Commit Graph

  • 554a6b0572 Added some more ctypes defition hakril 2019-05-18 23:35:52 +02:00
  • f9104141e5 Added/refactored many ctypes_generation definitions hakril 2019-04-26 13:49:55 +02:00
  • 5794a92168 ctypes_generation now handle anonymous sub-struct/union hakril 2019-04-26 13:43:41 +02:00
  • 578392ffde Improve retrieving of event-log data type hakril 2019-02-11 17:11:23 +01:00
  • 44e5a09564 Few improvement in existing API + test of Winprocess.handles hakril 2019-01-22 15:06:23 +01:00
  • 4e8a765bd6 Added some generated def hakril 2019-01-22 15:02:18 +01:00
  • f3de7b528b go go gadget 0.5 V0.5 hakril 2019-01-03 22:43:40 +01:00
  • 252f6f8efa Update replace deprecated use of getfuncargvalue to please new pytest versions hakril 2019-01-03 22:32:19 +01:00
  • f53cd00bc4 cosmetic changes to doc + generate html doc hakril 2019-01-03 22:20:19 +01:00
  • 3fe7ee2cce Fix bug in debugger caused by on_setup new code hakril 2019-01-03 22:00:01 +01:00
  • 370210a610 Fix a bug in MEMORY_BASIC_INFORMATION64 extended struct + add related test hakril 2019-01-03 21:51:35 +01:00
  • 288e87a0d3 Update windows.security doc + add ref to module in doc hakril 2019-01-03 21:50:17 +01:00
  • abded9944d Regenerated ctypes hakril 2018-12-28 21:22:29 +01:00
  • d9a43a4a8b Update readme with Token/SecurityDescriptor demo + fix flag repr in README + small docstring fix hakril 2018-12-28 21:21:30 +01:00
  • c2f2f4c0a5 Flag repr does not print long 'L' at the end of hex value hakril 2018-12-28 21:13:40 +01:00
  • 771593f17d Fix in safe_execute_python to raise WindowsError if process die during execution hakril 2018-12-21 18:53:55 +01:00
  • a194f0be6b Fixed bug in WinProxy where error add bad func name + update winproxy function list in doc hakril 2018-12-21 18:52:08 +01:00
  • 4f62434dfb Moved lookup_sid to windows.utils + add Token to window.security + update doc about official Token path hakril 2018-12-21 18:50:22 +01:00
  • fb567c6a76 Added some samples output + document change Kernel32Error -> WinproxyError + fix sample/readme/doc related hakril 2018-12-21 18:13:28 +01:00
  • 784e669597 update debugger.py with new on_setup callback" hakril 2018-12-21 16:22:38 +01:00
  • 21e259fa73 Update some doc/samples for new module/features hakril 2018-12-21 16:18:19 +01:00
  • db44087bba Refactor thread code for simple token retrieving on Process/Thread objects hakril 2018-12-21 16:07:10 +01:00
  • f522f08e7f Fix token.py doc + improve NDR with new class + doc NdrString new behavior + update uac.py sample to match new NdrString hakril 2018-12-21 16:05:37 +01:00
  • a9a39bc53f Added multiple ctypes_generation definition + some winproxy functions hakril 2018-12-21 15:31:51 +01:00
  • 45ace331cb Added token sample + Debugger.on_setup sample hakril 2018-12-21 15:27:04 +01:00
  • 79ff18e06f Update doc/samples/test of windows.security hakril 2018-12-21 15:26:29 +01:00
  • 986664d01f update Doc + test + sample for token.py hakril 2018-12-20 22:48:16 +01:00
  • 8dc2d443d5 Update WMI docs / samples hakril 2018-12-17 23:40:08 +01:00
  • e5f87e1453 Fix setup.py to match new winproxy packages hakril 2018-12-17 09:44:43 +01:00
  • 6c4a5f7d65 Added LoadLibraryEx[AW] + FreeLibrary to winproxy hakril 2018-11-27 14:38:29 +01:00
  • 5df8cc96dc enum mapper is now a FlagMapper + improve winfunc parsing hakril 2018-11-26 22:39:31 +01:00
  • 460274d532 Process object now return new Token object (still WIP) hakril 2018-11-24 22:57:44 +01:00
  • 2a4bdd7e30 removing crypto ECRYPT_DATA_BLOB. now CRYPT_DATA_BLOB is extended_struct + testing new API in crypto object hakril 2018-11-24 22:56:52 +01:00
