Commit Graph
47 Commits
Author SHA1 Message Date
Mike Auty 9e042ad1ce Ensure we use configured paths at import.
Previously if submodules were imported after the plugin/symbol __path__s had
been set, it would only use the __path__s from the constants module.

We now use the parent module's __path__s to ensure we get the right
sub__path__s.

This seems better/more flexible than changing the original constants
(since they'd no longer be constant) and allows people more chance to
override things.  It brings with it potential confusion as a local
plugin directory will need __init__ files with this magic to allow the
core modules to run (since they come first in the path list).
2019-11-04 19:42:24 +00:00
Mike Auty e0b9d72c84 Update the license URL and LICENSE.txt 2019-09-25 21:44:05 +01:00
Mike Auty e922cef316 Improve docstrings for all plugins, and reformat all docstrings. 2019-09-07 22:59:54 +01:00
Mike Auty 9cde94bceb Change the license blurb on all files. 2019-08-27 23:11:00 +01:00
Mike Auty fdc6efc4ad Add in the LICENSE and the README. 2018-12-19 23:55:03 +00:00
Mike Auty 4bf995059b Improve documentation for __init__ files. 2018-12-16 14:06:47 +00:00
Mike Auty 35ad2325a8 Move all core plugins over to framework/plugins.
This should have no impact functionality-wise.
The statistics plugin was left out a) as an example and b) because it
was committed by mistake in the first place and was never meant to be a
real plugin.
2018-12-16 13:40:15 +00:00
Mike Auty 9824538bd9 Numerous pycharm warnings resolved
This includes:

* Better ways of checking empty lists
* Not shadowing builtin functions like filter
* Preventing invalid slash warnings by marking strings as regexps
* Removing unnecessary brackets
* Lowercase variable names
* Adding/updating parameters in docstrings
* Removing unused code (lines not chunks)
* Change in not a member tests
* Changing some methods to static
* Shorting range membership checks
* Missing parameters
* Make some exception handlers more specific
* Don't define a lambda to a variable
* A few more instance checks to help type checkers
2018-12-16 13:21:06 +00:00
Mike Auty 29d41470a4 Mass reformat of typing imports
Relented on the strict import of direct objects/classes for the typing
module only.  Typing module components can be directly imported because
it makes the code really painful to read and write otherwise.

This is still in-line with the python style guide adopted from Google at
http://google.github.io/styleguide/pyguide.html section 2.2.
2018-12-16 13:04:22 +00:00
Mike Auty dfe2f86fe2 Lots and lots of typing additions found by an initial monkeytype run. 2018-12-13 23:46:37 +00:00
Mike Auty 1a5c9d3af8 Roll symbols.utility into symbols file until we get enough functions we need to split them out again. 2018-12-12 23:38:01 +00:00
Mike Auty f57bfa5738 Prepare core plugins for moving into the framework namespace. 2018-12-09 13:32:32 +00:00
Mike Auty 323ea0f348 Add in the timeliner interface to the linux bash plugin. 2018-12-08 18:26:45 +00:00
Mike Auty b5d532555c Convert the adhoc scanner into a layer scanner using sections. 2018-12-08 18:21:39 +00:00
Mike Auty 649a39a13d Change time_as_integer from a property to get_time_as_integer method. 2018-12-08 18:00:44 +00:00
Mike Auty 918653e398 Convert aslr_mask_symbol_table to more parameterized form. 2018-12-08 17:55:13 +00:00
Mike Auty 378820bf23 More 'inheritance' fixes. 2018-12-08 17:45:28 +00:00
Mike Auty 780c5d2646 Avoid 'inheritance' issues with requirements. 2018-12-08 17:43:28 +00:00
Mike Auty f1780bc547 Use constants.BANG (plus pycharm autoreformat). 2018-12-08 17:34:48 +00:00
Andrew Caseandikelos dc91a16a2f update check syscall 2018-12-08 17:34:48 +00:00
Andrew Caseandikelos ade6aa1e74 update check_afinfo for write member 2018-12-08 17:34:48 +00:00
Andrew Caseandikelos 9d9b68eaa3 have check_afinfo not inherit from lsmod 2018-12-08 17:34:48 +00:00
Andrew Caseandikelos 8705fb3047 update time_object to get_time_object 2018-12-08 17:34:48 +00:00
Andrew Caseandikelos 0e7b6b6702 Updated hist_entry type and references, add bash plugin 2018-12-08 17:34:48 +00:00
Andrew Caseandikelos 36131d01bb Add check_afinfo plugin 2018-12-08 17:34:48 +00:00
Andrew Caseandikelos 72798d3187 Add linux system call checking plugin 2018-12-08 17:34:48 +00:00
Mike Auty db7320e426 Bulk lint and a couple of typos fixed. 2018-11-08 00:19:17 +00:00
Andrew Caseandikelos 542a062779 Update how the modules list address is found 2018-11-08 00:19:17 +00:00
Andrew Caseandikelos 7aa729f4b7 add typing import to pslist 2018-11-08 00:19:17 +00:00
Andrew Caseandikelos af496d4741 update lsof to print name properly 2018-11-08 00:19:17 +00:00
Andrew Caseandikelos 98e472e211 major updates and new plugins 2018-11-08 00:19:17 +00:00
Andrew Caseandikelos 63e9cd4604 initial set of Linux plugins and extensions for ikelos review 2018-11-08 00:19:17 +00:00
Mike Auty 244af47a2a Swap inheritted config options for explicit config options. 2018-08-28 22:32:52 +01:00
Mike Auty d68d62e47d Fix methodclass conversion for linux pslist. 2018-06-20 22:19:24 +01:00
Mike Auty ac8401991c Convert all remaining plugins to use the new classmethod pslist. 2018-06-16 13:38:48 +01:00
Mike Auty f8b592c236 Make the config path for plugins dynamic. 2018-05-15 00:11:31 +01:00
Mike Auty 38eff91371 Remove vestigal update_configuration methods. 2018-05-06 01:24:40 +01:00
Mike Auty 60e1aebaf8 Improve the plugin help descriptions. 2017-11-25 16:19:47 +00:00
Mike Auty a60fcba32f Make sure we don't assume that the primary layer's config lives under our own. 2017-11-13 01:18:54 +00:00
Mike Auty 6c6d0473a1 Fixed table names will no longer work since tables are prefix-named. 2017-09-03 23:17:40 +01:00
Mike Auty 710043f508 Fix up the ASLR finding to compensate for older task_struct structures. 2017-09-03 23:16:22 +01:00
Nick L. Petroni, Jr 5bb2aef9fc Created linux.proc.Maps plugin.
Added object extensions for the key structures. Also added
constants.linux, which will contain Linux-specific constants
that can't be extracted via dwarf.
2017-08-16 16:14:33 -04:00
Mike Auty c19ad1cb22 Placeholder change to ensure even if we don't change it to a from statement, it isn't bizarre. 2017-08-10 10:03:39 +01:00
Mike Auty 8be6869a84 Tidy up imports and adhere to the coding style of never directly importing objects. 2017-08-09 22:22:43 +01:00
Nick L. Petroni, Jr 8fcbf988b5 initial linux.pslist.PsList plugin 2017-05-14 22:24:05 -04:00
Mike Auty a97bd19988 Reformat and optimize code, including trailing whitespace and end of file newline. 2014-06-10 15:40:50 +01:00
Mike Auty 5f282d673e Add in constants and a tree skeleton for eventual plugins. 2014-04-08 00:14:29 +01:00