 hakril
|
2094ab4ad4
|
Fix some docstring + re-add windows.test.pop_proc_[32|64] + fix all samples + few doc adapt
|
2017-10-15 00:13:07 +02:00 |
|
|
Clement Rouault
|
c7fef877f0
|
Testing some crypto stuff
|
2017-10-13 17:56:36 +02:00 |
|
|
hakril
|
ba6b22ac84
|
testing crypto stuff
|
2017-10-12 08:13:42 +02:00 |
|
|
hakril
|
930c992be3
|
Working on improving crypto stuff
|
2017-10-09 09:11:48 +02:00 |
|
|
Clement Rouault
|
f6e151a7d5
|
Adding some crypto api
|
2017-10-06 17:32:24 +02:00 |
|
|
Clement Rouault
|
5ee74d5b8f
|
Update rpc doc + sample + new rpc function + new winfunc definition file + fix setup.py
|
2017-10-05 16:22:16 +02:00 |
|
|
Clement Rouault
|
a183e468ca
|
fix dbgprint to use hardcoded dict + improve rpc client forge_call + new ndr varying string
|
2017-10-03 17:30:38 +02:00 |
|
|
Clement Rouault
|
7947ace02d
|
Add alpc[Client|Server] __del__ to close handles + NtAlpcDisconnectPort + test
|
2017-09-15 17:54:19 +02:00 |
|
|
Clement Rouault
|
b9a00b2ed7
|
add rpc.rst doc + rename endpoint_map_alpc + rename ndr EptMapAuth
|
2017-09-14 17:24:18 +02:00 |
|
|
Clement Rouault
|
5301f91927
|
Add sample for thread + fix code to get a WinProcess from a pid not using WinProcess(pid=xxx) + test
|
2017-09-11 18:20:49 +02:00 |
|
|
hakril
|
b3117ce4e3
|
pytest integration finished + moved tests/ to top dir
|
2017-09-10 18:57:59 +02:00 |
|
|
Clement Rouault
|
492b6f4f02
|
pytest added --leaks for leak check + test Handle.description
|
2017-09-08 17:53:59 +02:00 |
|
|
Clement Rouault
|
7db5620210
|
more pytest POC + fixed debugger code + test FunctionHXBP
|
2017-09-07 17:13:59 +02:00 |
|
|
Clement Rouault
|
fccd2a49e6
|
Add doc to RPC + RPC_IF_ID generated-extended + lsass sample
|
2017-08-30 18:29:49 +02:00 |
|
|
Clement Rouault
|
d44a3b032e
|
Add extended struct to ctypes generation + extended IID now in winstructs.py and used everywhere
|
2017-08-29 11:39:43 +02:00 |
|
|
Clement Rouault
|
1fe5b912be
|
Add some ALPC samples to the documentation
|
2017-08-28 17:09:49 +02:00 |
|
|
Clement Rouault
|
1941adc93f
|
Working on RtlGetUnloadEventTraceEx - adding function and struct + fix remotectypes char-array in struct
|
2017-08-17 18:51:07 +02:00 |
|
|
Clement Rouault
|
e9c62a125c
|
add system.build_number + better handling of closing python in Winprocess.__del__
|
2017-08-17 18:49:42 +02:00 |
|
|
Clement Rouault
|
c75dda60b5
|
Fixed get_kernel_modules for syswow64 process
|
2017-08-17 13:51:36 +02:00 |
|
|
Clement Rouault
|
16e29bd938
|
Added a sample for Debugger.attach
|
2017-08-16 18:07:00 +02:00 |
|
|
Clement Rouault
|
c76a50c045
|
add doc to alpc.py + improve doc now that Winstruct are documented
|
2017-08-16 17:38:18 +02:00 |
|
|
Clement Rouault
|
8b9a71edc2
|
Add real doc for windows.generated_def
|
2017-08-16 15:11:23 +02:00 |
|
|
hakril
|
3d33c97335
|
add system.windir + needed winfuncs
|
2017-08-16 09:25:23 +02:00 |
|
|
Clement Rouault
|
8d139bce79
|
Working on sphinx doc generation for windows.generated_def
|
2017-08-11 19:06:50 +02:00 |
|
|
Clement Rouault
|
61ac5c8c5d
|
Fix EnumValue pickling for protocol 2
|