  • d936942d28 [WIP] improving Token object possibilities hakril 2018-11-24 22:46:58 +01:00
  • 24c5083633 POC of new Improved buffer utilities + sprint use dunder method __sprint__ if available in objects hakril 2018-11-24 22:45:54 +01:00
  • c3b85068e5 Added Retn to x86/64 assemblers + encryption_demo sample can now sign a file + [WIP] token improvement hakril 2018-11-24 21:54:35 +01:00
  • fff2f37781 Add WMI create-process sample + improved some sample feature/doc hakril 2018-11-24 21:48:03 +01:00
  • b6f57b8342 Code now use renamed/improved windows.com.Variant hakril 2018-11-24 21:44:46 +01:00
  • cf6c813002 ComInterface now expose a callback for ctypes error handling. Allow COM interface to change/handle the raised Exception hakril 2018-11-24 21:42:07 +01:00
  • b167c6e70f Made some improvement of error handling by ApiProxy + some new generated def hakril 2018-11-24 21:39:40 +01:00
  • 267eddb5fe Reworking windows.com.Variant + working on new wmi API + wmi test hakril 2018-11-19 14:45:52 +01:00
  • a18c08ee53 Working on new WMI interface + improved ComInterface errcheck hakril 2018-11-17 00:47:34 +01:00
  • e46dc48c37 Addapt codebase and tests to winproxy refactoring (replace Kernel32Error to WinproxyError) hakril 2018-09-27 02:11:45 +02:00
  • 77fca8bb0f Refactor winproxy into a directory hakril 2018-09-27 01:57:02 +02:00
  • bbde38ffe4 First version of windows.security based on clmntb work hakril 2018-09-26 09:48:34 +02:00
  • 0e52272ddc Fixed a warning in simple_x[86|64] hakril 2018-09-26 09:36:41 +02:00
  • 91cbcce38f Added some definition + POC of FlagExtractor hakril 2018-09-26 09:36:03 +02:00
  • 33ca0c9c34 Added many security-related defines + moved improved-psid in extended_structs hakril 2018-09-24 16:38:36 +02:00
  • 272ad24f15 Added extended-struct capabilities to simple_type.txt hakril 2018-09-24 16:12:12 +02:00
  • 967c18d521 Added POC WinProcess.memory_info + some crypto defines hakril 2018-08-31 15:17:25 +02:00
  • 0125f78c67 Quick fix for query_volume_information hakril 2018-08-31 15:06:08 +02:00
  • 570436120b Added some functions hakril 2018-08-14 23:07:06 +02:00
  • 1c21b77292 Add sign/verify methods to windows.crypto + POC/Play with improved ctypes buffer/array hakril 2018-08-10 10:44:44 +02:00
  • 7a313f57c1 Added some crypto-related ctypes_generation definitions + generate.py now try to check for out-of-order definition hakril 2018-08-10 10:34:27 +02:00
  • b253bc5873 Merge pull request #4 from jagotu/master hakril 2018-11-07 22:10:34 +01:00
  • 921f066fb8 Ndr: Make sure Strings are null-terminated JaGoTu 2018-11-07 21:26:28 +01:00
  • 2454bf815b Regenerate sphinx doc hakril 2018-08-03 10:10:31 +02:00
  • b3f1420d46 Updated README with new features description hakril 2018-08-03 09:48:53 +02:00
  • 19095f0e2f Fix typo in certificate test + add very simple test of windows.system.modules hakril 2018-08-02 18:52:35 +02:00
  • c228a0d5cb Added Certificate.distinguished_name and BaseSystemModule.name + some winproxy functions hakril 2018-08-02 18:51:41 +02:00
  • c97d149630 Added some ctypes_generation definitions hakril 2018-08-02 18:42:36 +02:00
  • afccd0da30 Added doc about how to install pfw in readme and sphinx doc hakril 2018-08-02 18:41:08 +02:00
  • e53f7ef34b Added some test for windows.system.object_manager hakril 2018-08-02 18:38:48 +02:00
  • e6a022f8be Add windows.system.edition hakril 2018-07-13 18:08:00 +02:00
  • a75de140d6 Added object manager samples to doc + fix Certificate.thum[b]print typo hakril 2018-07-13 14:41:09 +02:00
  • d232928780 Added some generated def + some winproxy functions hakril 2018-07-13 14:33:50 +02:00
