Commit Graph

  • d91bc1a45a Fix a bug in com.init() when CoInitializeEx failed + fix test: test_wmi fail du to pytest default COM-security settings hakril 2018-03-04 18:34:40 +01:00
  • a057f8c130 class CertificateContext(PCERT_CONTEXT) replaced by Certificate(CERT_CONTEXT) + multi-received encrypt/decrypt test hakril 2018-03-04 18:28:09 +01:00
  • c20d443c29 windows.com.init does not raise anymore if CoInitializeEx fails but return error code + cosmetic hakril 2018-03-03 16:55:40 +01:00
  • 262b80c8c3 utils.get_(long|short)_path now handle unicode path using W func hakril 2018-03-03 16:51:51 +01:00
  • 805e735a88 Added some ctypes definitions hakril 2018-03-03 16:49:53 +01:00
  • 4499080a77 Remote load library now use LoadLibraryW and get_mapped_filename use GetMappedFileNameW: return unicode str in every case hakril 2018-02-07 13:14:25 +01:00
  • b2a72f11cc Add windows.pipe for simpler communication with injected process hakril 2018-02-02 10:27:04 +01:00
  • f682fbd8c1 Add transaction + window APIs to winproxy + get_mapped_filename raise on non-standard error (like aborted transaction) hakril 2018-01-26 11:05:53 +01:00
  • 4251b18041 Fix ctypes generation + COM interface dependance check + add IPersistFile, IShellLink, strucs/defs hakril 2018-01-25 16:51:04 +01:00
  • 82e464d527 Replaced old generate.py with new ctypes generation code ! hakril 2018-01-19 18:11:16 +01:00
  • 445de0b007 Commit generated def before switching generator code hakril 2018-01-19 17:33:33 +01:00
  • 61ddb4821a Working in new ctypes generation code and features hakril 2018-01-17 01:17:55 +01:00
  • 65726e706f Add Int X86/64 instruction hakril 2018-01-13 16:40:21 +01:00
  • 715a7fee95 Add CryptMsgVerifyCountersignatureEncoded[Ex] and some crypto definition hakril 2018-01-13 16:39:53 +01:00
  • 48b6758f7f Add exists/create to PyHKey hakril 2018-01-13 16:38:29 +01:00
  • f882bd1e35 Add wmi.gen_select for class select returning a generator + fom E_CRYPT define + CryptObj.nb_signer return 0 if CRYPT_E_INVALID_MSG_TYPE hakril 2017-12-08 16:54:49 +01:00
  • 4a75453a8b Clean and Improve WMI query API that now accept a Timeout hakril 2017-12-08 14:49:03 +01:00
  • 3490dc987f Default encrypt algo is now AES256_CBC + Fix import_pfx default flags to be able to use it for AES256_CBC simply hakril 2017-12-07 15:40:47 +01:00
  • 32de3cb824 Improve ApiSetMap resolve to match ntdll behavior + add sizekey option to encryption_demo genkey option hakril 2017-12-06 10:21:40 +01:00
  • 23837a0713 Improving volume objects + adding CurrentProcess.peb.apisetmap with ApiSetMap parsing capabilities hakril 2017-12-04 10:12:41 +01:00
  • 8f7adb8da1 Add fuller PEB structure + Improved UNICODE_STRING + other define hakril 2017-12-04 10:01:40 +01:00
  • f03bb89ae6 Working on time translation (filetime - unix - datetime) and windows volume objects hakril 2017-11-28 10:50:02 +01:00
  • 22224b52e2 Added utils.query_file_informations wrapper arround new winproxy.NtQueryInformationFile hakril 2017-11-27 10:13:13 +01:00
  • c135780ba9 Add Process.virtual_protect default value for 'old_protect' + add test for Improved LSA_UNICODE_STRING used in PEB.ProcessParameters + find_value now search in ntstatus values hakril 2017-11-24 17:46:07 +01:00
  • f54599568d Working on eventlog hakril 2017-11-15 21:37:38 +01:00
  • 5a5baa7bcd Add ctypes_generation extended structs _LSA_UNICODE_STRING.py Clement Rouault 2017-11-17 15:14:10 +01:00
  • d12bae6dbb Remove 'WinUnicodeString' and add un extended struct _LSA_UNICODE_STRING: simplify lots of things Clement Rouault 2017-11-17 15:13:34 +01:00
  • d3ca30b229 Winstruct parser now handle comments in winstructs source files Clement Rouault 2017-11-17 15:10:19 +01:00
  • a0ffea68b7 Add a example of x86.assemble in the README Clement Rouault 2017-11-15 17:29:11 +01:00
  • 51bc3fdf7c Improve _GUID & typedef definition + add a sample using gdef.meta to search for a name/value in generated defs Clement Rouault 2017-11-15 15:20:38 +01:00
