60 Commits

Author	SHA1	Message	Date
hakril	9bf2e61431	Improved test for NDR + added timeout for debugger test (if pytest-timeout present)	2020-07-16 23:31:35 +02:00
hakril	d8ac02e6a2	Improved NDR padding capabilities for primitive types	2020-06-15 10:00:05 +02:00
hakril	466d94c03c	Fixed broken basestring for py3 compatibility (see issue #15)	2020-05-02 23:12:25 +02:00
hakril	c691d8eb84	Added EvtQuery.seek() + IsDebuggerPresent API for sample purpose	2020-03-19 10:33:12 +01:00
hakril	7921e74647	Fixed a GC issue with system.modules + added deprecation warning to utils.get_kernel_modules()	2020-03-10 20:50:04 +01:00
hakril	9f69b1cefa	Adapted some stuff in security.py for py3	2020-02-13 23:17:43 +01:00
hakril	80c6a747da	Updated test for py3	2020-02-13 22:12:40 +01:00
hakril	f403856e26	Debugger test pass on py3	2020-02-08 00:15:41 +01:00
hakril	6a74c83670	test_process pass for python3 + added some pe_parse test	2020-02-07 23:06:26 +01:00
hakril	bac3dcb55b	Fix simple_x64 REX for python3	2020-02-05 23:57:34 +01:00
hakril	a7175be425	Added/fixed some test	2020-02-02 18:11:13 +01:00
hakril	6f55d2e48f	Fix a bug in debugger when detaching after a Ctrl+c during a BP	2019-10-19 00:39:03 +02:00
hakril	30b05d25f1	Improved MultipleInstr capabilities + fix a bug in x64 that failed to recognize 32b register name not uppercase	2019-09-20 16:18:16 +02:00
hakril	6bd45e8503	Added regkey.empty() based on RegDeleteTreeW	2019-08-13 14:57:56 +02:00
hakril	1e42553112	Added some test + added a com security fixture allowing allowed correct COM init accross all tests	2019-08-12 13:53:15 +02:00
hakril	6fcba46739	Added <Raw> pseudo instruction to both assemblers + corresponding test	2019-08-07 17:42:56 +02:00
hakril	960838ae3c	handle code now use gdef + added some handle tests	2019-08-07 17:25:36 +02:00
hakril	8a32e00f68	Handle documented key type and unkown one + add code to handle badly encoded values (REG_MULTI_SZ notably)	2019-08-07 14:48:26 +02:00
hakril	670bb713a2	Fix a bug about REG_SZ key non-null terminated in values enumeration	2019-08-07 09:47:31 +02:00
hakril	7f4ff75854	Rewrote windows.system.registry to handle unicode. added registry test (including unicode testing)	2019-08-05 16:56:48 +02:00
hakril	252f6f8efa	Update replace deprecated use of getfuncargvalue to please new pytest versions	2019-01-03 22:32:19 +01:00
hakril	370210a610	Fix a bug in MEMORY_BASIC_INFORMATION64 extended struct + add related test	2019-01-03 21:51:35 +01:00
hakril	4f62434dfb	Moved lookup_sid to windows.utils + add Token to window.security + update doc about official Token path	2018-12-21 18:50:22 +01:00
hakril	fb567c6a76	Added some samples output + document change Kernel32Error -> WinproxyError + fix sample/readme/doc related	2018-12-21 18:13:28 +01:00
hakril	79ff18e06f	Update doc/samples/test of windows.security	2018-12-21 15:26:29 +01:00
hakril	986664d01f	update Doc + test + sample for token.py	2018-12-20 22:48:16 +01:00
hakril	d936942d28	[WIP] improving Token object possibilities	2018-11-24 22:59:01 +01:00
hakril	c3b85068e5	Added Retn to x86/64 assemblers + encryption_demo sample can now sign a file + [WIP] token improvement	2018-11-24 22:59:01 +01:00
hakril	fff2f37781	Add WMI create-process sample + improved some sample feature/doc	2018-11-24 22:59:01 +01:00
hakril	267eddb5fe	Reworking windows.com.Variant + working on new wmi API + wmi test	2018-11-24 22:59:01 +01:00
hakril	e46dc48c37	Addapt codebase and tests to winproxy refactoring (replace Kernel32Error to WinproxyError)	2018-11-24 22:59:00 +01:00
hakril	bbde38ffe4	First version of windows.security based on clmntb work	2018-11-24 22:59:00 +01:00
hakril	1c21b77292	Add sign/verify methods to windows.crypto + POC/Play with improved ctypes buffer/array	2018-11-24 22:59:00 +01:00
hakril	19095f0e2f	Fix typo in certificate test + add very simple test of windows.system.modules	2018-08-02 18:52:35 +02:00
hakril	e53f7ef34b	Added some test for windows.system.object_manager	2018-08-02 18:38:48 +02:00
hakril	b223ed233e	Fix stuff in service.py + update test	2018-06-05 11:59:06 +02:00
hakril	a559c5c295	Update some doc / test + some ctypes generation definition	2018-06-05 11:34:52 +02:00
hakril	93bb9b6540	Add doc/sample/test for event log code	2018-06-05 11:30:25 +02:00
hakril	057d4e5408	Add scheduled_task code/doc-source/tests	2018-06-01 12:20:13 +02:00
hakril	e918d735a1	Tests injecting python in remote process now check that target python is installed	2018-03-28 23:14:41 +02:00
hakril	34c2d94bc2	Some fixes in code/samples/test	2018-03-27 20:37:30 +02:00
hakril	d91bc1a45a	Fix a bug in com.init() when CoInitializeEx failed + fix test: test_wmi fail du to pytest default COM-security settings	2018-03-04 18:34:40 +01:00
hakril	a057f8c130	class CertificateContext(PCERT_CONTEXT) replaced by Certificate(CERT_CONTEXT) + multi-received encrypt/decrypt test	2018-03-04 18:28:20 +01:00
hakril	262b80c8c3	utils.get_(long|short)_path now handle unicode path using W func	2018-03-03 16:51:51 +01:00
hakril	4499080a77	Remote load library now use LoadLibraryW and get_mapped_filename use GetMappedFileNameW: return unicode str in every case	2018-02-07 13:14:25 +01:00
hakril	b2a72f11cc	Add windows.pipe for simpler communication with injected process	2018-02-02 10:27:04 +01:00
hakril	4251b18041	Fix ctypes generation + COM interface dependance check + add IPersistFile, IShellLink, strucs/defs	2018-01-25 16:51:04 +01:00
hakril	65726e706f	Add Int X86/64 instruction	2018-01-13 16:40:21 +01:00
hakril	23837a0713	Improving volume objects + adding CurrentProcess.peb.apisetmap with ApiSetMap parsing capabilities	2017-12-04 10:12:41 +01:00
hakril	f03bb89ae6	Working on time translation (filetime - unix - datetime) and windows volume objects	2017-11-28 10:50:02 +01:00