 Andrew Caseandikelos
|
3d7d11b340
|
Make the symbol table masking use the correct bit mask and ASLR aware
|
2018-11-08 00:19:17 +00:00 |
|
|
Andrew Caseandikelos
|
af496d4741
|
update lsof to print name properly
|
2018-11-08 00:19:17 +00:00 |
|
|
Andrew Caseandikelos
|
98e472e211
|
major updates and new plugins
|
2018-11-08 00:19:17 +00:00 |
|
|
Andrew Caseandikelos
|
63e9cd4604
|
initial set of Linux plugins and extensions for ikelos review
|
2018-11-08 00:19:17 +00:00 |
|
|
Mike Auty
|
813e3ec5eb
|
Remove NLP DTB finder, since it seems most other scanners cover all the bases.
|
2018-11-07 20:12:24 +00:00 |
|
|
Mike Auty
|
36cc973d6d
|
Fix up minor typo in the plugin help.
|
2018-11-04 22:43:46 +00:00 |
|
|
Mike Auty
|
001d53e768
|
Rework some code to help with typing.
|
2018-11-01 11:17:15 +00:00 |
|
|
Mike Auty
|
8b7c34c20b
|
Ensure all the schemas, json files and plugins get pulled in.
|
2018-10-31 17:15:59 +00:00 |
|
|
Mike Auty
|
4629d5c1e2
|
Ensure we package all the plugins and their data files.
|
2018-10-31 17:03:58 +00:00 |
|
|
Mike Auty
|
f3fce720b1
|
Don't show errors if there are none.
|
2018-10-31 17:03:43 +00:00 |
|
|
Mike Auty
|
3d7dc1fb21
|
Add more debugging for plugin paths.
|
2018-10-31 00:03:39 +00:00 |
|
|
Mike Auty
|
dd33333d89
|
Make sure volshell is in sync.
|
2018-10-31 00:03:27 +00:00 |
|
|
Mike Auty
|
e3e1c4e00b
|
Initial commit of pyinstaller spec. Some changes to path handling to help.
|
2018-10-30 23:56:34 +00:00 |
|
|
Mike Auty
|
241b7475fb
|
Add in an initial implementation of the metadata system (extremely liable to change).
|
2018-10-30 15:01:31 +00:00 |
|
|
Mike Auty
|
f76aa66805
|
Reduce the risk of scanning the entire virtual address space, given we've already found potential kernels.
|
2018-10-26 22:39:36 +01:00 |
|
|
Mike Auty
|
e9bad27793
|
Add in kdbg_offset method for pdbscan, and make the module_offset the third choice.
|
2018-10-26 22:28:09 +01:00 |
|
|
Mike Auty
|
68a4bbf26c
|
Modularize pdb finding code.
|
2018-10-26 00:47:01 +01:00 |
|
|
Mike Auty
|
03023e45eb
|
Add in schema version 6.
|
2018-10-24 22:45:16 +01:00 |
|
|
Mike Auty
|
e6711f580d
|
Add required poolheader types and change the PoolHeaderSymbolTable to match the inheritted constructor signature.
|
2018-10-24 19:31:22 +01:00 |
|
|
Mike Auty
|
ff3bae0804
|
Fix up typing information.
|
2018-10-14 23:03:58 +01:00 |
|
|
Mike Auty
|
d799d4edd8
|
Add additional typing information.
|
2018-10-11 16:41:59 +01:00 |
|
|
Mike Auty
|
2288f54a44
|
Raise exception instead of returning None.
|
2018-10-11 14:26:37 +01:00 |
|
|
Mike Auty
|
f1c5b3ca29
|
Improve the typing in places.
|
2018-10-11 11:14:29 +01:00 |
|
|
Mike Auty
|
21384be035
|
Remove the confusing max/min address values in scan chunk (the iterator should only pass chunks that need scanning).
|
2018-10-11 11:14:07 +01:00 |
|
|
Mike Auty
|
df57ee5045
|
Fix minor typo in poolscanner logic (thanks mypy!).
|
2018-10-10 15:32:28 +01:00 |
|
|
Mike Auty
|
e500e87fc6
|
Add in type annotations for the poolscanner plugin.
