Commit Graph

  • b59522e504 Documented most of the classes/attributes related to devices_manager.py. Updated related rst. hakril 2020-05-10 23:11:52 +02:00
  • 996487cc1f Added device manager documentation skeleton to docs/ as well as samples output hakril 2020-05-10 20:26:48 +02:00
  • 0ec8ae2fa6 Adapted device manager samples & small API improvements hakril 2020-05-10 20:25:20 +02:00
  • 78c205d248 Added some comment about unsure high-level API choice/possibility to discuss hakril 2020-04-21 21:18:21 +02:00
  • 6a7626eb2d Adapted lucasg sample to new (poc) device manager high-level API hakril 2020-04-21 21:07:48 +02:00
  • 1077541ec4 POC of new high-level API for device manager adapted from lucasg work hakril 2020-04-21 21:06:44 +02:00
  • f491c510eb Adapt lucasg winproxy code to match codebase behavvior hakril 2020-04-21 21:05:13 +02:00
  • 5aed4305d6 Port lucag device manager structures/function to ctypes generation hakril 2020-04-21 21:03:49 +02:00
  • 97a1bb22e1 [device] Add device object associated with phy device lucasg 2020-04-15 18:51:27 +02:00
  • ec0e97c075 [device] Improve device's name retrieval lucasg 2020-04-15 16:25:06 +02:00
  • 7652f597f3 [Device] Correctly parse device's resources lucasg 2020-04-15 16:02:28 +02:00
  • 5aa181c4cf [Device] Implement API to retrieve resources associated with devices lucasg 2020-04-13 18:55:19 +02:00
  • 445c68537c [Device] Implement apis to retrieve the list of devices under each class lucasg 2020-04-13 14:31:28 +02:00
  • 0ee191c981 [Device] Add setupapi SetupDiClassNameFromGuid winproxy lucasg 2020-04-12 18:55:05 +02:00
  • e74089cda3 [Device] Add cfgmgr.CM_Enumerate_Classes winproxy lucasg 2020-04-12 18:29:31 +02:00
  • ef580c675f Fix port_name member in documentation Reuven Peleg 2020-05-07 10:51:54 +03:00
  • 6a5364ea1e Updated docstring of RPCClient to link to AlpcClient & documented AlpcClient.port_name hakril 2020-05-08 23:30:16 +02:00
  • ed0099fd57 PFW symbols engine can now pull dbghelp.dll path from env var PFW_DBGHELP_PATH hakril 2020-05-05 16:29:02 +02:00
  • bbf031e784 Renamed definition/com/tst directory to better name: propertysystem hakril 2020-05-04 09:52:54 +02:00
  • 466d94c03c Fixed broken basestring for py3 compatibility (see issue #15) hakril 2020-05-02 23:12:25 +02:00
  • 578b4d9193 Update generated def + documentation hakril 2020-03-29 22:14:29 +02:00
  • 9485ceef05 Updated README with the current state of PFW for Python3 hakril 2020-03-29 21:49:22 +02:00
  • f63f7f308a Some quick and dirty fix for debugger/breakpoint in python3 hakril 2020-03-29 21:41:48 +02:00
  • c691d8eb84 Added EvtQuery.seek() + IsDebuggerPresent API for sample purpose hakril 2020-03-19 10:33:12 +01:00
  • 91e6ef824c Added EventLog.date for simplicity of use hakril 2020-03-16 13:19:03 +01:00
  • 54f202731d Added sample + link from debug.rst for FunctionCallBP hakril 2020-03-11 18:06:23 +01:00
  • fefe9f397f Added autodoc for FunctionCallBP hakril 2020-03-11 00:03:55 +01:00
  • 546818f91b Added a sample for windows.debug.FunctionCallBP : change_function_ret_value.py hakril 2020-03-10 23:59:50 +01:00
  • fb23ad2838 Fix syswow64 32<->64 for python3-23b hakril 2020-03-10 21:03:59 +01:00
  • 7921e74647 Fixed a GC issue with system.modules + added deprecation warning to utils.get_kernel_modules() hakril 2020-03-10 20:50:04 +01:00
  • 5c3b0cda88 Merge branch 'gitter-badger-gitter-badge' into dev hakril 2020-02-16 09:53:52 +01:00
  • 50f6b993de Adapted the gitter link + small update to the README hakril 2020-02-16 09:52:07 +01:00
