Commit Graph

  • c35e517b35 Fix CreateFile error_check: now raise on INVALID_HANDLE_VALUE hakril 2016-01-13 23:35:49 +01:00
  • e0d430b3fc Fix the lookup path for 64bits pythonDLL fron 32bits process V0.1 hakril 2016-01-08 00:41:36 +01:00
  • 5c0ed1edfe Update and clean the README one more time hakril 2016-01-08 00:33:15 +01:00
  • 21edf14888 Add online documentation to README hakril 2016-01-08 00:23:47 +01:00
  • 910f82e95e Adapting README for github hakril 2016-01-08 00:13:16 +01:00
  • bd42d05e95 Add LICENSE hakril 2016-01-07 23:58:22 +01:00
  • 32fe601b1f Still more doc hakril 2016-01-07 23:51:17 +01:00
  • a4e61c74e5 Adding a setup.py (this looks like a real project now :D) Clement Rouault 2016-01-07 20:16:44 +01:00
  • 8e706fa4d2 Fix timing issue in test / might exist in real code Clement Rouault 2016-01-07 20:16:11 +01:00
  • 745e853736 Change name of the project on main page of documentation Clement Rouault 2016-01-07 19:36:17 +01:00
  • b459e291c4 More doc + regitry PyPhKey.get() Clement Rouault 2016-01-07 19:26:40 +01:00
  • 9c8a4dcfad Adding more and more documentation Clement Rouault 2016-01-06 20:11:20 +01:00
  • b2eede98b1 More doc (registry / network) Clement Rouault 2016-01-05 18:03:53 +01:00
  • c73fc7934a Add doc on PEB + samples in sphinx hakril 2016-01-05 08:43:40 +01:00
  • 4e9cf7684e Add documentation for windows.native_exec Clement Rouault 2016-01-04 18:15:03 +01:00
  • 0b2eabde5c Documenting winproxy hakril 2016-01-04 01:26:07 +01:00
  • 269b6dde58 Writing documentation hakril 2016-01-03 01:51:46 +01:00
  • 1d4ce6986b update new winfunc.txt hakril 2016-01-02 01:39:47 +01:00
  • 8aa2382799 Clean stuff in wintrust + Registry object hakril 2016-01-02 01:38:22 +01:00
  • eebaade97a Add sample iat_hook hakril 2016-01-02 00:52:25 +01:00
  • 55d1063200 Add samples for current_process and remote process interface hakril 2016-01-02 00:21:34 +01:00
  • 795cad5b02 Fix stuff in simple_[x86|x64] + add mov [REG], IMM32 hakril 2016-01-02 00:16:05 +01:00
  • 3d0b50a00c REAME / TODO / AUTHORS hakril 2016-01-01 22:50:40 +01:00
  • 8cae7c477b Moving doc at the root hakril 2015-12-30 23:17:51 +01:00
  • 65f3c95539 Including ctypes_generation code in the project hakril 2015-12-30 23:12:56 +01:00
  • 28eb4df2d0 Testing of project tree rewriting hakril 2015-12-30 22:49:34 +01:00
  • c8bf7d04f8 Add injected python dll presence verification hakril 2015-12-29 18:13:16 +01:00
  • 3ed7c651da Fix GetContext 32<->64 + Thread.start_address 32<->64 Clement Rouault 2015-12-22 17:23:38 +01:00
  • 5a29c59b3e execute_python is now safe + test Clement Rouault 2015-12-22 16:17:30 +01:00
  • dea58c8c77 winproxy lazy load the DLL Clement Rouault 2015-12-22 16:12:40 +01:00
  • 718df2ba95 Fix a bug in WMI for 64b process Clement Rouault 2015-12-14 15:13:17 +01:00
  • b5d0a513fe add simple_com / fix alignement issu in syswow64 stub Clement Rouault 2015-12-11 18:44:18 +01:00
  • d767ae5b8b Add And/Or + Fix Sub in simple_x[86|64] Clement Rouault 2015-12-11 18:42:31 +01:00
  • e99e3aa39d syswow 64bits stub are now generated :) Clement Rouault 2015-12-11 11:41:14 +01:00