2017-08-10 17:07:41 +02:00 |
|
|
Clement Rouault
|
928a2744d5
|
Change RPC_SYNTAX_IDENTIFIER to RPC_IF_ID + update setup_hook + some add to wincli
|
2017-08-04 17:28:46 +02:00 |
|
|
Clement Rouault
|
f43749aa07
|
[WIP] new hook method + winfunc APIs in winproxy
|
2017-08-04 17:19:27 +02:00 |
|
|
Clement Rouault
|
d1cadf062a
|
working on windows.alpc + fix in current_process.threads
|
2017-08-04 17:18:41 +02:00 |
|
|
Clement Rouault
|
aa22f1515d
|
Working on new windows.alpc
|
2017-07-28 09:20:40 +02:00 |
|
|
Clement Rouault
|
6898ac02fa
|
First try at MemBP.on_error callback
|
2017-07-18 12:48:45 +02:00 |
|
|
Clement Rouault
|
f08953f4ae
|
rewrite of alpc.py + adapt rpc/client.py
|
2017-07-12 16:29:02 +02:00 |
|
|
Clement Rouault
|
5d34493356
|
commit alpc.py before rewriting
|
2017-07-12 16:27:43 +02:00 |
|
|
Clement Rouault
|
89fe39fadf
|
Adding some ALPC struct/funcs
|
2017-07-11 18:42:51 +02:00 |
|
|
Clement Rouault
|
5e2ecf2af9
|
Still working on RPC over alpc
|
2017-07-06 18:11:32 +02:00 |
|
|
Clement Rouault
|
aff6ee4e17
|
replace PORT_MESSAGE struct def with PORT_MESSAGE[32|64] + FunctionBP can get the function via a class parameter
|
2017-06-21 13:16:22 +02:00 |
|
|
Clement Rouault
|
ae5a211613
|
fix SIZE_T definition to ctypes.c_size_t + fix MessageAttribute._get_required_buffer_size
|
2017-06-08 18:22:24 +02:00 |
|
|
hakril
|
1a7e342318
|
Add Winprocess.limited_handle for QUERY_LIMITED_INFORMATION api call
|
2017-06-07 20:00:37 +02:00 |
|
|
Clement Rouault
|
a13b287202
|
Clean some rpc/alpc code + add ndr.NdrCString
|
2017-06-07 11:45:11 +02:00 |
|
|
Clement Rouault
|
4c8747b628
|
Add winproxy.MessageBox[AW]
|
2017-06-07 11:39:37 +02:00 |
|
|
Clement Rouault
|
1a73fe713b
|
Add missing psid.py + some rpc fix + alpc sample + wincli
|
2017-05-24 17:49:46 +02:00 |
|
|
Clement Rouault
|
a89854a045
|
PrintBP now accept a pre-format fonction to forge new format parameters
|
2017-05-24 17:45:27 +02:00 |
|
|
Clement Rouault
|
3c21d8c59c
|
token.integrity is now settable
|
2017-05-24 17:43:34 +02:00 |
|
|
Clement Rouault
|
9461d4a2fb
|
Add structs/def/funcs + Service.start()
|
2017-05-24 17:40:31 +02:00 |
|
|
Clement Rouault
|
5b17cc988f
|
simple_x64 does not add extra unwanted REX for some 'Slash [MEM]' instruction
|
2017-05-24 17:33:40 +02:00 |
|
|
Clement Rouault
|
e5e9ff7a47
|
windows.alpc + windows.rpc first version (manual_uac works with those)
|
2017-05-19 17:14:10 +02:00 |
|
|
Clement Rouault
|
d24e62e319
|
Add PrintBP + few fix in Debugger + simple string-address resolution in localdebugger
|
2017-05-19 15:39:32 +02:00 |
|
|
Clement Rouault
|
bc3c033e84
|
Added some definitions for SID/Privilege/others
|
2017-05-19 15:37:26 +02:00 |
|
|
Clement Rouault
|
dbd98c93ed
|
fix Process.ppid implem + new version does not enum processes
|
2017-04-28 17:29:17 +02:00 |
|
|
Clement Rouault
|
48fbeaee77
|
Fix bug in debugger: close EVENT_INFO hFile only if not NULL
|
2017-04-27 14:10:03 +02:00 |
|
|
Clement Rouault
|
f9a650fcf3
|
WinThread is not a THREADENTRY32 anymore + add Winprocess.peb.exe
|
2017-04-27 12:06:04 +02:00 |
|