 Mike Auty
|
20dbe41eee
|
Development: Improve scripts for operating over Mac KDK
|
2020-06-10 19:49:45 +01:00 |
|
|
Mike Auty
|
1a00723cb0
|
Core: Drastically reduce the import logging
|
2020-06-10 19:47:48 +01:00 |
|
|
Mike Auty
|
4437c29790
|
Symbols: Ensure all formats support symbol_shift (thanks Andrew!)
|
2020-06-10 19:39:20 +01:00 |
|
|
Mike Auty
|
ede5ba07aa
|
Symbols: Apply symbol_masking option to IntermediateSymbolTables
|
2020-06-10 19:39:20 +01:00 |
|
|
Mike Auty
|
085ccc47e0
|
SymbolTableRequirement: Do a merry dance around ASLR shifts in automagic
|
2020-06-10 19:39:20 +01:00 |
|
|
Mike Auty
|
d6741435ef
|
SymbolTables: Clear out the clone method and tidy up inheritance
|
2020-06-10 19:39:20 +01:00 |
|
|
Mike Auty
|
d11ffa1f23
|
SymbolTable: Remove the no longer necessary mask_symbol_table method
|
2020-06-10 19:39:20 +01:00 |
|
|
Mike Auty
|
573590878a
|
SymbolTable: Rework symbol_shift so it's part of the config
|
2020-06-10 19:39:20 +01:00 |
|
|
Mike Auty
|
ad8fa0e934
|
Automagic: Improve mask/shift documentation
|
2020-06-10 19:39:20 +01:00 |
|
|
Mike Auty
|
a6cd344e22
|
Automagic: Refactor ASLR finding for all symbol_finder using OSes
|
2020-06-10 19:39:20 +01:00 |
|
|
Mike Auty
|
863b9915c9
|
Automagic: Refactor mac aslr_finding
|
2020-06-10 19:39:20 +01:00 |
|
|
Mike Auty
|
37f40ed184
|
Linux: Fix a rebase error
|
2020-06-10 19:39:20 +01:00 |
|
|
Mike Auty
|
204657648a
|
Linux: Narrow in on a particular symbol table
|
2020-06-10 19:39:20 +01:00 |
|
|
Mike Auty
|
054b95c8ed
|
Remove debugging statements
|
2020-06-10 19:39:20 +01:00 |
|
|
Mike Auty
|
d9ac5300fa
|
Move from using deepcopy to a clone method.
|
2020-06-10 19:39:20 +01:00 |
|
|
Mike Auty
|
2748ce32d8
|
Initial attempts at cloning a symbol table
|
2020-06-10 19:39:20 +01:00 |
|
|
Mike Auty
|
fabb4f4924
|
Store and re-store the original get_symbol method masking
|
2020-06-10 19:39:20 +01:00 |
|
|
Mike Auty
|
975fa36610
|
Development: Add the ability to keep downloaded/extracted files
|
2020-06-10 00:53:52 +01:00 |
|
|
Mike Auty
|
c7ea30b059
|
Core: Add in framework version check for plugins
|
2020-06-02 00:08:01 +01:00 |
|
|
Mike Auty
|
c870add8e4
|
Framework: Ensure we don't bother over importing or spamming the log
|
2020-05-31 02:28:53 +01:00 |
|
|
Mike Auty
|
874ec2e410
|
Development: Improve extract_kernel for the Mac KDK
|
2020-05-30 01:53:18 +01:00 |
|
|
superponibleandikelos
|
69be2157fb
|
fix typo
|
2020-05-27 23:16:18 +01:00 |
|
|
superponibleandikelos
|
48e33c2b98
|
create property for HiveGenerator invalid member
|
2020-05-27 23:16:18 +01:00 |
|
|
Mike Auty
|
a0da5fef83
|
Issue #186: Rebase and apply yapf
|
2020-05-27 23:16:18 +01:00 |
|
|
superponibleandikelos
|
36c19735ee
|
issue #186 - hivelist with new hivescan/bigpools
|
2020-05-27 23:16:18 +01:00 |
|
|
superponibleandikelos
|
002758c7f2
|
issue #186 - hivescan and hivelist with bigpools
|
2020-05-27 23:16:18 +01:00 |
|
|
superponibleandikelos
|
a21ab89019
|
issue #186 - add bigpools plugin
|
2020-05-27 23:16:18 +01:00 |
|
|
superponibleandikelos
|
054d144f9b
|
issue #186 - walk forward, backward, scan if needed
|
2020-05-27 23:16:18 +01:00 |
|
|
superponibleandikelos
|
e969f44471
|
issue #186 - _CMHIVE.is_valid()
|
2020-05-27 23:16:18 +01:00 |
|
|
superponibleandikelos
|
a4301afe22
|
issue #186 - skip type check on CMHIVE
|
2020-05-27 23:16:18 +01:00 |
|
|
superponibleandikelos
|
0de87e5bce
|
fix off by one and loop counters
|
2020-05-27 23:14:26 +01:00 |
|
|
Mike Auty
|
84e9b92d71
|
Development: Allow for debian packages in stock converter.