  • a6aa8b86ea Fix typo in rpc windef and improve NDR-related exception message Clement Rouault 2017-11-15 11:05:54 +01:00
  • d9db5ba428 utils.create_file_from_handle now handles binary opening mode hakril 2017-11-15 09:00:38 +01:00
  • be68ba8b15 Testing a new generated file: meta.py Clement Rouault 2017-11-10 17:29:50 +01:00
  • 7929a31bf7 clean wintrust.py: add def to generated_ctypes + use gdef.IID for wintrust IID Clement Rouault 2017-11-10 14:40:16 +01:00
  • 4e5733c2c5 Process.prioroty now use the FlagMapper Clement Rouault 2017-11-10 14:20:59 +01:00
  • 8ba325afd2 Add a new FlagMapper to easily transform int to Flag and change to code use it Clement Rouault 2017-11-10 13:47:27 +01:00
  • 4efae2194d Adding Process.priority + fix in WMI raised exceptions + add x86.Iret Clement Rouault 2017-11-10 11:12:24 +01:00
  • 14b1cbcf75 Adding improved MEMORY_BASIC_INFORMATION structs hakril 2017-11-10 09:04:22 +01:00
  • 5a79e15440 Improve WMI capabilities by adding access to various namespaces + listing methods + add CurrentProcess.load_library Clement Rouault 2017-11-08 17:55:47 +01:00
  • e07d4dbe0c Added th description from the readme at the beginning of the documentation v3.5 Clement Rouault 2017-10-20 17:10:30 +02:00
  • c848f33729 Pushed new HTML doc, changed version to 0.3. Ready for hack.lu hakril 2017-10-15 00:17:43 +02:00
  • c3f9d87c82 Add missing doc sources hakril 2017-10-15 00:13:56 +02:00
  • 2094ab4ad4 Fix some docstring + re-add windows.test.pop_proc_[32|64] + fix all samples + few doc adapt hakril 2017-10-15 00:13:07 +02:00
  • c7fef877f0 Testing some crypto stuff Clement Rouault 2017-10-13 17:56:36 +02:00
  • ba6b22ac84 testing crypto stuff hakril 2017-10-12 08:13:42 +02:00
  • 930c992be3 Working on improving crypto stuff hakril 2017-10-09 09:11:48 +02:00
  • f6e151a7d5 Adding some crypto api Clement Rouault 2017-10-06 17:32:24 +02:00
  • c12a0c45f9 Add windows.system + ALPC + RPC + winproxy demo to README.md Clement Rouault 2017-10-06 15:10:04 +02:00
  • 5ee74d5b8f Update rpc doc + sample + new rpc function + new winfunc definition file + fix setup.py Clement Rouault 2017-10-05 16:22:16 +02:00
  • a183e468ca fix dbgprint to use hardcoded dict + improve rpc client forge_call + new ndr varying string Clement Rouault 2017-10-03 17:30:38 +02:00
  • bd5976dce2 Added alpc + rpc tests files Clement Rouault 2017-09-18 11:11:33 +02:00
  • 7947ace02d Add alpc[Client|Server] __del__ to close handles + NtAlpcDisconnectPort + test Clement Rouault 2017-09-15 17:54:19 +02:00
  • b9a00b2ed7 add rpc.rst doc + rename endpoint_map_alpc + rename ndr EptMapAuth Clement Rouault 2017-09-14 17:24:18 +02:00
  • 5301f91927 Add sample for thread + fix code to get a WinProcess from a pid not using WinProcess(pid=xxx) + test Clement Rouault 2017-09-11 18:20:49 +02:00
  • b3117ce4e3 pytest integration finished + moved tests/ to top dir hakril 2017-09-10 18:57:59 +02:00
  • 492b6f4f02 pytest added --leaks for leak check + test Handle.description Clement Rouault 2017-09-08 17:53:59 +02:00
  • 7db5620210 more pytest POC + fixed debugger code + test FunctionHXBP Clement Rouault 2017-09-07 17:13:59 +02:00
  • 89e486cd95 Working on rewriting of tests with pytest Clement Rouault 2017-09-06 18:42:54 +02:00
  • fccd2a49e6 Add doc to RPC + RPC_IF_ID generated-extended + lsass sample Clement Rouault 2017-08-30 18:29:49 +02:00
  • d44a3b032e Add extended struct to ctypes generation + extended IID now in winstructs.py and used everywhere Clement Rouault 2017-08-29 11:39:43 +02:00
  • 1fe5b912be Add some ALPC samples to the documentation Clement Rouault 2017-08-28 17:09:49 +02:00
  • 1941adc93f Working on RtlGetUnloadEventTraceEx - adding function and struct + fix remotectypes char-array in struct Clement Rouault 2017-08-17 18:51:07 +02:00
  • e9c62a125c add system.build_number + better handling of closing python in Winprocess.__del__ Clement Rouault 2017-08-17 18:49:42 +02:00
  • c75dda60b5 Fixed get_kernel_modules for syswow64 process Clement Rouault 2017-08-17 13:51:36 +02:00
