 hakril
|
9e1400e4ad
|
Forgot a file.. This is the real v0.4
|
2018-03-28 01:03:37 +02:00 |
|
|
hakril
|
34c2d94bc2
|
Some fixes in code/samples/test
|
2018-03-27 20:37:30 +02:00 |
|
|
hakril
|
8840b9fdb9
|
updated doc
|
2018-03-07 10:24:46 +01:00 |
|
|
hakril
|
d91bc1a45a
|
Fix a bug in com.init() when CoInitializeEx failed + fix test: test_wmi fail du to pytest default COM-security settings
|
2018-03-04 18:34:40 +01:00 |
|
|
hakril
|
a057f8c130
|
class CertificateContext(PCERT_CONTEXT) replaced by Certificate(CERT_CONTEXT) + multi-received encrypt/decrypt test
|
2018-03-04 18:28:20 +01:00 |
|
|
hakril
|
c20d443c29
|
windows.com.init does not raise anymore if CoInitializeEx fails but return error code + cosmetic
|
2018-03-03 16:55:40 +01:00 |
|
|
hakril
|
4499080a77
|
Remote load library now use LoadLibraryW and get_mapped_filename use GetMappedFileNameW: return unicode str in every case
|
2018-02-07 13:14:25 +01:00 |
|
|
hakril
|
f682fbd8c1
|
Add transaction + window APIs to winproxy + get_mapped_filename raise on non-standard error (like aborted transaction)
|
2018-01-26 11:05:53 +01:00 |
|
|
hakril
|
4251b18041
|
Fix ctypes generation + COM interface dependance check + add IPersistFile, IShellLink, strucs/defs
|
2018-01-25 16:51:04 +01:00 |
|
|
hakril
|
65726e706f
|
Add Int X86/64 instruction
|
2018-01-13 16:40:21 +01:00 |
|
|
hakril
|
48b6758f7f
|
Add exists/create to PyHKey
|
2018-01-13 16:38:29 +01:00 |
|
|
hakril
|
f882bd1e35
|
Add wmi.gen_select for class select returning a generator + fom E_CRYPT define + CryptObj.nb_signer return 0 if CRYPT_E_INVALID_MSG_TYPE
|
2017-12-08 16:54:49 +01:00 |
|
|
hakril
|
4a75453a8b
|
Clean and Improve WMI query API that now accept a Timeout
|
2017-12-08 14:49:03 +01:00 |
|
|
hakril
|
32de3cb824
|
Improve ApiSetMap resolve to match ntdll behavior + add sizekey option to encryption_demo genkey option
|
2017-12-06 10:21:40 +01:00 |
|
|
hakril
|
23837a0713
|
Improving volume objects + adding CurrentProcess.peb.apisetmap with ApiSetMap parsing capabilities
|
2017-12-04 10:12:41 +01:00 |
|
|
hakril
|
c135780ba9
|
Add Process.virtual_protect default value for 'old_protect' + add test for Improved LSA_UNICODE_STRING used in PEB.ProcessParameters + find_value now search in ntstatus values
|
2017-11-24 17:46:07 +01:00 |
|
|
Clement Rouault
|
d12bae6dbb
|
Remove 'WinUnicodeString' and add un extended struct _LSA_UNICODE_STRING: simplify lots of things
|
2017-11-17 15:13:34 +01:00 |
|
|
Clement Rouault
|
4e5733c2c5
|
Process.prioroty now use the FlagMapper
|
2017-11-10 14:20:59 +01:00 |
|
|
Clement Rouault
|
8ba325afd2
|
Add a new FlagMapper to easily transform int to Flag and change to code use it
|
2017-11-10 13:47:27 +01:00 |
|
|
Clement Rouault
|
4efae2194d
|
Adding Process.priority + fix in WMI raised exceptions + add x86.Iret
|
2017-11-10 11:12:24 +01:00 |
|
|
Clement Rouault
|
5a79e15440
|
Improve WMI capabilities by adding access to various namespaces + listing methods + add CurrentProcess.load_library
|
2017-11-08 17:55:47 +01:00 |
|
|
hakril
|
930c992be3
|
Working on improving crypto stuff
|
2017-10-09 09:11:48 +02:00 |
|
|
Clement Rouault
|
7947ace02d
|
Add alpc[Client|Server] __del__ to close handles + NtAlpcDisconnectPort + test
|
2017-09-15 17:54:19 +02:00 |
|
|
Clement Rouault
|
5301f91927
|
Add sample for thread + fix code to get a WinProcess from a pid not using WinProcess(pid=xxx) + test
