WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-10 11:47:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Tidy up the tests and add a bit of error checking to the dtb finder.

Browse Source
This commit is contained in:
Mike Auty
2016-02-27 11:53:44 +00:00
parent b06306f884
commit 9fce3a4b1f
1 changed files with 19 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/automagic/windows.py
+19 -15
View File
@@ -195,18 +195,22 @@ if __name__ == '__main__':
if args.generic:
tests.append(SelfReferentialTest())
for i in range(len(args.filenames)):
print("[*] Scanning " + args.filenames[i] + "...")
hits = scan(ctx, "data" + str(i), tests)
for key in tests:
arch_hits = hits.get(key.layer_type, [])
if arch_hits:
print(" ", key.layer_type.__name__ + ": " + repr([hex(x) for x in sorted(arch_hits)]))
guesses = []
for key in hits:
guesses.append((len(hits[key]), key.__name__, hits[key]))
if guesses:
_, arch, dtbs = max(guesses)
print("[!] OS Guess:", arch, "with DTB", hex(dtbs[0]))
else:
print("[X] No DTBs found")
if tests:
for i in range(len(args.filenames)):
print("[*] Scanning " + args.filenames[i] + "...")
hits = scan(ctx, "data" + str(i), tests)
for key in tests:
arch_hits = hits.get(key.layer_type, [])
if arch_hits:
print(" ", key.layer_type.__name__ + ": " + repr([hex(x) for x in sorted(arch_hits)]))
guesses = []
for key in hits:
guesses.append((len(hits[key]), key.__name__, hits[key]))
num, arch, dtbs = max(guesses)
if num:
print("[!] OS Guess:", arch, "with DTB", hex(dtbs[0]))
else:
print("[X] No DTBs found")
print()
else:
print("[X] No tests selected")