|
2018-10-05 00:20:44 +01:00 |
|
|
Mike Auty
|
d829028a36
|
Apply various type annotation/bug fixes.
|
2018-10-05 00:16:42 +01:00 |
|
|
Mike Auty
|
9c101aee91
|
Ensure pointers are masked based on their native_layer not their instantiated layer.
|
2018-10-04 02:44:26 +01:00 |
|
|
Mike Auty
|
2943ae1dc6
|
Fix up another exception gone rogue.
|
2018-10-04 02:13:40 +01:00 |
|
|
Mike Auty
|
f044569613
|
Fix up catching the wrong exception type (and the lack of context).
|
2018-10-04 02:07:33 +01:00 |
|
|
Mike Auty
|
d6b60149a1
|
Update poolscanner to use the new symbol_table_is_64bit function.
|
2018-10-03 23:36:54 +01:00 |
|
|
Mike Auty
|
77a894b224
|
Convert 64bit checks to a symbol utility function.
|
2018-10-03 23:36:28 +01:00 |
|
|
Michael Ligh
|
97ae236fcc
|
add the pool header json files to be used when kernels fail to define their own _POOL_HEADER
|
2018-10-03 17:07:07 -05:00 |
|
|
Mike Auty
|
09f12a2126
|
Add in most of the code required for poolscanning goodness. @imhlv2 to fix the tests.
|
2018-10-03 22:03:29 +01:00 |
|
|
Mike Auty
|
da6d211a40
|
The isf_url parameter is never populated, so this can go away.
|
2018-10-03 21:32:31 +01:00 |
|
|
Mike Auty
|
c8dd50dacb
|
Improve help message to list unloadable plugins.
|
2018-10-03 21:32:03 +01:00 |
|
|
Mike Auty
|
6a79d803dc
|
Fix up timeliner to produce files rather than writing them directly.
|
2018-10-03 21:31:36 +01:00 |
|
|
Mike Auty
|
c0b7376226
|
Ensure we don't break all plugins on versions where _POOL_HEADER doesn't exist.
|
2018-09-30 17:00:25 +01:00 |
|
|
Mike Auty
|
701c56558b
|
Fix a typo from the big refactor in commit 190ffaf2.
|
2018-09-28 12:51:55 +01:00 |
|
|
Mike Auty
|
de3bfad135
|
Replace 'raise StopIteration' with a blank 'return', since changes in python-3.7 change StopIeration to a RuntimeError.
|
2018-09-28 12:44:19 +01:00 |
|
|
Mike Auty
|
3e176c8a50
|
Use the prefered method of dynamic importing.
|
2018-09-28 12:05:57 +01:00 |
|
|
Mike Auty
|
fc0d2bcf10
|
Support recording the configuration data for timeliner.
|
2018-09-24 01:06:28 +01:00 |
|
|
Mike Auty
|
059edd56c8
|
Convert timeliner to use the plugin runner.
|
2018-09-24 00:52:17 +01:00 |
|
|
Mike Auty
|
99ba8bfb3f
|
Change plugin runner to use a base_config_path.
|
2018-09-24 00:45:36 +01:00 |
|
|
Mike Auty
|
e5024420c8
|
Refactor plugin running to ensure automagics and reconstruction occur properly.
|
2018-09-24 00:36:40 +01:00 |
|
|
Mike Auty
|
821841e7ee
|
Refactor wher ethe UnsatisfiedException lives.
|
2018-09-23 22:56:24 +01:00 |
|
|
Mike Auty
|
4eb30d5003
|
Rework the config_value method.
|
2018-09-23 22:55:10 +01:00 |
|
|
Mike Auty
|
00a118a06a
|
Reduce return results from find_requirements.
|
2018-09-23 22:24:44 +01:00 |
|
|
Mike Auty
|
6c938869db
|
Refactor timeliner to clarify when automagic happens.
|
2018-09-23 18:19:23 +01:00 |
|
|
Mike Auty
|
81bef5ace8
|
Minor fixes to the requirement framework.
|
2018-09-23 18:13:58 +01:00 |
|