 Clement Rouault
|
c7fef877f0
|
Testing some crypto stuff
|
2017-10-13 17:56:36 +02:00 |
|
|
hakril
|
930c992be3
|
Working on improving crypto stuff
|
2017-10-09 09:11:48 +02:00 |
|
|
Clement Rouault
|
f6e151a7d5
|
Adding some crypto api
|
2017-10-06 17:32:24 +02:00 |
|
|
Clement Rouault
|
5ee74d5b8f
|
Update rpc doc + sample + new rpc function + new winfunc definition file + fix setup.py
|
2017-10-05 16:22:16 +02:00 |
|
|
Clement Rouault
|
7947ace02d
|
Add alpc[Client|Server] __del__ to close handles + NtAlpcDisconnectPort + test
|
2017-09-15 17:54:19 +02:00 |
|
|
Clement Rouault
|
1941adc93f
|
Working on RtlGetUnloadEventTraceEx - adding function and struct + fix remotectypes char-array in struct
|
2017-08-17 18:51:07 +02:00 |
|
|
hakril
|
3d33c97335
|
add system.windir + needed winfuncs
|
2017-08-16 09:25:23 +02:00 |
|
|
Clement Rouault
|
f43749aa07
|
[WIP] new hook method + winfunc APIs in winproxy
|
2017-08-04 17:19:27 +02:00 |
|
|
Clement Rouault
|
aa22f1515d
|
Working on new windows.alpc
|
2017-07-28 09:20:40 +02:00 |
|
|
Clement Rouault
|
89fe39fadf
|
Adding some ALPC struct/funcs
|
2017-07-11 18:42:51 +02:00 |
|
|
Clement Rouault
|
4c8747b628
|
Add winproxy.MessageBox[AW]
|
2017-06-07 11:39:37 +02:00 |
|
|
Clement Rouault
|
9461d4a2fb
|
Add structs/def/funcs + Service.start()
|
2017-05-24 17:40:31 +02:00 |
|
|
Clement Rouault
|
bc3c033e84
|
Added some definitions for SID/Privilege/others
|
2017-05-19 15:37:26 +02:00 |
|
|
hakril
|
f1b1bec903
|
Working on documentation of windows.crypto
|
2017-04-12 17:20:36 +02:00 |
|
|
Clement Rouault
|
5431b57560
|
fix ImprovedVariant.asbool + com.create_instance accept a context parameter + fix RemoteWCharP.value logic + winutils.decompress_buffer
|
2017-04-12 17:20:36 +02:00 |
|
|
Clement Rouault
|
d2582d5e09
|
Renamed some error check method with intelligible name + some security functions def
|
2017-04-12 17:20:35 +02:00 |
|
|
Clement Rouault
|
3f39ca9f0c
|
More work on windows.crypto and Add an encryption sample POC
|
2017-04-12 17:20:35 +02:00 |
|
|
Clement Rouault
|
8743883068
|
working on crypto.certificate.CryptObject
|
2017-04-12 17:19:01 +02:00 |
|
|
hakril
|
ae02d9e916
|
Add some User32 API
|
2017-04-12 17:19:01 +02:00 |
|
|
Clement Rouault
|
98bc95204d
|
still Working on windows.crypto object + API + test
|
2017-04-12 17:19:01 +02:00 |
|
|
hakril
|
28b2596483
|
Fix PVOID arguments in function generated + add some func/struct from CryptoAPI
|
2017-04-12 17:19:01 +02:00 |
|
|
Clement Rouault
|
5478bda8bc
|
Working on CryptoAPI
|
2017-04-12 17:19:01 +02:00 |
|
|
hakril
|
15e40da1ca
|
Playing with CryptoApi
|
2017-04-12 17:19:01 +02:00 |
|
|
Clement Rouault
|
19b168df07
|
Add target_dll and target_func to TransparentApiProxy + test_code.py handles raw [x86|x64]
|
2016-08-19 15:15:04 +02:00 |
|
|
Clement Rouault
|
943945225a
|