  • d7c150b794 Add Gitter badge The Gitter Badger 2020-02-14 10:42:30 +00:00
  • 0cf6057b98 setup.py is py3-beta ready :) hakril 2020-02-14 10:16:27 +01:00
  • 02b2ba13f9 Added a poc for a WinFile object hakril 2020-02-13 23:24:37 +01:00
  • 92df7eaee0 New generated_def py3 ready \o/ PFW should be ready for py3 testing hakril 2020-02-13 23:18:47 +01:00
  • 9f69b1cefa Adapted some stuff in security.py for py3 hakril 2020-02-13 23:17:43 +01:00
  • fe22a5ad0d Testing/Fixing some sample for py3 hakril 2020-02-13 23:16:46 +01:00
  • 66382b89f7 Some more py3 compat fix + few feature in POC hakril 2020-02-13 22:30:46 +01:00
  • 4dc71b0449 Added some flags & improved explain() hakril 2020-02-13 22:23:55 +01:00
  • 4d3b3e18ad Lot of small py3 compat fix hakril 2020-02-13 22:23:20 +01:00
  • b27d161a6a Fixed ctypes_generation about some bugs on py3 hakril 2020-02-13 22:13:23 +01:00
  • 80c6a747da Updated test for py3 hakril 2020-02-13 22:12:40 +01:00
  • f403856e26 Debugger test pass on py3 hakril 2020-02-08 00:15:41 +01:00
  • 6a74c83670 test_process pass for python3 + added some pe_parse test hakril 2020-02-07 23:06:26 +01:00
  • 889de363ca windows.injection now handle injection of py3 code ! hakril 2020-02-06 00:03:10 +01:00
  • bac3dcb55b Fix simple_x64 REX for python3 hakril 2020-02-05 23:57:34 +01:00
  • 2f778b69f9 windows.pipe.create now accept a custom security descriptor as parameter hakril 2020-02-03 21:42:34 +01:00
  • 2fddd82f00 Adding pycompat.py for py2/py3 work in progress hakril 2020-02-02 18:18:56 +01:00
  • 46197e763a Fixed windows.winproxy.resolve (corresponding test already exist) hakril 2020-02-02 18:17:36 +01:00
  • a7175be425 Added/fixed some test hakril 2020-02-02 18:11:13 +01:00
  • f2a6489463 Added mov REG/SEGREG in simple_x86 + fix a bug in syswow64 on AMD do to a processor bug (Issue10) hakril 2020-02-02 17:49:42 +01:00
  • 2e1043ead4 Added some code to play with extended attributes hakril 2020-01-26 16:02:38 +01:00
  • b490130585 Aded new generated ctypes_generation hakril 2020-01-26 15:55:21 +01:00
  • d20083c57c windows.crypto.sign accept sin algo as parameter hakril 2020-01-26 15:51:03 +01:00
  • fb2b63b66d ctypes_generation now generate py3.6 compatible code :) hakril 2020-01-18 23:18:25 +01:00
  • b971fa5faf Added some functions to winproxy hakril 2020-01-17 21:11:24 +01:00
  • c5d8faaa4a Winstruct parser accept * in array size expression hakril 2020-01-17 21:09:04 +01:00
  • 5ae6fb2634 Added new ctypes definition hakril 2020-01-17 21:08:20 +01:00
  • c589a41902 [WIP] saving POC of symbol hakril 2020-01-17 21:07:35 +01:00
  • 7638080ee4 Added new service API allowing to find service by name easily hakril 2019-11-14 13:31:20 +01:00
  • 0ed859b95e Added support for simple expression in array (like [MAX_PATH + 1]) hakril 2019-10-31 16:27:01 +01:00
  • 6f55d2e48f Fix a bug in debugger when detaching after a Ctrl+c during a BP hakril 2019-10-19 00:39:03 +02:00
  • 5b55d4d693 [event_log] Add some more format type to support 1orenz0 2019-10-09 15:41:41 +01:00
  • fbfe4344d4 [event_log] some events does not have a template message 1orenz0 2019-10-09 15:41:07 +01:00
  • 215afaa418 [event_log] add verbose option to wevtutil.py 1orenz0 2019-10-09 14:49:43 +01:00
  • 91ef7da2e1 [event_log] Fix typo in wevtutil 1orenz0 2019-10-09 14:49:17 +01:00
  • 8a14fe9174 [event_log] add realtime logger to wevtutil 1orenz0 2019-10-09 14:48:56 +01:00
  • 4f92323abf [event log] export message_id instead of message_name 1orenz0 2019-10-07 08:12:59 +01:00
