├── .gitignore ├── AUTHORS ├── LICENSE ├── README.md ├── bin ├── DBGDLL │ ├── dbgeng.dll │ ├── dbghelp.dll │ ├── symsrv.dll │ └── symsrv.yes ├── DBGDLL64 │ ├── dbgeng.dll │ ├── dbghelp.dll │ ├── symsrv.dll │ └── symsrv.yes ├── windbg_driver_x64.sys └── windbg_driver_x86.sys ├── dbgdef.py ├── dbginterface.py ├── dbgtype.py ├── doc ├── Makefile ├── make.bat └── source │ ├── conf.py │ ├── dbginterface.rst │ └── index.rst ├── driver_upgrade.py ├── example ├── PEBS_BTS_demo.py ├── hook_ntcreatefile.py ├── ida_demos_commands.md ├── idt.py ├── output_demo.py ├── pci_vendor.py ├── simple_pci_exploration.py ├── smm_check.py └── type_demo.py ├── resource_emulation.py ├── setup.py ├── simple_com.py ├── test ├── __init__.py └── test_all.py └── windows ├── __init__.py ├── dbgprint.py ├── generated_def ├── __init__.py ├── ntstatus.py ├── windef.py ├── winfuncs.py └── winstructs.py ├── hooks.py ├── injection.py ├── native_exec ├── __init__.py ├── cpuid.py ├── native_function.py ├── simple_x64.py └── simple_x86.py ├── pe_parse.py ├── remotectypes.py ├── syswow64.py ├── test ├── __init__.py └── mytest.py ├── utils ├── __init__.py ├── pythonutils.py └── winutils.py ├── winobject.py └── winproxy.py /.gitignore: -------------------------------------------------------------------------------- 1 | *.pyc 2 | doc/build/ 3 | -------------------------------------------------------------------------------- /AUTHORS: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/AUTHORS -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/README.md -------------------------------------------------------------------------------- /bin/DBGDLL/dbgeng.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/bin/DBGDLL/dbgeng.dll -------------------------------------------------------------------------------- /bin/DBGDLL/dbghelp.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/bin/DBGDLL/dbghelp.dll -------------------------------------------------------------------------------- /bin/DBGDLL/symsrv.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/bin/DBGDLL/symsrv.dll -------------------------------------------------------------------------------- /bin/DBGDLL/symsrv.yes: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /bin/DBGDLL64/dbgeng.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/bin/DBGDLL64/dbgeng.dll -------------------------------------------------------------------------------- /bin/DBGDLL64/dbghelp.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/bin/DBGDLL64/dbghelp.dll -------------------------------------------------------------------------------- /bin/DBGDLL64/symsrv.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/bin/DBGDLL64/symsrv.dll -------------------------------------------------------------------------------- /bin/DBGDLL64/symsrv.yes: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /bin/windbg_driver_x64.sys: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/bin/windbg_driver_x64.sys -------------------------------------------------------------------------------- /bin/windbg_driver_x86.sys: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/bin/windbg_driver_x86.sys -------------------------------------------------------------------------------- /dbgdef.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/dbgdef.py -------------------------------------------------------------------------------- /dbginterface.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/dbginterface.py -------------------------------------------------------------------------------- /dbgtype.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/dbgtype.py -------------------------------------------------------------------------------- /doc/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/doc/Makefile -------------------------------------------------------------------------------- /doc/make.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/doc/make.bat -------------------------------------------------------------------------------- /doc/source/conf.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/doc/source/conf.py -------------------------------------------------------------------------------- /doc/source/dbginterface.rst: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/doc/source/dbginterface.rst -------------------------------------------------------------------------------- /doc/source/index.rst: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/doc/source/index.rst -------------------------------------------------------------------------------- /driver_upgrade.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/driver_upgrade.py -------------------------------------------------------------------------------- /example/PEBS_BTS_demo.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/example/PEBS_BTS_demo.py -------------------------------------------------------------------------------- /example/hook_ntcreatefile.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/example/hook_ntcreatefile.py -------------------------------------------------------------------------------- /example/ida_demos_commands.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/example/ida_demos_commands.md -------------------------------------------------------------------------------- /example/idt.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/example/idt.py -------------------------------------------------------------------------------- /example/output_demo.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/example/output_demo.py -------------------------------------------------------------------------------- /example/pci_vendor.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/example/pci_vendor.py -------------------------------------------------------------------------------- /example/simple_pci_exploration.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/example/simple_pci_exploration.py -------------------------------------------------------------------------------- /example/smm_check.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/example/smm_check.py -------------------------------------------------------------------------------- /example/type_demo.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/example/type_demo.py -------------------------------------------------------------------------------- /resource_emulation.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/resource_emulation.py -------------------------------------------------------------------------------- /setup.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/setup.py -------------------------------------------------------------------------------- /simple_com.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/simple_com.py -------------------------------------------------------------------------------- /test/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/test/__init__.py -------------------------------------------------------------------------------- /test/test_all.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/test/test_all.py -------------------------------------------------------------------------------- /windows/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/__init__.py -------------------------------------------------------------------------------- /windows/dbgprint.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/dbgprint.py -------------------------------------------------------------------------------- /windows/generated_def/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/generated_def/__init__.py -------------------------------------------------------------------------------- /windows/generated_def/ntstatus.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/generated_def/ntstatus.py -------------------------------------------------------------------------------- /windows/generated_def/windef.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/generated_def/windef.py -------------------------------------------------------------------------------- /windows/generated_def/winfuncs.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/generated_def/winfuncs.py -------------------------------------------------------------------------------- /windows/generated_def/winstructs.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/generated_def/winstructs.py -------------------------------------------------------------------------------- /windows/hooks.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/hooks.py -------------------------------------------------------------------------------- /windows/injection.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/injection.py -------------------------------------------------------------------------------- /windows/native_exec/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/native_exec/__init__.py -------------------------------------------------------------------------------- /windows/native_exec/cpuid.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/native_exec/cpuid.py -------------------------------------------------------------------------------- /windows/native_exec/native_function.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/native_exec/native_function.py -------------------------------------------------------------------------------- /windows/native_exec/simple_x64.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/native_exec/simple_x64.py -------------------------------------------------------------------------------- /windows/native_exec/simple_x86.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/native_exec/simple_x86.py -------------------------------------------------------------------------------- /windows/pe_parse.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/pe_parse.py -------------------------------------------------------------------------------- /windows/remotectypes.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/remotectypes.py -------------------------------------------------------------------------------- /windows/syswow64.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/syswow64.py -------------------------------------------------------------------------------- /windows/test/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/test/__init__.py -------------------------------------------------------------------------------- /windows/test/mytest.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/test/mytest.py -------------------------------------------------------------------------------- /windows/utils/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/utils/__init__.py -------------------------------------------------------------------------------- /windows/utils/pythonutils.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/utils/pythonutils.py -------------------------------------------------------------------------------- /windows/utils/winutils.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/utils/winutils.py -------------------------------------------------------------------------------- /windows/winobject.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/winobject.py -------------------------------------------------------------------------------- /windows/winproxy.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sogeti-esec-lab/LKD/HEAD/windows/winproxy.py --------------------------------------------------------------------------------