  • 59621034f5 Add some play-code for wintrust/registry/wmi Clement Rouault 2015-12-11 09:54:43 +01:00
  • 62f7ee674f Add a network object to windows.system Clement Rouault 2015-12-11 09:54:11 +01:00
  • 46d0a45e17 Get PEB of other process without injection Clement Rouault 2015-12-11 09:53:13 +01:00
  • 419e65324f Add 32bits register support in simple_x64 Clement Rouault 2015-12-11 09:51:34 +01:00
  • ea78f81468 Add 64->32 bits pe/peb parsing + stuff in simple_x86/64 Clement Rouault 2015-11-13 09:25:05 +01:00
  • 2523c8e63e Add CreateFileW to winproxy + add GENERIC_READ as default dwDesiredAccess Clement Rouault 2015-09-24 10:15:11 +02:00
  • 694f10c095 Fix a bug introduced in the 64b hook stub Clement Rouault 2015-09-23 15:58:10 +02:00
  • c884122b29 Fix remote peb64 moodule parsing fail Clement Rouault 2015-09-23 14:40:49 +02:00
  • f5b0c0294f cosmetic: fucking linter :( Clement Rouault 2015-09-23 14:32:27 +02:00
  • 663de130b5 renamed k32testing.py -> winproxy.py Clement Rouault 2015-09-23 10:29:24 +02:00
  • b1d4f23bb7 widows.utils is now a directory Clement Rouault 2015-09-23 09:47:58 +02:00
  • da521908ed MultipleInst now know how to handle Prefix Clement Rouault 2015-09-22 10:24:41 +02:00
  • 32b12daa8f Add Movsb | Movsd to simple_x86 Clement Rouault 2015-09-22 10:19:26 +02:00
  • e38084eefc Add jbe jnb to simple_x86 Clement Rouault 2015-09-22 10:00:36 +02:00
  • da31cc204b add deref(x) to simply create displacement only mem_access Clement Rouault 2015-09-22 09:32:17 +02:00
  • c94a09d6bd Add inc rm/32 Clement Rouault 2015-09-21 17:45:54 +02:00
  • 600ac6dffd New ntstatus.py with ntstatus definition for NtDllProxy Clement Rouault 2015-09-21 17:13:56 +02:00
  • 21ccc8094d First unittest + fix in x64 iat hook stub Clement Rouault 2015-09-21 14:03:37 +02:00
  • 6d37b9d6fa Add helper before writing test Clement Rouault 2015-09-21 14:01:29 +02:00
  • cecc6477fc Add better error report for function returning an NTSTATUS Clement Rouault 2015-09-18 15:42:10 +02:00
  • f7684913f4 Adapte get_peb code to use simple_x86/64 with new prefix feature Clement Rouault 2015-09-18 15:41:12 +02:00
  • a7cc77dece simple_x86/64 now handle prefix and prefixed mem_access Clement Rouault 2015-09-18 15:34:55 +02:00
  • 9c89ddce1a Add PESection : IMAGE_SECTION_HEADER with a name easy to read Clement Rouault 2015-09-17 16:08:14 +02:00
  • 5be7b185c2 Add pe sections parsing + kernel module by NtQuery by w4kfu + small fixes Clement Rouault 2015-09-17 15:58:58 +02:00
  • 7fe3e9e8be remove a debug print Clement Rouault 2015-09-17 14:29:47 +02:00
  • 3c8966aa4b Add some simple Cpuid wrapper in native_exec Clement Rouault 2015-09-17 11:10:27 +02:00
  • 8ec269bef6 Add Cpuid instruction + test in assembler Clement Rouault 2015-09-17 11:10:01 +02:00
  • 8330027b8b Add struct SYSTEM_MODULE_INFORMATION Clement Rouault 2015-09-16 17:49:30 +02:00
  • a758753839 Fix error handler of Registry functions Clement Rouault 2015-09-16 17:42:05 +02:00
  • c05be85eb4 Add special error handling for NtQuerySystemInformation Clement Rouault 2015-09-16 17:40:35 +02:00