  • 44d9d0dd35 [event log] Add example of what can be done with events 1orenz0 2019-10-06 17:42:46 +01:00
  • 6dd314659d [event log] adding event channel metadata message ID 1orenz0 2019-10-06 16:39:16 +01:00
  • adb7d3b63a [event log] adding event metadata 1orenz0 2019-10-06 16:09:39 +01:00
  • b5371ddf33 [event log] still adding publisher metadata 1orenz0 2019-10-06 16:09:25 +01:00
  • 4495eca6d0 [event log] add some more metadata 1orenz0 2019-10-06 16:09:09 +01:00
  • df28515b97 [event log] Expose message filename 1orenz0 2019-10-06 13:25:37 +01:00
  • 6374f91fef [event log] Expose channel metadatas 1orenz0 2019-10-06 13:24:47 +01:00
  • 6125a1fb15 [event_trace] Add a way to pass a Python object to an ETW trace's context 1orenz0 2019-10-01 09:02:21 +01:00
  • bfeb2e6dec [event_log] Configure an ETW trace to listen on specific keywords 1orenz0 2019-10-01 08:52:29 +01:00
  • 536a60c040 [event log] Expose event keywords and publisher guid 1orenz0 2019-10-01 08:45:35 +01:00
  • 05ee89de81 Adding some service related definition + added services specific access right to security.py hakril 2019-10-14 21:52:54 +02:00
  • 80799fe411 Working on improving the Evt related api hakril 2019-10-14 21:52:02 +02:00
  • 265ef59011 Update/Fix PROCESSINFOCLASS enum + NtSetInformationProcess use a PROCESSINFOCLASS not a PROCESS_INFORMATION_CLASS hakril 2019-10-08 14:00:56 +02:00
  • 30b05d25f1 Improved MultipleInstr capabilities + fix a bug in x64 that failed to recognize 32b register name not uppercase hakril 2019-09-20 16:18:16 +02:00
  • 6bd45e8503 Added regkey.empty() based on RegDeleteTreeW hakril 2019-08-13 14:57:56 +02:00
  • 1e42553112 Added some test + added a com security fixture allowing allowed correct COM init accross all tests hakril 2019-08-12 13:53:15 +02:00
  • 168783af9d Improved CryptMsg API with some more properties hakril 2019-08-12 13:50:08 +02:00
  • b9fe4d19e5 Added ControlService + service.stop() + service.start() accept arguments hakril 2019-08-08 10:28:22 +02:00
  • 6fcba46739 Added <Raw> pseudo instruction to both assemblers + corresponding test hakril 2019-08-07 17:42:56 +02:00
  • 960838ae3c handle code now use gdef + added some handle tests hakril 2019-08-07 17:25:36 +02:00
  • 8a32e00f68 Handle documented key type and unkown one + add code to handle badly encoded values (REG_MULTI_SZ notably) hakril 2019-08-07 14:48:26 +02:00
  • 670bb713a2 Fix a bug about REG_SZ key non-null terminated in values enumeration hakril 2019-08-07 09:47:31 +02:00
  • 032de6a848 Moved bits.py to winobject/ + added windows.system.bits as entrypoint hakril 2019-08-05 22:32:10 +02:00
  • 7827a43d9a Fixed a logic bug in object manager + import bug in syswow.py hakril 2019-08-05 22:31:00 +02:00
  • b0fa864271 Added some API to winproxy hakril 2019-08-05 22:27:07 +02:00
  • 7c816acdda windows.system.registry does not use _winreg at all anymore hakril 2019-08-05 22:26:28 +02:00
  • 7f4ff75854 Rewrote windows.system.registry to handle unicode. added registry test (including unicode testing) hakril 2019-08-05 16:56:48 +02:00
  • 0697891026 Some improvment to ctypes generation + a lot of new definitions hakril 2019-08-05 16:55:35 +02:00
  • 15f399df6d Still playing with security-descriptor / SACL / required rights (MAXIMUM_ALLOWED does not work) hakril 2019-06-28 10:34:20 +02:00
  • b628ca336b Working on api to set security descriptor hakril 2019-06-28 09:38:35 +02:00
  • b160935747 Added current etw code (event_trace) hakril 2019-05-31 09:06:09 +02:00