hakril f54599568d Working on eventlog

2017-11-24 17:17:35 +01:00

..

crypto

Add a new FlagMapper to easily transform int to Flag and change to code use it

2017-11-10 13:47:27 +01:00

debug

more pytest POC + fixed debugger code + test FunctionHXBP

2017-09-07 17:13:59 +02:00

generated_def

Working on eventlog

2017-11-24 17:17:35 +01:00

native_exec

Adding Process.priority + fix in WMI raised exceptions + add x86.Iret

2017-11-10 11:12:24 +01:00

rpc

Fix typo in rpc windef and improve NDR-related exception message

2017-11-15 11:05:54 +01:00

utils

utils.create_file_from_handle now handles binary opening mode

2017-11-15 09:00:38 +01:00

winobject

Remove 'WinUnicodeString' and add un extended struct _LSA_UNICODE_STRING: simplify lots of things

2017-11-17 15:13:34 +01:00

__init__.py

Add sample for thread + fix code to get a WinProcess from a pid not using WinProcess(pid=xxx) + test

2017-09-11 18:20:49 +02:00

alpc.py

Remove 'WinUnicodeString' and add un extended struct _LSA_UNICODE_STRING: simplify lots of things

2017-11-17 15:13:34 +01:00

bits.py

Fix BitsCopyCallback callback prototype + print error code on bits job error

2017-04-20 11:52:56 +02:00

com.py

exception reraised by registry have a winerror + remove dead code windows windows.com

2017-04-12 17:20:37 +02:00

dbgprint.py

fix dbgprint to use hardcoded dict + improve rpc client forge_call + new ndr varying string

2017-10-03 17:30:38 +02:00

hooks.py

Change RPC_SYNTAX_IDENTIFIER to RPC_IF_ID + update setup_hook + some add to wincli

2017-08-04 17:28:46 +02:00

injection.py

more pytest POC + fixed debugger code + test FunctionHXBP

2017-09-07 17:13:59 +02:00

pe_parse.py

Fix handle_exit_process + detach in Debugger to prevent keeping ref on process + fix pe_parse IATHook: all test pass

2017-04-12 17:19:01 +02:00

remotectypes.py

Working on RtlGetUnloadEventTraceEx - adding function and struct + fix remotectypes char-array in struct

2017-08-17 18:51:07 +02:00

syswow64.py

Fixed get_kernel_modules for syswow64 process

2017-08-17 13:51:36 +02:00

test.py

Fix some docstring + re-add windows.test.pop_proc_[32|64] + fix all samples + few doc adapt

2017-10-15 00:13:07 +02:00

winproxy.py

Working on eventlog

2017-11-24 17:17:35 +01:00

wintrust.py

clean wintrust.py: add def to generated_ctypes + use gdef.IID for wintrust IID

2017-11-10 14:40:16 +01:00