|
5205d2cee0
|
Update volatility3/framework/plugins/linux/sockscan.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-12-31 12:19:08 +00:00 |
|
|
|
a2e033dfc8
|
Update volatility3/framework/plugins/linux/sockscan.py
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
|
2025-12-31 12:18:48 +00:00 |
|
|
EveandGitHub
|
aabca91e4b
|
Merge branch 'volatilityfoundation:develop' into linux_sockscan
|
2025-12-31 11:19:29 +00:00 |
|
|
ikelosandGitHub
|
a7f96b4b25
|
Merge pull request #1814 from Abyss-W4tcher/vma_enumeration_smearing_protection
Linux: enhance VMA enumeration smearing protection
|
2025-12-31 01:54:38 +00:00 |
|
|
ikelosandGitHub
|
fa6b9a8db3
|
Merge pull request #1773 from Abyss-W4tcher/issue_1761_module_sect_attr_fix
Issue #1761: handle new bin_attribute format for module sections
|
2025-12-29 10:01:33 +00:00 |
|
|
ikelosandGitHub
|
36b70a09bc
|
Merge branch 'develop' into vma_enumeration_smearing_protection
|
2025-12-29 09:54:34 +00:00 |
|
|
ikelosandGitHub
|
a1cab3438e
|
Merge pull request #1849 from volatilityfoundation/issues/issue1848
Windows: Fix pe_symbols type checking
|
2025-12-28 13:48:56 +00:00 |
|
|
ikelosandGitHub
|
3a953262e6
|
Merge pull request #1924 from volatilityfoundation/issues/issue1923
Document the reason for skipping entirely duplicated page tables
|
2025-12-22 09:35:40 +00:00 |
|
|
Mike Auty
|
50f64f66d5
|
Document the reason for skipping entirely duplicated page tables
|
2025-12-16 10:03:37 +00:00 |
|
|
Abyss Watcher
|
0138aec419
|
manually iterate over the pointers to detect OOB locally
|
2025-12-03 17:43:39 +01:00 |
|
|
Abyss Watcher
|
d7103a2214
|
ensure that _parse_sections returns a constant number of None on failure
|
2025-12-03 17:41:58 +01:00 |
|
|
Abyss Watcher
|
89c5fc325a
|
move iterator_guard_value down the parameters list
|
2025-12-03 17:34:25 +01:00 |
|
|
ikelosandGitHub
|
674996ffcd
|
Merge pull request #1921 from Abyss-W4tcher/issue_1920_slow_addrspace_scan
Improve Intel layer's address space scanning
|
2025-12-03 15:36:30 +00:00 |
|
|
Abyss Watcher
|
93d6282817
|
version bump: 2.27.0 -> 2.27.1
|
2025-12-03 11:25:56 +01:00 |
|
|
Abyss Watcher
|
f4e2f1391e
|
refactor use of "invalid_bits" inside _mapping into a dedicated variable
|
2025-12-03 11:22:27 +01:00 |
|
|
Abyss Watcher
|
ae0f0ca440
|
skip invalid blocks more efficiently
|
2025-12-01 15:56:56 +01:00 |
|
|
Abyss Watcher
|
e18b37abf5
|
remove PTEs "large_page" attribute and re-order large_page check
|
2025-12-01 15:54:58 +01:00 |
|
|
ikelosandGitHub
|
493950c634
|
Merge pull request #1902 from Abyss-W4tcher/issue_1889_low_stub_scan_fix
[issue #1889] Fix missing address increment in low stub scanner
|
2025-11-30 22:14:12 +00:00 |
|
|
Abyss Watcher
|
8b132eafd1
|
extend _fix_sym_table's docstring
|
2025-11-24 17:57:37 +01:00 |
|
|
Abyss Watcher
|
32f37ee632
|
remove hasattr check on bin_attribute
|
2025-11-24 17:34:31 +01:00 |
|
|
ikelosandGitHub
|
a17281a214
|
Merge pull request #1868 from Abyss-W4tcher/fix_broken_mount_enum_after_6_13
Linux: Fix broken mount enumeration on 6.13+
|
2025-11-24 09:05:18 +00:00 |
|
|
