WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-22 14:32:21 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,962 Commits 80 Branches 17 Tags
337d2ee01657fa2886da0d69d47b2daadc08df4e
Commit Graph
1502 Commits
Author SHA1 Message Date
xabiugarteandikelos bdee51fef0 Check progress_callback is not None before call 
Followed the same approach as in
    volatility/framework/symbols/windows/pdbconv.py
 2019-10-23 09:56:55 +01:00
Mike Auty ce2b83fc34 Add in support for sizing LF_ARGLISTs. Fixes issue #99. 2019-10-23 00:09:45 +01:00
Mike Auty 27a291cf61 Remove the erronious print statement, which should be a vollog message if needed. 2019-10-18 08:39:56 -04:00
Mike Auty 0be9061989 Tidy up commit e0097ac. 2019-10-18 08:38:17 -04:00
atcuno 545376d725 Mac - update trustedbsd 2019-10-17 15:30:13 -04:00
atcuno 3df5e9957e Windows - add missing add_process_layer exception handling in a few plugins 2019-10-17 11:47:19 -04:00
atcuno e0097ac9c1 Windows - protect handles from smear 2019-10-17 11:03:48 -04:00
atcuno 2cad54ea6b Windows - prevent LIST_ENTRY enumeration code from returning objects on invalid/not mapped pages 2019-10-17 10:27:14 -04:00
atcuno 2e329d1106 Windows - add exception handling around is_valid in callbacks 2019-10-17 10:22:06 -04:00
Mike Auty 97e41e21e4 Volatility 3 1.0.0-beta.1 release 2019-10-13 11:28:09 +01:00
Mike Auty 48f2c78a7d Update versioning to support appropriate version checks. 2019-10-13 11:12:28 +01:00
Mike Auty 2229c50de8 Remove executable bit from data files. 2019-10-13 10:09:10 +01:00
Mike Auty 9b0a910d7e Update typing and documentation on renderers. 2019-10-07 10:35:17 +01:00
Mike Auty 71e082f25f Ensure the layers are loaded on layer stacker run, not just when a layer is stacked. 2019-10-07 01:52:58 +01:00
Mike Auty d3f1a396da Handle JSON errors when caching banners. 2019-10-04 22:50:25 +01:00
Mike Auty 3784c9aff6 Fix up missing/inaccurate plugin description strings. 2019-10-03 01:05:57 +01:00
Mike Auty 3b656e337a Update windows extensions to ensure they're documented. 2019-10-02 20:25:54 +01:00
Mike Auty 10a379b0ee Make 'import as' consistent and ensure proper plugin dependencies. 2019-10-02 01:25:03 +01:00
Mike Auty 9a17beb77f Ensure consistency of importing interfaces. 2019-10-02 01:18:46 +01:00
Mike Auty 8e10f4e3d1 Clarify handles error message. 2019-10-02 00:06:25 +01:00
Mike Auty 9ac622afa0 Fix up import style to be consistent. 2019-10-01 23:46:02 +01:00
Mike Auty ba14e10d00 pdbconv: Ensure voids do not have a size 
This partially reverts e17427b9a0
which was an attempt to match other generators, but was inaccurate.
 2019-09-29 15:36:26 +01:00
Andrew Caseandikelos a4a918ea58 Suggested changes from ikelos 2019-09-27 20:50:21 +01:00
Andrew Caseandikelos bf29e23e1c add updated mac ifconfig support 2019-09-27 20:50:21 +01:00
Mike Auty c00b820f74 Fix up recent Mac PagedInvalidAddress additions. 2019-09-27 11:21:49 +01:00
Mike Auty 81be3c0d66 Make InvalidAddressException a LayerException as it should be. 2019-09-27 11:19:53 +01:00
Mike Auty 153b3b7d39 Make sure we catch the most general exception for what we mean. 2019-09-27 11:19:53 +01:00
Andrew Case 2a98227306 Mac - have pstree inherit from tasks 2019-09-26 23:11:26 -05:00
Andrew Case b1d07396a0 Mac - have psaux inherit from tasks 2019-09-26 23:08:33 -05:00
Andrew Case 49c4ae2aa4 Mac - have bash inherit from tasks 2019-09-26 23:05:49 -05:00
Andrew Case a6e7c7a919 Mac - have malfind inherit from tasks 2019-09-26 23:01:37 -05:00
Andrew Case 7339c12eaa Mac - have proc maps inherit from tasks 2019-09-26 22:52:45 -05:00
Andrew Case eeb04655e6 Mac - smear protection in network address enumeration 2019-09-26 22:08:47 -05:00
Andrew Case 3af593c16a Mac - switch netstat to inherit from tasks 2019-09-26 22:07:41 -05:00
Andrew Case 2d7bc99d6a Mac - make pslist smear resistant 2019-09-26 21:57:48 -05:00
Andrew Case a85ce3ecf5 Merge branch 'master' of https://github.com/volatilityfoundation/volatility3 2019-09-26 21:56:55 -05:00
Andrew Case b4ad15c226 Mac - update lsof to inherit from tasks and be more smear resistant 2019-09-26 21:56:38 -05:00
Mike Auty dfcbd78a8a Remove object validate method. 
With agreement from @attrc and @imhlv2, I'm removing the useless
validate method from the object.  It defaulted to returning inaccurate
information (validity undetermined, but validate returned True as if
validation had happened) and is better handled by individual classes
implementing is_valid (which seems the preferred nomenclature) and
throwing exceptions if it's called on a class that doesn't have it.
 2019-09-27 01:49:42 +01:00
Mike Auty 8b3453dd29 Ensure we use the cache rathe rather than just saying we will. 2019-09-26 21:18:23 +01:00
Mike Auty 066a4e64f2 Minor fix for construct_layers. 2019-09-26 21:16:46 +01:00
Mike Auty ae010a2390 Improve log levels and distribution of messages. 2019-09-26 21:16:12 +01:00
Mike Auty 211ad0d524 Remove useless calls to validate. 2019-09-26 15:58:22 +01:00
Mike Auty 679a0eabc2 Tidy Exceptions and ensure LayerExceptions are passed a layer name. 2019-09-26 15:44:36 +01:00
Mike Auty 2acdc3e060 Fix up PADDING_INFO for very specific versions of windows. 2019-09-26 13:35:23 +01:00
Mike Auty e0b9d72c84 Update the license URL and LICENSE.txt 2019-09-25 21:44:05 +01:00
Mike Auty ee008cb76b Make sure we accurately check the PADDING_INFO presence. 2019-09-25 21:32:53 +01:00
Mike Auty 2252876375 Correct the PADDING_INFO handling. 2019-09-25 21:32:53 +01:00
Mike Auty 5a8946da83 Shift the InfoMask stuff into the top-down approach. 2019-09-25 21:32:53 +01:00
Mike Auty b0559656fc Update the header offsets for the InfoMask. 2019-09-25 21:32:53 +01:00
Mike Auty 6a3a6cdb3c Add this as more of an example of how to cache. 
In a volatility object, we can use our own internal _vol variable to
expose values externally, or just for us to cache.  It will override
preexisting values though, so when used as a cache, best to make its key
long and unique as possible.
 2019-09-25 21:32:53 +01:00