|
2020-05-25 23:44:43 +01:00 |
|
|
Mike Auty
|
27660d62ee
|
Development: Add in fedora kernel locations.
|
2020-05-25 02:04:43 +01:00 |
|
|
Mike Auty
|
48d3fb8f98
|
Development: Add in simple script to create centos ISF files
|
2020-05-24 21:56:28 +01:00 |
|
|
Mike Auty
|
94426ad313
|
Automagic: Ensure all layers can be reconstructed
|
2020-05-10 19:30:58 +01:00 |
|
|
Mike Auty
|
09dd048834
|
Documentation: Minor fixes for recent documentation
|
2020-05-10 17:31:26 +01:00 |
|
|
Mike Auty
|
6e91349c73
|
Documentation: Add in information about creating layers.
|
2020-05-09 02:07:08 +01:00 |
|
|
Mike Auty
|
0c43beb42d
|
Core: Apply yapf across all files again.
|
2020-05-05 22:14:33 +01:00 |
|
|
Mike Auty
|
4587de356d
|
Fix issue with cleaning the symbol cache
|
2020-05-02 01:16:06 +01:00 |
|
|
Mike Auty
|
edecd64703
|
Yarascan: Fixes #209 by returning matched strings
|
2020-04-14 23:45:08 +01:00 |
|
|
Mike Auty
|
15d26ce415
|
Linux: Remove parameters that are unnecessary/removed.
|
2020-04-10 22:38:21 +01:00 |
|
|
Mike Auty
|
01ef78db11
|
Fix a typo in the last commit
|
2020-04-10 22:19:24 +01:00 |
|
|
Mike Auty
|
8935e4dd19
|
Fix up linuxutils to use symbol_tables rather than hard coded values
|
2020-04-10 22:12:03 +01:00 |
|
|
Andrew Caseandikelos
|
719cd0d476
|
Move module gathering into generator
|
2020-04-08 18:17:34 +01:00 |
|
|
Andrew Caseandikelos
|
b42dfd614a
|
Add API for mapping kernel addresses to kernel symbols or a specific kext
|
2020-04-08 18:17:34 +01:00 |
|
|
Michael Ligh
|
d5bdf9633d
|
refs #204 fix modscan, _LDR_DATA_TABLE_ENTRY is not an executive object and doesn't have an object_type
|
2020-04-07 09:22:52 -05:00 |
|
|
Mike Auty
|
2cd6a9478f
|
Intermed: Resolve unintended change of length to size and issue with anonymous checking
|
2020-04-03 00:00:57 +01:00 |
|
|
Mike Auty
|
83ef338a6e
|
Fix the typos as spotted by eagle-eyed Ilya, thanks!
|
2020-03-26 13:32:30 +00:00 |
|
|
Mike Auty
|
b08a2e47d7
|
Schemas: Implement changes in comments from dwarf2json#11
|
2020-03-26 13:32:30 +00:00 |
|
|
Mike Auty
|
919c4cb0dd
|
Schema: Add in more specifics for linux/mac specification
|
2020-03-26 13:32:30 +00:00 |
|