aboutsummaryrefslogtreecommitdiff
path: root/RE_Tools
AgeCommit message (Collapse)AuthorFilesLines
2013-01-07Added Get-PEBbitform2-0/+2110
Returns the process environment block (PEB) of a process.
2013-01-02Added Get-StructFromMemorybitform1-0/+201
Marshals data from an unmanaged block of memory in an arbitrary process to a newly allocated managed object of the specified type. In other words, it will parse and return a structure at a known memory address in any process.
2012-12-30Fixed several bugs in Get-KernelModuleInfobitform1-8/+3
* The script now silently continues if the ps1xml file is not present. * Removed compiler parameter code. This was a remnant of the first version of Get-KernelModuleInfo when it compiled code. * Improved the heuristics for determining when the last kernel module is encountered.
2012-12-16Improved Get-KernelModuleInfobitform1-59/+108
Get-KernelModuleInfo utilizes reflection exclusively now and no longer requires compilation of C# code. This means that is runs entirely in memory.
2012-12-16Added Get-KernelModuleInfobitform2-0/+283
Returns loaded kernel module information.
2012-11-17Adding Get-MethodAddressbitform1-0/+110
2012-10-27Added Get-Stringsbitform1-0/+96
Get-Strings dumps strings from any file in Ascii and/or Unicode.
2012-08-11Added the Get-Member proxy functionbitform1-0/+344
This extends the built-in Get-Member cmdlet by adding the '-Private' parameter for dissecting .NET types.
2012-06-26Added Get-ILDisassembly - an MSIL disassemblerbitform1-0/+196
Added Get-ILDisassembly. Added RE_Tools folder for all current and future reverse engineering tools.