|
2017-09-11 18:20:49 +02:00 |
|
|
Clement Rouault
|
492b6f4f02
|
pytest added --leaks for leak check + test Handle.description
|
2017-09-08 17:53:59 +02:00 |
|
|
Clement Rouault
|
7db5620210
|
more pytest POC + fixed debugger code + test FunctionHXBP
|
2017-09-07 17:13:59 +02:00 |
|
|
Clement Rouault
|
e9c62a125c
|
add system.build_number + better handling of closing python in Winprocess.__del__
|
2017-08-17 18:49:42 +02:00 |
|
|
Clement Rouault
|
c76a50c045
|
add doc to alpc.py + improve doc now that Winstruct are documented
|
2017-08-16 17:38:18 +02:00 |
|
|
hakril
|
3d33c97335
|
add system.windir + needed winfuncs
|
2017-08-16 09:25:23 +02:00 |
|
|
Clement Rouault
|
d1cadf062a
|
working on windows.alpc + fix in current_process.threads
|
2017-08-04 17:18:41 +02:00 |
|
|
Clement Rouault
|
aff6ee4e17
|
replace PORT_MESSAGE struct def with PORT_MESSAGE[32|64] + FunctionBP can get the function via a class parameter
|
2017-06-21 13:16:22 +02:00 |
|
|
hakril
|
1a7e342318
|
Add Winprocess.limited_handle for QUERY_LIMITED_INFORMATION api call
|
2017-06-07 20:00:37 +02:00 |
|
|
Clement Rouault
|
1a73fe713b
|
Add missing psid.py + some rpc fix + alpc sample + wincli
|
2017-05-24 17:49:46 +02:00 |
|
|
Clement Rouault
|
3c21d8c59c
|
token.integrity is now settable
|
2017-05-24 17:43:34 +02:00 |
|
|
Clement Rouault
|
9461d4a2fb
|
Add structs/def/funcs + Service.start()
|
2017-05-24 17:40:31 +02:00 |
|
|
Clement Rouault
|
dbd98c93ed
|
fix Process.ppid implem + new version does not enum processes
|
2017-04-28 17:29:17 +02:00 |
|
|
Clement Rouault
|
f9a650fcf3
|
WinThread is not a THREADENTRY32 anymore + add Winprocess.peb.exe
|
2017-04-27 12:06:04 +02:00 |
|
|
Clement Rouault
|
c0d03a2f58
|
Fix some handle leak, debugger close hFile on event + enumerate processes/threads close snap handle
|
2017-04-26 14:46:45 +02:00 |
|
|
hakril
|
be5cbe2631
|
Winprocess.peb not a fixedproperty anymore to prevent ref-cycle + add windows.crypto to setup.py
|
2017-04-24 22:43:49 +02:00 |
|
|
Clement Rouault
|
70d330961a
|
exception reraised by registry have a winerror + remove dead code windows windows.com
|
2017-04-12 17:20:37 +02:00 |
|
|
Clement Rouault
|
4183646b28
|
add Handle.infos + Process.open_token
|
2017-04-12 17:20:36 +02:00 |
|
|
hakril
|
ae02d9e916
|
Add some User32 API
|
2017-04-12 17:19:01 +02:00 |
|
|
Clement Rouault
|
5478bda8bc
|
Working on CryptoAPI
|
2017-04-12 17:19:01 +02:00 |
|
|
hakril
|
03aec90d63
|
WIP: fixing handle 'leak' in dbg that require manual garbare collection for now
|
2017-04-12 17:19:01 +02:00 |
|
|
hakril
|
861884099f
|
Better handling of read_string for string at the end of readable memory
|
2017-04-12 17:19:00 +02:00 |
|
|
hakril
|
63cdb3bbeb
|
Better handling of read_wstring for wstring at the end of readable memory
|
2017-04-12 17:19:00 +02:00 |
|
|
hakril
|
e17400ed63
|
Debugger.detach remove self.target + better handling/clean of Thread/Process handles
|
2017-04-12 17:19:00 +02:00 |
|
|
Clement Rouault
|
943945225a
|
Improve debugger/BP doc + add sample + small fixes in WMI/LocalDebugger + new data in ApiProxy for FunctionBP
|
2016-08-19 15:06:26 +02:00 |
|
|
Clement Rouault
|
2767a08624
|
Fix bug in Process.name + create_process show_windows=True by default
|
2016-07-29 17:32:14 +02:00 |
|
|
Clement Rouault
|
fe4d41db47
|
Add/Update some doc
|
2016-07-27 18:20:36 +02:00 |
|