Improve debugger/BP doc + add sample + small fixes in WMI/LocalDebugger + new data in ApiProxy for FunctionBP
|
2016-08-19 15:06:26 +02:00 |
|
|
Clement Rouault
|
0d38c1e268
|
Add NtAlpcConnectPortEx in winproxy
|
2016-08-19 10:34:41 +02:00 |
|
|
Clement Rouault
|
3184cbdeab
|
MemBP has explicit event RWX, add GetProcessDEPPolicy, add Debugger API to disable/re-enable memory BP
|
2016-07-18 16:23:11 +02:00 |
|
|
Clement Rouault
|
1590f634d7
|
Add ReadFile to winproxy
|
2016-07-13 10:11:05 +02:00 |
|
|
Clement Rouault
|
2f4eef23aa
|
Add NtCreateFile to winproxy
|
2016-07-04 18:32:36 +02:00 |
|
|
Clement Rouault
|
3069b93d21
|
Remove winproxy.OptionExport + Add some classes ton MEMORY_INFORMATION enum
|
2016-07-01 18:12:28 +02:00 |
|
|
Clement Rouault
|
86fe9c9f82
|
Update generation for ntstatus and add a parallele define module to ApiProxy
|
2016-06-24 16:55:25 +02:00 |
|
|
Clement Rouault
|
75c48103c4
|
Added SetConsoleCtrlHandler to winproxy
|
2016-06-17 11:14:46 +02:00 |
|
|
Clement Rouault
|
d09cb4ca51
|
Add winproxy.is_implemented
|
2016-05-18 10:54:58 +02:00 |
|
|
Clement Rouault
|
5c8125a9ff
|
Add get_short_path / get_long_path to windows.utils
|
2016-05-03 11:23:38 +02:00 |
|
|
Clement Rouault
|
57634f076c
|
Add process.time_info
|
2016-04-21 10:58:35 +02:00 |
|
|
Clement Rouault
|
09e9b7efbb
|
Fix get_mapped_filename 32 -> 64 (use NtQueryVirtualMemory)
|
2016-04-19 11:49:33 +02:00 |
|
|
Clement Rouault
|
b621e6a09f
|
fix queryworkingset / add test / add virtual protect context manager
|
2016-04-18 11:24:41 +02:00 |
|
|
Clement Rouault
|
e781e3493f
|
Playing with workingset
|
2016-04-11 19:15:23 +02:00 |
|
|
Clement Rouault
|
b698b27a6f
|
Add process.query_working_set
|
2016-04-08 13:45:27 +02:00 |
|
|
Clement Rouault
|
da52b1a014
|
More Nt def/structs/funcs
|
2016-03-29 17:19:17 +02:00 |
|
|
Clement Rouault
|
cbd4f0b6b7
|
More struct/defs/funcs
|
2016-03-25 15:13:49 +01:00 |
|
|
Clement Rouault
|
1a85d99b0e
|
windows.com with a cleaner interface + use in wmi.pu
|
2016-03-24 16:03:13 +01:00 |
|
|
Clement Rouault
|
1422db08ae
|
More winproxy functions
|
2016-03-22 13:30:44 +01:00 |
|
|
Clement Rouault
|
fb0171b8b9
|
WinpProcess in not a PROCESSENTRY32 anymore
|
2016-03-21 13:18:01 +01:00 |
|
|
Clement Rouault
|
6a305458d5
|
Add signature verification by catalog
|
2016-03-18 18:01:57 +01:00 |
|
|
Clement Rouault
|
c40cb0c8b0
|
Add get_mapped_filename to WinProcess
|
2016-02-10 16:29:46 +01:00 |
|
|
Clement Rouault
|
0da86e20aa
|
SetThreadContext 32<->64 + test
|
2016-02-01 17:31:56 +01:00 |
|
|
hakril
|
ec4862439f
|
Add LdrLoadDLL + Fix winproxy.VirtualProtect Commit2
|
2016-01-27 12:41:41 +01:00 |
|
|
hakril
|
f6f206b842
|
Still playing will debug API + add Winprocess.read_[dq]word
|
2016-01-21 00:43:41 +01:00 |
|
|
Clement Rouault
|
6b75fe3185
|
Playing with Token and Debugger API
|
2016-01-20 19:07:18 +01:00 |
|