
Clement Rouault
|
d24e62e319
|
Add PrintBP + few fix in Debugger + simple string-address resolution in localdebugger
|
2017-05-19 15:39:32 +02:00 |
|
|
Clement Rouault
|
feb76b48c3
|
unit tests now check for uncollectable-object (gc.garbage)
|
2017-04-26 11:07:52 +02:00 |
|
|
Clement Rouault
|
3f6131d621
|
Fix implem of bp exe!(offset|API) + add test for this case
|
2017-04-21 17:30:18 +02:00 |
|
|
Clement Rouault
|
799bca8d3f
|
Fix BitsCopyCallback callback prototype + print error code on bits job error
|
2017-04-20 11:52:56 +02:00 |
|
|
Clement Rouault
|
9cb9c2a9a0
|
Update doc build
|
2017-04-13 11:42:52 +02:00 |
|
|
hakril
|
ab01eba54f
|
More doc + fix sample on windows.crypto
|
2017-04-12 17:20:36 +02:00 |
|
|
Clement Rouault
|
64f56d3977
|
Identified a possible bug with Debugger._explicit_single_step + some DBGPRINT
|
2017-04-12 17:20:35 +02:00 |
|
|
hakril
|
15e40da1ca
|
Playing with CryptoApi
|
2017-04-12 17:19:01 +02:00 |
|
|
Clement Rouault
|
e58fb73f3b
|
Fix VARIANT interpretation of VT_BOOL
|
2016-12-06 16:20:02 +01:00 |
|
|
Clement Rouault
|
c7b0b8d0aa
|
Update doc for COMImplementation usage
|
2016-08-22 13:50:08 +02:00 |
|
|
Clement Rouault
|
fe4d41db47
|
Add/Update some doc
|
2016-07-27 18:20:36 +02:00 |
|
|
Clement Rouault
|
f54a64670e
|
Add context_syswow/set_syswow_context + debugger able to handle BP in 64b part of syswow process
|
2016-07-20 18:21:28 +02:00 |
|
|
Clement Rouault
|
9ebb25017b
|
Better message / WindowsError raised when process die during safe_execute_python
|
2016-07-18 14:04:37 +02:00 |
|
|
Clement Rouault
|
19205f73a1
|
Improve debugger handling of memBP for future use + fix MemBP prot init + add failing test of multitple BP with diff prot
|
2016-07-13 18:23:26 +02:00 |
|
|
Clement Rouault
|
d90e461bcf
|
Playing with advanced breakpoint
|
2016-07-13 13:54:42 +02:00 |
|
|
Clement Rouault
|
4069c0892a
|
Add com sample + update readme/todo
|
2016-07-08 13:58:05 +02:00 |
|
|
Clement Rouault
|
9a980d87b3
|
First try at single_step and memory breakpoints in Debugger + test
|
2016-07-07 17:43:28 +02:00 |
|
|
Clement Rouault
|
3069b93d21
|
Remove winproxy.OptionExport + Add some classes ton MEMORY_INFORMATION enum
|
2016-07-01 18:12:28 +02:00 |
|
|
Clement Rouault
|
86fe9c9f82
|
Update generation for ntstatus and add a parallele define module to ApiProxy
|
2016-06-24 16:55:25 +02:00 |
|
|
Clement Rouault
|
0b32302591
|
Remove generate_callback_stub (only IATHook are impacted)
|
2016-06-09 18:51:48 +02:00 |
|
|
Clement Rouault
|
e1f7f1e500
|
execute_python doest not reinject the shellcode everytime + test hook 64b
|
2016-06-08 11:01:19 +02:00 |
|
|
Clement Rouault
|
f23357c13e
|
Testing hook without generated stub + new hook test in new file
|
2016-06-07 19:59:00 +02:00 |
|
|
Clement Rouault
|
bc9d3b61ef
|
Draft version of system handles
|
2016-06-07 17:13:44 +02:00 |
|
|
Clement Rouault
|
976ce78455
|
First try to replace unexisting GetThreadId on XP
|
2016-05-20 18:03:36 +02:00 |
|
|
Clement Rouault
|
3243f6e8fc
|
more doc
|
2016-04-27 16:36:17 +02:00 |
|
|
hakril
|
c2c3fe2dc2
|
more doc
|
2016-04-27 00:33:02 +02:00 |
|
|
Clement Rouault
|
a988ad03e3
|
Add struct + thread.teb_base
|
2016-04-25 17:48:49 +02:00 |
|
|
Clement Rouault
|
5b66242680
|
writing some doc
|
2016-04-18 23:09:26 +02:00 |
|
|
Clement Rouault
|
3454801ad0
|
small fix in Debugger.add_bp
|
2016-04-11 19:15:39 +02:00 |
|
|
hakril
|
53e131831d
|
Writing / updating some doc
|
2016-03-29 23:41:54 +02:00 |
|
|
Clement Rouault
|
480cbcf1dc
|
Improving com / wmi API / code
|
2016-03-25 15:14:53 +01:00 |
|
|
Clement Rouault
|
fb0171b8b9
|
WinpProcess in not a PROCESSENTRY32 anymore
|
2016-03-21 13:18:01 +01:00 |
|
|
Clement Rouault
|
78f9733295
|
Add del_bp + import LocalDebugger
|
2016-03-18 11:16:53 +01:00 |
|
|
Clement Rouault
|
a4090ea215
|
Add some defs + wintrust catalog functions
|
2016-03-16 16:33:38 +01:00 |
|
|
hakril
|
9a1088daab
|
Small fixes in DOC + update winproxy function list
|
2016-02-10 23:01:32 +01:00 |
|
|
Clement Rouault
|
b789a12040
|
Improve debugger + pe_parse 'guess' the PE type (32/64)
|
2016-02-10 16:27:53 +01:00 |
|
|
Clement Rouault
|
6cf4a9cae4
|
Add test / fix Winprocess.load_library / free some of the memory
|
2016-02-03 17:47:07 +01:00 |
|
|
Clement Rouault
|
9fbba331ca
|
Add NTSTATUS to windef/add virtual_free/improve nativeutils GetProcAddr + test
|
2016-02-02 18:45:24 +01:00 |
|
|
Clement Rouault
|
3f06e95617
|
First - shameful version of syswow64 debugging
|
2016-02-01 18:45:51 +01:00 |
|
|
Clement Rouault
|
d720170781
|
Big commit GetProcAddrss 32 and 64 (fixed)
|
2016-01-29 18:05:21 +01:00 |
|
|
Clement Rouault
|
5b5db57e17
|
Rewrite injected stub for remote python -> now have nice threads handling
|
2016-01-29 13:51:35 +01:00 |
|
|
Clement Rouault
|
f307f8202a
|
Add Process.write_[dq]word + rewrite injection.py to use PEB parsing if needed
|
2016-01-28 17:00:32 +01:00 |
|
|
Clement Rouault
|
588a1e0461
|
Update TODO
|
2016-01-26 18:12:59 +01:00 |
|