From b8c8e0f852e9f0bc627c3e7c6c8a759b01010c03 Mon Sep 17 00:00:00 2001 From: AsafEitani Date: Tue, 23 Feb 2021 12:19:12 +0200 Subject: [PATCH] Update cachedump.py fix bytes to str concat --- volatility3/framework/plugins/windows/cachedump.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/volatility3/framework/plugins/windows/cachedump.py b/volatility3/framework/plugins/windows/cachedump.py index 42bb93a73..b436db753 100644 --- a/volatility3/framework/plugins/windows/cachedump.py +++ b/volatility3/framework/plugins/windows/cachedump.py @@ -43,11 +43,11 @@ class Cachedump(interfaces.plugins.PluginInterface): else: # based on Based on code from http://lab.mediaservice.net/code/cachedump.rb aes = AES.new(nlkm[16:32], AES.MODE_CBC, ch) - data = "" + data = b"" for i in range(0, len(edata), 16): buf = edata[i:i + 16] if len(buf) < 16: - buf += (16 - len(buf)) * "\00" + buf += (16 - len(buf)) * b"\00" data += aes.decrypt(buf) return data