  • 16e29bd938 Added a sample for Debugger.attach Clement Rouault 2017-08-16 18:07:00 +02:00
  • c76a50c045 add doc to alpc.py + improve doc now that Winstruct are documented Clement Rouault 2017-08-16 17:38:18 +02:00
  • bd6a3d35d5 Created sub-directories in samples/ Clement Rouault 2017-08-16 17:37:26 +02:00
  • 8b9a71edc2 Add real doc for windows.generated_def Clement Rouault 2017-08-16 15:11:23 +02:00
  • 3d33c97335 add system.windir + needed winfuncs hakril 2017-08-16 09:25:23 +02:00
  • 8d139bce79 Working on sphinx doc generation for windows.generated_def Clement Rouault 2017-08-11 19:06:50 +02:00
  • 61ac5c8c5d Fix EnumValue pickling for protocol 2 Clement Rouault 2017-08-10 17:07:41 +02:00
  • 928a2744d5 Change RPC_SYNTAX_IDENTIFIER to RPC_IF_ID + update setup_hook + some add to wincli Clement Rouault 2017-08-04 17:28:46 +02:00
  • f43749aa07 [WIP] new hook method + winfunc APIs in winproxy Clement Rouault 2017-08-04 17:19:27 +02:00
  • d1cadf062a working on windows.alpc + fix in current_process.threads Clement Rouault 2017-08-04 17:18:41 +02:00
  • aa22f1515d Working on new windows.alpc Clement Rouault 2017-07-28 09:20:40 +02:00
  • 6898ac02fa First try at MemBP.on_error callback Clement Rouault 2017-07-18 12:48:45 +02:00
  • f08953f4ae rewrite of alpc.py + adapt rpc/client.py Clement Rouault 2017-07-12 16:29:02 +02:00
  • 5d34493356 commit alpc.py before rewriting Clement Rouault 2017-07-12 16:27:43 +02:00
  • 89fe39fadf Adding some ALPC struct/funcs Clement Rouault 2017-07-11 18:42:51 +02:00
  • 5e2ecf2af9 Still working on RPC over alpc Clement Rouault 2017-07-06 18:11:32 +02:00
  • aff6ee4e17 replace PORT_MESSAGE struct def with PORT_MESSAGE[32|64] + FunctionBP can get the function via a class parameter Clement Rouault 2017-06-21 13:16:22 +02:00
  • ae5a211613 fix SIZE_T definition to ctypes.c_size_t + fix MessageAttribute._get_required_buffer_size Clement Rouault 2017-06-08 18:22:24 +02:00
  • 1a7e342318 Add Winprocess.limited_handle for QUERY_LIMITED_INFORMATION api call hakril 2017-06-07 20:00:12 +02:00
  • a5688076a6 add uac sample Clement Rouault 2017-06-07 11:45:59 +02:00
  • a13b287202 Clean some rpc/alpc code + add ndr.NdrCString Clement Rouault 2017-06-07 11:45:11 +02:00
  • 4c8747b628 Add winproxy.MessageBox[AW] Clement Rouault 2017-06-07 11:39:37 +02:00
  • 1a73fe713b Add missing psid.py + some rpc fix + alpc sample + wincli Clement Rouault 2017-05-24 17:49:46 +02:00
  • a89854a045 PrintBP now accept a pre-format fonction to forge new format parameters Clement Rouault 2017-05-24 17:45:27 +02:00
  • 3c21d8c59c token.integrity is now settable Clement Rouault 2017-05-24 17:43:34 +02:00
  • 9461d4a2fb Add structs/def/funcs + Service.start() Clement Rouault 2017-05-24 17:40:31 +02:00
  • 5b17cc988f simple_x64 does not add extra unwanted REX for some 'Slash [MEM]' instruction Clement Rouault 2017-05-24 17:33:40 +02:00
  • e5e9ff7a47 windows.alpc + windows.rpc first version (manual_uac works with those) Clement Rouault 2017-05-19 17:14:10 +02:00
  • d24e62e319 Add PrintBP + few fix in Debugger + simple string-address resolution in localdebugger Clement Rouault 2017-05-19 15:39:32 +02:00
  • bc3c033e84 Added some definitions for SID/Privilege/others Clement Rouault 2017-05-19 15:34:46 +02:00
  • dbd98c93ed fix Process.ppid implem + new version does not enum processes Clement Rouault 2017-04-28 17:29:17 +02:00
  • 48fbeaee77 Fix bug in debugger: close EVENT_INFO hFile only if not NULL Clement Rouault 2017-04-27 14:10:03 +02:00
  • f9a650fcf3 WinThread is not a THREADENTRY32 anymore + add Winprocess.peb.exe Clement Rouault 2017-04-27 12:06:04 +02:00
  • c0d03a2f58 Fix some handle leak, debugger close hFile on event + enumerate processes/threads close snap handle Clement Rouault 2017-04-26 14:46:45 +02:00
  • feb76b48c3 unit tests now check for uncollectable-object (gc.garbage) Clement Rouault 2017-04-26 11:07:52 +02:00
  • be5cbe2631 Winprocess.peb not a fixedproperty anymore to prevent ref-cycle + add windows.crypto to setup.py hakril 2017-04-24 22:43:49 +02:00