Commit Graph
6409 Commits
Author SHA1 Message Date
4fbd54361a Update volatility3/framework/plugins/linux/sockscan.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
2025-12-31 12:20:20 +00:00
3872133f5d Update volatility3/framework/plugins/linux/sockscan.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
2025-12-31 12:20:09 +00:00
7ba46943bb Update volatility3/framework/plugins/linux/sockscan.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
2025-12-31 12:19:59 +00:00
be11441ef0 Update volatility3/framework/plugins/linux/sockscan.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
2025-12-31 12:19:50 +00:00
c7510f7e00 Update volatility3/framework/plugins/linux/sockscan.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
2025-12-31 12:19:37 +00:00
5205d2cee0 Update volatility3/framework/plugins/linux/sockscan.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
2025-12-31 12:19:08 +00:00
a2e033dfc8 Update volatility3/framework/plugins/linux/sockscan.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
2025-12-31 12:18:48 +00:00
EveandGitHub aabca91e4b Merge branch 'volatilityfoundation:develop' into linux_sockscan 2025-12-31 11:19:29 +00:00
ikelosandGitHub a7f96b4b25 Merge pull request #1814 from Abyss-W4tcher/vma_enumeration_smearing_protection
Linux: enhance VMA enumeration smearing protection
2025-12-31 01:54:38 +00:00
ikelosandGitHub fa6b9a8db3 Merge pull request #1773 from Abyss-W4tcher/issue_1761_module_sect_attr_fix
Issue #1761: handle new bin_attribute format for module sections
2025-12-29 10:01:33 +00:00
ikelosandGitHub 36b70a09bc Merge branch 'develop' into vma_enumeration_smearing_protection 2025-12-29 09:54:34 +00:00
ikelosandGitHub a1cab3438e Merge pull request #1849 from volatilityfoundation/issues/issue1848
Windows: Fix pe_symbols type checking
2025-12-28 13:48:56 +00:00
ikelosandGitHub 3a953262e6 Merge pull request #1924 from volatilityfoundation/issues/issue1923
Document the reason for skipping entirely duplicated page tables
2025-12-22 09:35:40 +00:00
Mike Auty 50f64f66d5 Document the reason for skipping entirely duplicated page tables 2025-12-16 10:03:37 +00:00
Abyss Watcher 0138aec419 manually iterate over the pointers to detect OOB locally 2025-12-03 17:43:39 +01:00
Abyss Watcher d7103a2214 ensure that _parse_sections returns a constant number of None on failure 2025-12-03 17:41:58 +01:00
Abyss Watcher 89c5fc325a move iterator_guard_value down the parameters list 2025-12-03 17:34:25 +01:00
ikelosandGitHub 674996ffcd Merge pull request #1921 from Abyss-W4tcher/issue_1920_slow_addrspace_scan
Improve Intel layer's address space scanning
2025-12-03 15:36:30 +00:00
Abyss Watcher 93d6282817 version bump: 2.27.0 -> 2.27.1 2025-12-03 11:25:56 +01:00
Abyss Watcher f4e2f1391e refactor use of "invalid_bits" inside _mapping into a dedicated variable 2025-12-03 11:22:27 +01:00
Abyss Watcher ae0f0ca440 skip invalid blocks more efficiently 2025-12-01 15:56:56 +01:00
Abyss Watcher e18b37abf5 remove PTEs "large_page" attribute and re-order large_page check 2025-12-01 15:54:58 +01:00
ikelosandGitHub 493950c634 Merge pull request #1902 from Abyss-W4tcher/issue_1889_low_stub_scan_fix
[issue #1889] Fix missing address increment in low stub scanner
2025-11-30 22:14:12 +00:00
Abyss Watcher 8b132eafd1 extend _fix_sym_table's docstring 2025-11-24 17:57:37 +01:00
Abyss Watcher 32f37ee632 remove hasattr check on bin_attribute 2025-11-24 17:34:31 +01:00
ikelosandGitHub a17281a214 Merge pull request #1868 from Abyss-W4tcher/fix_broken_mount_enum_after_6_13
Linux: Fix broken mount enumeration on 6.13+
2025-11-24 09:05:18 +00:00
Abyss Watcher e9ce095b29 black formatting 2025-11-20 15:57:56 +01:00
Abyss Watcher b8e12bec29 move ModuleExtract class in modules.py 2025-11-20 15:18:53 +01:00
Abyss Watcher c89c7c3a06 rollback to 635237b to prevent circular import 2025-11-20 13:20:18 +01:00
Abyss Watcher 5d50ad2b2e slight readability adjustment 2025-11-20 13:20:18 +01:00
Abyss Watcher c8d90cffe4 adjust to the new NULL-terminated processing 2025-11-20 13:20:18 +01:00
Abyss Watcher a5cc616d53 leverage the existing Array facility 2025-11-20 13:20:18 +01:00
Abyss Watcher 6e67674c20 add section address sanity check 2025-11-20 13:20:18 +01:00
Abyss Watcher 44969090e7 lru_cache get_modules_memory_boundaries() 2025-11-20 13:20:06 +01:00
Abyss Watcher b20da9c7f5 correct type hinting 2025-11-20 13:19:34 +01:00
Abyss Watcher 15a8af5c93 use dynamically_sized_array_of_pointers in _get_sect_count 2025-11-20 13:19:34 +01:00
Abyss Watcher 1c11791b7f add dynamically_sized_array_of_pointers() helper 2025-11-20 13:19:34 +01:00
Abyss Watcher 2cda8e3cb3 make binary attributes iteration NULL terminated 2025-11-20 13:19:34 +01:00
Abyss Watcher a5d1641db3 use ATTRIBUTE_NAME_MAX_SIZE constant 2025-11-20 13:19:34 +01:00
Abyss Watcher 9104882354 add ATTRIBUTE_NAME_MAX_SIZE constant 2025-11-20 13:19:34 +01:00
Abyss Watcher 522c2d435c rollback to already patched version 2025-11-20 13:19:34 +01:00
Abyss Watcher c223a12be9 handle None in _parse_sections caller 2025-11-20 13:19:34 +01:00
Abyss Watcher d8518b3878 1774: consolidate module helpers 2025-11-20 13:19:34 +01:00
Abyss Watcher 70dfa09b26 add bin_attribute address virtual member 2025-11-20 13:19:34 +01:00
Abyss Watcher 9478d36d7c get_sections() sanity check 2025-11-20 13:19:34 +01:00
Abyss Watcher 825cb321a5 sections manual enumeration adjustment 2025-11-20 13:19:34 +01:00
Abyss Watcher 75e0d041a2 sections manual enumeration adjustment 2025-11-20 13:19:34 +01:00
Abyss Watcher 4f296f7f2d black formatting 2025-11-20 13:19:34 +01:00
Abyss Watcher ac4326f478 determine sect_attrs.attrs subtype dynamically 2025-11-20 13:19:34 +01:00
Abyss Watcher 735f5933ba make module_sect_attr and bin_attribute optional 2025-11-20 13:19:34 +01:00