  • c19241098a Improve object manager doc + add samples hakril 2018-07-13 14:24:55 +02:00
  • eb3b13016f Fix right-margin in sphinx doc CSS (thanks bruno) hakril 2018-07-11 11:57:39 +02:00
  • c59af86910 Renamed kernobj.py to object_manager.py and added to windows.system.object_manager + improve API + beginning of doc hakril 2018-06-11 17:55:11 +02:00
  • 041a354d17 Update some doc + document windows.system.modules hakril 2018-06-11 11:09:48 +02:00
  • 525432fecd Add a POC for windows.system.modules to replace winutils.get_kernel_modules() hakril 2018-06-05 21:55:54 +02:00
  • 1ee9a8bc46 new POC for breakpoint with parameters extraction hakril 2018-06-05 21:54:26 +02:00
  • 3dcd27a1ca Fix ntdll-registry winproxy error check + add LocalDebugger.current_thread to match Debugger API hakril 2018-06-05 21:53:35 +02:00
  • b223ed233e Fix stuff in service.py + update test hakril 2018-06-05 11:59:06 +02:00
  • 3d69ad3cb5 Add some definition in ctypes generation + winproxy wrappers; fix com.py imports hakril 2018-06-05 11:38:57 +02:00
  • a559c5c295 Update some doc / test + some ctypes generation definition hakril 2018-06-05 11:34:52 +02:00
  • 93bb9b6540 Add doc/sample/test for event log code hakril 2018-06-05 11:30:25 +02:00
  • 057d4e5408 Add scheduled_task code/doc-source/tests hakril 2018-06-01 12:20:13 +02:00
  • 2bea15ffe8 add current word on event logs hakril 2018-05-12 00:17:34 +02:00
  • 11e4afeef5 ctypes generation : added bitfield parsing/generation + update/fix some definitions hakril 2018-05-12 00:16:45 +02:00
  • 05e7b755b0 Fix CurrentProcess read/write memory to use ctypes.memmove -> raise on bad address -> no more segv hakril 2018-05-12 00:13:57 +02:00
  • 849d64378f Commit current work on scheduled tasks hakril 2018-05-12 00:11:10 +02:00
  • 8cc361b1f9 ctypes generation allow COM mission interface autocopy from a directory + support anon structs/enum in typedef hakril 2018-04-16 19:54:09 +02:00
  • e918d735a1 Tests injecting python in remote process now check that target python is installed hakril 2018-03-28 23:14:41 +02:00
  • 9e1400e4ad Forgot a file.. This is the real v0.4 V0.4 hakril 2018-03-28 01:03:37 +02:00
  • 3565474693 Let's call it a 0.4 ! hakril 2018-03-27 21:33:06 +02:00
  • 83f4b0c48b Fixing some doc / samples hakril 2018-03-27 21:24:56 +02:00
  • b88ce36acb Add somme Evt-related define/structs/functions hakril 2018-03-27 20:46:54 +02:00
  • 4564be8488 Adding IShellLinkW + commit generated defs hakril 2018-03-27 20:44:54 +02:00
  • 34c2d94bc2 Some fixes in code/samples/test hakril 2018-03-27 20:37:30 +02:00
  • 66852aae37 Add function NtAllocateVirtualMemory + NtFreeVirtualMemory hakril 2018-03-23 12:43:31 +01:00
  • 094979f7c0 Add NtWriteVirtualMemory + fix some winfunc param/ret-val type hakril 2018-03-22 19:28:54 +01:00
  • b2c3493f46 Improve com generated interface hakril 2018-03-09 16:10:59 +01:00
  • 9ef71ad9e1 Clean ICallInterceptor POC hakril 2018-03-08 23:12:06 +01:00
  • e40b9fb2ff Add quick POC of ICallInterceptor to COM samples hakril 2018-03-08 22:45:26 +01:00
  • af6943992a cgen: Function generated after COM, handle COM variadic (cdecl) defintion + Comimplem.IID generated avec _functions_ + Add some COM/ComInterceptor definitions hakril 2018-03-08 22:35:54 +01:00
  • babb743096 check we are on windows hakril 2018-03-07 10:28:39 +01:00
  • 8840b9fdb9 updated doc hakril 2018-03-07 10:24:46 +01:00
  • 03e252b53a Upgrade to sphinx 1.7.1 + small css fix + review/update/refactor doc samples hakril 2018-03-05 01:06:30 +01:00
  • 1dc13b1a35 Adding some PE related windef + CertFreeCertificateContext hakril 2018-03-04 18:45:23 +01:00