Mike Auty
3127c7a220
Intermed: Make extensions a reusable constant
2020-08-21 21:24:59 +01:00
Mike Auty
9b57d7a58c
Plugins: Version Mac/LinuxUtilities classes
2020-08-18 09:07:32 +01:00
Mike Auty
75719c8393
Pdbconv: Improve typing without recording unnamed types
2020-08-17 23:09:13 +01:00
Mike Auty
bd591bd5d8
Pdbconv: Revert typing correction that causes breakages
2020-08-17 17:10:47 +01:00
gcmoreira and ikelos
748dceefb7
Fix #291 . It supports any level of depth of nested anonymous types.
2020-08-17 17:01:28 +01:00
Mike Auty
8e420cbe62
Core: Multiple typing fixes across the tree
2020-08-16 22:22:24 +01:00
Mike Auty
523156670d
Documentation: Clarify the mapping output parameters
2020-08-16 00:50:17 +01:00
Mike Auty
c1f6c224d7
Symbols: Resolve symbols returned from symbol_space.get_symbol
...
This ensures that ReferenceTemplates are not returned from a call to
symbol_space.get_symbol. This is in keeping with the get_type method.
The symbol_space containing all symbol tables has visibility of all
tables and can cross-resolve amongst them. Asking a specific table
for a type may result in a ReferenceTemplate. This feels like a
better solution than having individual tables ask their parent space
to fill in the details of sibling tables.
Fixes #279 .
2020-08-12 20:39:33 +01:00
Mike Auty
ff32383f82
Yapf: Minor reformats for recent plugins
2020-08-03 16:33:10 +01:00
Matt Tressler and ikelos
0452f69f82
created keyboard_notifiers
2020-08-03 16:30:09 +01:00
Matt Tressler and ikelos
8beac1d67d
fixed bug causing no output when tty_check is run
2020-07-30 23:24:23 +01:00
Matt Tressler and ikelos
71dc85ade5
removed debugging print statements
2020-07-30 23:24:23 +01:00
Matt Tressler and ikelos
34ff856a79
Updated imports to reflect new location of utility class; plugins are no longer outputing anything so commiting for Andrew to take a look at
2020-07-30 23:24:23 +01:00
Matt Tressler and ikelos
44911bf54a
Fixed tty_check not finding the ttyhook module
2020-07-30 23:24:23 +01:00
Mike Auty
13e36ec58a
Core: Rerun yapf across the codebase.
2020-07-28 16:57:48 +01:00
Mike Auty
cbd40db053
Linux: Restore accidentally dropped kobject definition
2020-07-28 16:53:24 +01:00
xabiugarte and Mike Auty
fedd9c5519
Fixes on coding style
2020-07-28 16:46:43 +01:00
xabiugarte and Mike Auty
01dea6f3a8
Add elf parsing and symbol retrieval for linux kernel modules
2020-07-28 16:46:40 +01:00
Mike Auty
61563350b3
Linux/Mac: Refactor *nix Utilities classes
2020-07-28 11:15:16 +01:00
Mike Auty
31600254b9
Codebase: Apply yapf across the codebase.
2020-07-23 01:31:41 +01:00
Matt Tressler and ikelos
4092bdb5de
changed from windows to linux line endings
2020-07-21 23:00:52 +01:00
Matt Tressler and ikelos
82a6b23669
Completed linux_check_modules. Added kobject extension as needed for check_module plugin
2020-07-21 23:00:52 +01:00
Andrew Case and ikelos
ef97c672e3
Check for invalid vnode pointers before processing path
2020-07-18 17:06:50 +01:00
Mike Auty
a173f12fce
Plugins: Normalize InvalidAddress exception handling
2020-07-18 16:38:49 +01:00
Dave Lassalle and ikelos
42a97dd10c
Registry: handle ints, multi strings, and binary data with StrLike
2020-07-16 19:44:18 +01:00
Mike Auty
9a4669881d
Registry: Move StringLike from conversion to StrLike format_hint.
2020-07-16 19:44:18 +01:00
Mike Auty
eb90d4e830
Registry: Retain data recovered from registry strings
2020-07-16 19:44:18 +01:00
Mike Auty
5571f19b09
Registry: Move StringLike from conversion to StrLike format_hint.
2020-07-16 19:44:18 +01:00
Mike Auty
ee41e7968f
Registry: Retain data recovered from registry strings
2020-07-16 19:44:18 +01:00
Mike Auty
c21bc62589
Pdbconv: Fix issue when remote file does not exist
2020-07-15 21:42:46 +01:00
Michael Ligh and ikelos
87ff6dd87c
refs #200 raise ValueError if an object doesn't have a name
2020-07-01 20:51:22 +01:00
Mike Auty
ac1d99677d
ISF: Support deprecating versions
2020-06-27 18:33:30 +01:00
Hanno Heinrichs and ikelos
deb2b78312
Clear symbol cache after ASLR computation on Linux.
2020-06-23 16:45:22 +01:00
Mike Auty
6564f0a3a4
Layers: Add in initial qemu layer code
2020-06-10 20:22:35 +01:00
Mike Auty
4437c29790
Symbols: Ensure all formats support symbol_shift (thanks Andrew!)
2020-06-10 19:39:20 +01:00
Mike Auty
ede5ba07aa
Symbols: Apply symbol_masking option to IntermediateSymbolTables
2020-06-10 19:39:20 +01:00
Mike Auty
085ccc47e0
SymbolTableRequirement: Do a merry dance around ASLR shifts in automagic
2020-06-10 19:39:20 +01:00
Mike Auty
d6741435ef
SymbolTables: Clear out the clone method and tidy up inheritance
2020-06-10 19:39:20 +01:00
Mike Auty
d11ffa1f23
SymbolTable: Remove the no longer necessary mask_symbol_table method
2020-06-10 19:39:20 +01:00
Mike Auty
573590878a
SymbolTable: Rework symbol_shift so it's part of the config
2020-06-10 19:39:20 +01:00
Mike Auty
ad8fa0e934
Automagic: Improve mask/shift documentation
2020-06-10 19:39:20 +01:00
Mike Auty
a6cd344e22
Automagic: Refactor ASLR finding for all symbol_finder using OSes
2020-06-10 19:39:20 +01:00
Mike Auty
054b95c8ed
Remove debugging statements
2020-06-10 19:39:20 +01:00
Mike Auty
d9ac5300fa
Move from using deepcopy to a clone method.
2020-06-10 19:39:20 +01:00
Mike Auty
2748ce32d8
Initial attempts at cloning a symbol table
2020-06-10 19:39:20 +01:00
Mike Auty
fabb4f4924
Store and re-store the original get_symbol method masking
2020-06-10 19:39:20 +01:00
Mike Auty
a0da5fef83
Issue #186 : Rebase and apply yapf
2020-05-27 23:16:18 +01:00
superponible and ikelos
a21ab89019
issue #186 - add bigpools plugin
2020-05-27 23:16:18 +01:00
superponible and ikelos
e969f44471
issue #186 - _CMHIVE.is_valid()
2020-05-27 23:16:18 +01:00
Mike Auty
0c43beb42d
Core: Apply yapf across all files again.
2020-05-05 22:14:33 +01:00
Mike Auty