WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-06 01:37:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Define 'all_zero' default value, Update output column name

Browse Source
This commit is contained in:
Donghyun Kim
2022-03-14 09:47:34 +09:00
parent 54a93a12f5
commit f97348616f
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/windows/mbrscan.py
+4 -2
View File
@@ -66,6 +66,8 @@ class MBRScan(interfaces.plugins.PluginInterface):
full_mbr = layer.read(mbr_start_offset, mbr_length, pad = True)
bootcode = full_mbr[:bootcode_length]
all_zeros = None
if bootcode:
all_zeros = bootcode.count(b"\x00") == len(bootcode)
@@ -101,8 +103,8 @@ class MBRScan(interfaces.plugins.PluginInterface):
return renderers.TreeGrid([
("Potential MBR at Physical Offset", format_hints.Hex),
("Disk Signature", str),
("Bootcode md5", str),
("Bootcode (FULL) md5", str),
("Bootcode MD5", str),
("Full MBR MD5", str),
("Partition Entries Info", str),
("Disasm", interfaces.renderers.Disassembly),
("Hexdump", format_hints.HexBytes)