| | |
- _ctypes.Structure(_ctypes._CData)
-
- IMAGE_EXPORT_DIRECTORY
- MEMORY_BASIC_INFORMATION
- MODULEENTRY32
- UNICODE_STRING
- builtins.object
-
- CallbackManager
- Callbacks
- Function
- Hooks
class CallbackManager(builtins.object) |
| | |
Data descriptors defined here:
- __dict__
- dictionary for instance variables (if defined)
- __weakref__
- list of weak references to the object (if defined)
Data and other attributes defined here:
- __annotations__ = {'config': <class 'dict'>, 'indent': <class 'int'>, 'lock': <built-in function allocate_lock>, 'run': <class 'bool'>, 'thread_id': <class 'int'>}
- config = {}
- indent = 0
- lock = <unlocked _thread.lock object>
- run = -1
- thread_id = 0
|
class Callbacks(builtins.object) |
| |
This class contains all callbacks define in configuration.
|
| |
Methods defined here:
- exit(type_: str, function: Union[Win32Hooking.Function, PyPeLoader.ImportFunction], arguments: Tuple, return_value: ctypes.c_void_p) -> ctypes.c_void_p
- This function terminates/exits the program.
- interactive(type_: str, function: Union[Win32Hooking.Function, PyPeLoader.ImportFunction], arguments: Tuple, return_value: ctypes.c_void_p) -> ctypes.c_void_p
- This function defines interactive actions on callback.
- kernel32_GetProcAddress(type_: str, function: Union[Win32Hooking.Function, PyPeLoader.ImportFunction], arguments: Tuple, return_value: ctypes.c_void_p) -> ctypes.c_void_p
- This function defines the GetProcAddress hooking behaviour.
- ntdll_LdrLoadDll(type_: str, function: Union[Win32Hooking.Function, PyPeLoader.ImportFunction], arguments: Tuple, return_value: ctypes.c_void_p) -> ctypes.c_void_p
- This function defines the LdrLoadDll hooking behaviour.
- print(type_: str, function: Union[Win32Hooking.Function, PyPeLoader.ImportFunction], arguments: Tuple, return_value: ctypes.c_void_p) -> ctypes.c_void_p
- This function prints function, return value and arguments,
it's a simple demo.
Data descriptors defined here:
- __dict__
- dictionary for instance variables (if defined)
- __weakref__
- list of weak references to the object (if defined)
|
class Function(builtins.object) |
| |
Function(module: Win32Hooking.MODULEENTRY32, module_name: str, name: str, address: int, rva: int, export_address: int, index: int, pointer: type = None, hook: Callable = None, arguments: List[str] = None, hide: bool = False, count_call: int = 0, calls: List[Dict[str, Union[int, Callable]]] = <factory>) -> None
Function(module: Win32Hooking.MODULEENTRY32, module_name: str, name: str, address: int, rva: int, export_address: int, index: int, pointer: type = None, hook: Callable = None, arguments: List[str] = None, hide: bool = False, count_call: int = 0, calls: List[Dict[str, Union[int, Callable]]] = <factory>)
|
| |
Methods defined here:
- __eq__(self, other)
- Return self==value.
- __init__(self, module: Win32Hooking.MODULEENTRY32, module_name: str, name: str, address: int, rva: int, export_address: int, index: int, pointer: type = None, hook: Callable = None, arguments: List[str] = None, hide: bool = False, count_call: int = 0, calls: List[Dict[str, Union[int, Callable]]] = <factory>) -> None
- Initialize self. See help(type(self)) for accurate signature.
- __repr__(self)
- Return repr(self).
Data descriptors defined here:
- __dict__
- dictionary for instance variables (if defined)
- __weakref__
- list of weak references to the object (if defined)
Data and other attributes defined here:
- __annotations__ = {'address': <class 'int'>, 'arguments': typing.List[str], 'calls': typing.List[typing.Dict[str, typing.Union[int, typing.Callable]]], 'count_call': <class 'int'>, 'export_address': <class 'int'>, 'hide': <class 'bool'>, 'hook': typing.Callable, 'index': <class 'int'>, 'module': <class 'Win32Hooking.MODULEENTRY32'>, 'module_name': <class 'str'>, ...}
- __dataclass_fields__ = {'address': Field(name='address',type=<class 'int'>,default=...appingproxy({}),kw_only=False,_field_type=_FIELD), 'arguments': Field(name='arguments',type=typing.List[str],def...appingproxy({}),kw_only=False,_field_type=_FIELD), 'calls': Field(name='calls',type=typing.List[typing.Dict[...appingproxy({}),kw_only=False,_field_type=_FIELD), 'count_call': Field(name='count_call',type=<class 'int'>,defau...appingproxy({}),kw_only=False,_field_type=_FIELD), 'export_address': Field(name='export_address',type=<class 'int'>,d...appingproxy({}),kw_only=False,_field_type=_FIELD), 'hide': Field(name='hide',type=<class 'bool'>,default=Fa...appingproxy({}),kw_only=False,_field_type=_FIELD), 'hook': Field(name='hook',type=typing.Callable,default=N...appingproxy({}),kw_only=False,_field_type=_FIELD), 'index': Field(name='index',type=<class 'int'>,default=<d...appingproxy({}),kw_only=False,_field_type=_FIELD), 'module': Field(name='module',type=<class 'Win32Hooking.MO...appingproxy({}),kw_only=False,_field_type=_FIELD), 'module_name': Field(name='module_name',type=<class 'str'>,defa...appingproxy({}),kw_only=False,_field_type=_FIELD), ...}
- __dataclass_params__ = _DataclassParams(init=True,repr=True,eq=True,order=False,unsafe_hash=False,frozen=False)
- __hash__ = None
- __match_args__ = ('module', 'module_name', 'name', 'address', 'rva', 'export_address', 'index', 'pointer', 'hook', 'arguments', 'hide', 'count_call', 'calls')
- arguments = None
- count_call = 0
- hide = False
- hook = None
- pointer = None
|
class Hooks(builtins.object) |
| |
This class contains all data about hooks.
|
| |
Data descriptors defined here:
- __dict__
- dictionary for instance variables (if defined)
- __weakref__
- list of weak references to the object (if defined)
Data and other attributes defined here:
- __annotations__ = {'export_hooks': typing.Dict[str, Win32Hooking.Function], 'get_proc_address_hooks': typing.Dict[str, Win32Hooking.Function], 'import_hooks': typing.Dict[str, PyPeLoader.ImportFunction], 'name_hooks': typing.Dict[str, Win32Hooking.Function], 'reserved_hooks_space': typing.Dict[str, int], 'types': typing.Dict[str, CFUNCTYPE]}
- export_hooks = {}
- get_proc_address_hooks = {}
- import_hooks = {}
- name_hooks = {}
- reserved_hooks_space = {}
- types = {}
|
|