  • 09a5724ea0 Add NtQuerySystemInformation to k32testing Clement Rouault 2015-09-16 16:56:09 +02:00
  • e02bf24e8c Add def for NtQuerySystem + fix in CustomAllocator Clement Rouault 2015-09-16 16:42:21 +02:00
  • 9f70a58170 Add defintions/structs/functions for token/registry Clement Rouault 2015-09-16 16:24:17 +02:00
  • 4384f40bb7 Fix return value of JmpImm in 64bits Clement Rouault 2015-09-16 15:23:31 +02:00
  • 8a718c6e06 Fix bug + remove debug print Clement Rouault 2015-09-16 14:47:23 +02:00
  • b4ebffb55c [Test] Using dbgprint.py Clement Rouault 2015-09-16 10:13:39 +02:00
  • 7532172813 Rewrite 32->64 CreateThread (parse own 64ntdll + shellcode in simple_x64) Clement Rouault 2015-09-16 10:13:18 +02:00
  • 59a0c933f9 Use OptionalExport for ntreadsyswow + add some function Clement Rouault 2015-09-16 10:10:49 +02:00
  • 0fc55b24fd Clean X64 hook stub Clement Rouault 2015-09-15 10:20:05 +02:00
  • c74447ec23 Add call [mem] and xchg REG,[RE]AX Clement Rouault 2015-09-15 10:05:49 +02:00
  • 03aa598514 Rewrite x64 SIB/Immediat logic to match x86 + fixes + test_x64 Clement Rouault 2015-09-15 09:17:25 +02:00
  • 3cb26102ca Add simple_x86 test + small fixes Clement Rouault 2015-09-14 15:36:36 +02:00
  • 24d05aa3d5 Rewrite immediat logique of simple_x86 Clement Rouault 2015-09-14 13:27:11 +02:00
  • 8ca369a053 Add gitignore to repo Clement Rouault 2015-09-10 16:59:25 +02:00
  • ce7661260f Fix SIB generation Clement Rouault 2015-09-10 16:55:25 +02:00
  • e69480364d Implem remote ctypes + Injection 32->64 Clement Rouault 2015-09-10 16:55:02 +02:00
  • 7ddcb492ed Add new def + pe_parse with remotectypes test Clement Rouault 2015-09-03 12:57:15 +02:00
  • a133254c6b Exploring remotectypes Clement Rouault 2015-09-03 12:56:32 +02:00
  • bd855ce7d5 New assembler Clement Rouault 2015-09-03 12:55:41 +02:00
  • 4ba46979d9 Fix hook with new assembler + fix python3 compat for hook Clement Rouault 2015-07-20 13:56:45 +02:00
  • ebb23fd275 Big commit <3 Clement Rouault 2015-07-10 16:50:46 +02:00
  • e1bee9f8e8 Commit simple_x86 before full rewriting Clement Rouault 2015-06-26 11:08:53 +02:00
  • eb741a4429 Add stuff about vectored exception Clement Rouault 2015-04-13 17:54:45 +02:00
  • b459125f27 Add LOT of doc + play on vertored exception Clement Rouault 2015-04-13 15:56:25 +02:00
  • 481b8861f0 Add TCP connections + Syswow64 injection Clement Rouault 2015-04-01 18:22:42 +02:00
  • a7b463c05a Add some functions + utility to create a console into injected process Clement Rouault 2015-03-18 16:31:42 +01:00
  • 00d670378d Fix 64bits stub: no more deadlock and arg non-preserved (I hope) Clement Rouault 2015-03-13 15:48:59 +01:00
  • 7510ad3f54 New 64bits callback stub that preserv x64 registers Clement Rouault 2015-03-13 13:49:05 +01:00
  • bcda1ac5c5 Fix 64bits callback stub, i now preserve the return value Clement Rouault 2015-03-13 10:27:39 +01:00
  • a1ee711a93 Fix INT import parsing for 64bits Clement Rouault 2015-03-13 10:08:13 +01:00
  • e2c2bdc236 Add support for 64bits injection + hooks Clement Rouault 2015-03-12 18:25:49 +01:00
  • 9c80593a97 Committing all the stuff Clement Rouault 2015-03-11 15:51:00 +01:00