Abyss Watcher
|
e9ce095b29
|
black formatting
|
2025-11-20 15:57:56 +01:00 |
|
|
Abyss Watcher
|
b8e12bec29
|
move ModuleExtract class in modules.py
|
2025-11-20 15:18:53 +01:00 |
|
|
Abyss Watcher
|
c89c7c3a06
|
rollback to 635237b to prevent circular import
|
2025-11-20 13:20:18 +01:00 |
|
|
Abyss Watcher
|
5d50ad2b2e
|
slight readability adjustment
|
2025-11-20 13:20:18 +01:00 |
|
|
Abyss Watcher
|
c8d90cffe4
|
adjust to the new NULL-terminated processing
|
2025-11-20 13:20:18 +01:00 |
|
|
Abyss Watcher
|
a5cc616d53
|
leverage the existing Array facility
|
2025-11-20 13:20:18 +01:00 |
|
|
Abyss Watcher
|
6e67674c20
|
add section address sanity check
|
2025-11-20 13:20:18 +01:00 |
|
|
Abyss Watcher
|
44969090e7
|
lru_cache get_modules_memory_boundaries()
|
2025-11-20 13:20:06 +01:00 |
|
|
Abyss Watcher
|
b20da9c7f5
|
correct type hinting
|
2025-11-20 13:19:34 +01:00 |
|
|
Abyss Watcher
|
15a8af5c93
|
use dynamically_sized_array_of_pointers in _get_sect_count
|
2025-11-20 13:19:34 +01:00 |
|
|
Abyss Watcher
|
1c11791b7f
|
add dynamically_sized_array_of_pointers() helper
|
2025-11-20 13:19:34 +01:00 |
|
|
Abyss Watcher
|
2cda8e3cb3
|
make binary attributes iteration NULL terminated
|
2025-11-20 13:19:34 +01:00 |
|
|
Abyss Watcher
|
a5d1641db3
|
use ATTRIBUTE_NAME_MAX_SIZE constant
|
2025-11-20 13:19:34 +01:00 |
|
|
Abyss Watcher
|
9104882354
|
add ATTRIBUTE_NAME_MAX_SIZE constant
|
2025-11-20 13:19:34 +01:00 |
|
|
Abyss Watcher
|
522c2d435c
|
rollback to already patched version
|
2025-11-20 13:19:34 +01:00 |
|
|
Abyss Watcher
|
c223a12be9
|
handle None in _parse_sections caller
|
2025-11-20 13:19:34 +01:00 |
|
|
Abyss Watcher
|
d8518b3878
|
1774: consolidate module helpers
|
2025-11-20 13:19:34 +01:00 |
|
|
Abyss Watcher
|
70dfa09b26
|
add bin_attribute address virtual member
|
2025-11-20 13:19:34 +01:00 |
|
|
Abyss Watcher
|
9478d36d7c
|
get_sections() sanity check
|
2025-11-20 13:19:34 +01:00 |
|
|
Abyss Watcher
|
825cb321a5
|
sections manual enumeration adjustment
|
2025-11-20 13:19:34 +01:00 |
|
|
Abyss Watcher
|
75e0d041a2
|
sections manual enumeration adjustment
|
2025-11-20 13:19:34 +01:00 |
|
|
Abyss Watcher
|
4f296f7f2d
|
black formatting
|
2025-11-20 13:19:34 +01:00 |
|
|
Abyss Watcher
|
ac4326f478
|
determine sect_attrs.attrs subtype dynamically
|
2025-11-20 13:19:34 +01:00 |
|
|
Abyss Watcher
|
735f5933ba
|
make module_sect_attr and bin_attribute optional
|
2025-11-20 13:19:34 +01:00 |
|
|
ikelosandGitHub
|
a94436d478
|
Merge pull request #1801 from volatilityfoundation/issues/do-not-inherit-pseudoplugins
Issues/do not inherit pseudoplugins
|
2025-11-20 09:26:59 +00:00 |
|
|
Mike Auty
|
4ce58a636d
|
Reorder imports and fix black issue
|
2025-11-19 16:49:50 +00:00 |
|
|
Mike Auty
|
ea4aab5652
|
Fix black/ruff checks
|
2025-11-19 16:39:02 +00:00 |
|
|
ikelosandGitHub
|
c54daae32a
|
Update volatility3/framework/plugins/linux/malware/check_modules.py
|
2025-11-19 16:35:35 +00:00 |
|
|
ikelosandGitHub
|
83bf743a27
|
Update volatility3/framework/plugins/linux/malware/hidden_modules.py
|
2025-11-19 16:35:28 +00:00 |
|