nopter님의 이글루

# *_* coding: euc_kr_*_
# Windows OperatingSystem Description

try:
    import wmi
except:
    print "[-]python wmi module needed"
    print "Download:  http://tgolden.sc.sabren.com/python/wmi.html"
    sys.exit(1)

c = wmi.WMI ()

for OS in c.Win32_OperatingSystem ():
    print OS.Caption, OS.OSArchitecture, OS.SerialNumber

# *_* coding: euc_kr_*_
# List of Windows Proccesses and Descriptions

try:
   import wmi
except:
   print "[-]python wmi module needed"
   print "Download:  http://tgolden.sc.sabren.com/python/wmi.html"
   sys.exit(1)

c = wmi.WMI ()

print "[PID] [NAME] [PATH]"

for process in c.Win32_Process ():
    if process.ProcessId == 0 :
      pass
    else :
        print process.ProcessId, process.Name, process.ExecutablePath

dllinject.py.txt

# tagging
# DLL Injection Ejection
# 인젝션

pe_dump.py.txt
pe_dump_output.txt

# tagging
# PE Dump
# 실행파일 정보 수집
# Portable Executable File information
# DOS_HEADER # NT_HEADERS # FILE_HEADER # OPTIONAL_HEADER # PE Sections
# Directories  # Version Information # Exported symbols # Imported symbols # Resource directory
# Base relocations