Welcome to PythonForWindows’s documentation!

Contents:

• 1. The windows module
  • 1.1. The system object
• 2. The windows objects
  • 2.1. Processes and Threads
  • 2.2. PEB Exploration
  • 2.3. PEFile - Parsing loaded PE
  • 2.4. Exception and Context related structures
  • 2.5. Registry
  • 2.6. Network
  • 2.7. Service
  • 2.8. Volume – The logical drives
  • 2.9. WMI – Make request to WMI
  • 2.10. Handle – Processes handles
• 3. windows.native_exec – Native Code Execution
  • 3.1. windows.native_exec.cpuid – Interface to native CPUID
  • 3.2. windows.native_exec.simple_x86 – X86 Assembler
  • 3.3. windows.native_exec.simple_x64 – X64 Assembler
  • 3.4. windows.native_exec.nativeutils – Native utility functions
• 4. windows.winproxy – Windows API
  • 4.1. Example: VirtualAlloc
  • 4.2. Functions in windows.winproxy
• 5. windows.utils – Windows Utilities
  • 5.1. Context Managers
  • 5.2. Helper functions
• 6. windows.wintrust – Checking signature
  • 6.1. API
• 7. windows.debug – Debugging
  • 7.1. Debugger
  • 7.2. LocalDebugger
  • 7.3. Breakpoint
• 8. windows.com - Component Object Model
  • 8.1. Using a COM interface
  • 8.2. Implementing a COM interface
• 9. windows.crypto – CryptoAPI
  • 9.1. Encryption
  • 9.2. Certificate
  • 9.3. Generating componants
• 10. IAT hooking
  • 10.1. Putting an IAT hook
  • 10.2. Hook protocol
  • 10.3. windows.hooks
• 11. Early Work In Progress
• 12. Internals
  • 12.1. remotectypes.py
  • 12.2. syswow64.py – Crossing the heaven gate
• 13. Samples of code
  • 13.1. Processes
  • 13.2. windows.system
  • 13.3. Network - socket exploration
  • 13.4. Registry
  • 13.5. windows.wintrust
  • 13.6. VectoredException()
  • 13.7. Debugging
  • 13.8. Make WMI requests
  • 13.9. using COM: INetFwPolicy2
  • 13.10. windows.crypto

Indices and tables

• Module Index
• Search Page
• Index