mirror of
https://github.com/hakril/PythonForWindows
synced 2026-06-08 14:31:45 +00:00
hakril
33 lines
956 B
Python
33 lines
956 B
Python
import windows
|
|
import windows.test
|
|
import windows.pipe
|
|
|
|
p = windows.test.pop_proc_32()
|
|
print("Child is {0}".format(p))
|
|
|
|
PIPE_NAME = "PFW_Pipe"
|
|
|
|
rcode = """
|
|
import windows
|
|
import windows.pipe
|
|
|
|
f = open('tst.txt', "w+")
|
|
fh = windows.utils.get_handle_from_file(f)
|
|
hm = windows.winproxy.CreateFileMappingA(fh, dwMaximumSizeLow=0x1000, lpName=None)
|
|
addr = windows.winproxy.MapViewOfFile(hm, dwNumberOfBytesToMap=0x1000)
|
|
|
|
windows.pipe.send_object("{pipe}", addr)
|
|
"""
|
|
|
|
with windows.pipe.create(PIPE_NAME) as np:
|
|
print("Created pipe is {0}".format(np))
|
|
p.execute_python(rcode.format(pipe=PIPE_NAME))
|
|
print("Receiving object from injected process")
|
|
addr = np.recv()
|
|
|
|
print("Remote Address = {0:#x}".format(addr))
|
|
print("Querying memory in target at <{0:#x}>".format(addr))
|
|
print(" * {0}".format(p.query_memory(addr)))
|
|
print("Querying mapped file in target at <{0:#x}>".format(addr))
|
|
print(" * {0}".format(p.get_mapped_filename(addr)))
|
|
p.exit() |