 Andrew Caseandikelos
|
dc91a16a2f
|
update check syscall
|
2018-12-08 17:34:48 +00:00 |
|
|
Andrew Caseandikelos
|
ade6aa1e74
|
update check_afinfo for write member
|
2018-12-08 17:34:48 +00:00 |
|
|
Andrew Caseandikelos
|
9d9b68eaa3
|
have check_afinfo not inherit from lsmod
|
2018-12-08 17:34:48 +00:00 |
|
|
Andrew Caseandikelos
|
8705fb3047
|
update time_object to get_time_object
|
2018-12-08 17:34:48 +00:00 |
|
|
Andrew Caseandikelos
|
0e7b6b6702
|
Updated hist_entry type and references, add bash plugin
|
2018-12-08 17:34:48 +00:00 |
|
|
Andrew Caseandikelos
|
3ab654847e
|
Change NotApplicableValue -> UnparsableValue
|
2018-12-08 17:34:48 +00:00 |
|
|
Andrew Caseandikelos
|
c6e9763e5a
|
Linux - add bash plugin
|
2018-12-08 17:34:48 +00:00 |
|
|
Andrew Caseandikelos
|
36131d01bb
|
Add check_afinfo plugin
|
2018-12-08 17:34:48 +00:00 |
|
|
Andrew Caseandikelos
|
72798d3187
|
Add linux system call checking plugin
|
2018-12-08 17:34:48 +00:00 |
|
|
Mike Auty
|
34ed11bfc0
|
Fix up issue with coalescing sections.
|
2018-12-07 01:47:16 +00:00 |
|
|
Mike Auty
|
aaeb349a70
|
Remove debugging call.
|
2018-12-07 01:47:16 +00:00 |
|
|
Mike Auty
|
4fabb762d2
|
Make some typing fixes and remove specification of the iterator.
|
2018-12-07 01:47:16 +00:00 |
|
|
Mike Auty
|
5a331f9f01
|
A few remaining changes due to the API aleration.
|
2018-12-07 01:47:16 +00:00 |
|
|
Mike Auty
|
341b9b8f9e
|
Add in initial changes for scanner sections.
|
2018-12-07 01:47:16 +00:00 |
|
|
Mike Auty
|
3f2f3cd2f3
|
Add a reminder to fix up the API in this place.
|
2018-12-03 21:52:29 +00:00 |
|
|
Mike Auty
|
4703f192e4
|
Add in a check to ensure mappings that ignore errors don't cause errors.
|
2018-12-01 21:33:09 +00:00 |
|
|
Mike Auty
|
5b3a81de05
|
Ensure the yarascan generator returns rows.
|
2018-12-01 20:48:53 +00:00 |
|
|
Mike Auty
|
185d4ccdc2
|
Fix issue with yara scans not accepting binary data.
|
2018-12-01 20:32:08 +00:00 |
|
|
Mike Auty
|
5dea1968bb
|
Fix up _MMVAD_SHORT context typo.
|
2018-12-01 16:27:52 +00:00 |
|
|
Mike Auty
|
431da21440
|
Fix up the metadata format pattern matching to be slightly more strict.
|
2018-11-28 19:50:37 +00:00 |
|
|
Mike Auty
|
1f0888cf19
|
Remove the functools.wraps because we don't strictly wrap, just proxy.
|
2018-11-28 16:24:00 +00:00 |
|
|
Mike Auty
|
44592c63ca
|
Update dependencies to support sphinx_autodoc_typehints.
|
2018-11-13 12:01:57 +00:00 |
|
|
Mike Auty
|
68760bff40
|
Add wrapper convenience function and reorder imports for documentation generation.
|
2018-11-13 11:53:42 +00:00 |
|
|
Mike Auty
|
3900f38262
|
Remove vestigal trace of NlpDtbFinder.
|
2018-11-13 11:43:14 +00:00 |
|
|
Mike Auty
|
e27ba8d089
|
Fix up naming for objects/symbols_utility imports.
|
2018-11-08 00:48:38 +00:00 |
|
|
Mike Auty
|
90c964905a
|
Fix up a circular import issue.
|
2018-11-08 00:25:26 +00:00 |
|
|
Mike Auty
|
ac0f1a2cd0
|
Fix up a remaining typo, and two typing questions.
|
2018-11-08 00:19:17 +00:00 |
|
|
Mike Auty
|
db7320e426
|
Bulk lint and a couple of typos fixed.
|
2018-11-08 00:19:17 +00:00 |
|
|
Andrew Caseandikelos
|
c6ca2666b6
|
Update aslr calculation to correctly handle physical shifts and also to cache results
|
2018-11-08 00:19:17 +00:00 |
|
|
Andrew Caseandikelos
|
625952680a
|
mass convert hasattr -> has_member
|
2018-11-08 00:19:17 +00:00 |
|
|
Andrew Caseandikelos
|
b868f41c95
|
Fix get_path_file call
|
2018-11-08 00:19:17 +00:00 |
|
|
Andrew Caseandikelos
|
6254538371
|
Properly use expeption type
|
2018-11-08 00:19:17 +00:00 |
|
|
Andrew Caseandikelos
|
a015e69b84
|
Update the use of symbols and objects class and add comments about dentry traversal
|
2018-11-08 00:19:17 +00:00 |
|
|
Andrew Caseandikelos
|
542a062779
|
Update how the modules list address is found
|
2018-11-08 00:19:17 +00:00 |
|
|
Andrew Caseandikelos
|
7aa729f4b7
|
add typing import to pslist
|
2018-11-08 00:19:17 +00:00 |
|
|
Andrew Caseandikelos
|
a8adf4eaea
|
Fix find_aslr for swapper isgnature and throwing exception instead of returning None
|
2018-11-08 00:19:17 +00:00 |
|
|
Andrew Caseandikelos
|
9c01b93c94
|
Check that mount type exists before appling type
|
2018-11-08 00:19:17 +00:00 |
|
|
Andrew Caseandikelos
|
3d7d11b340
|
Make the symbol table masking use the correct bit mask and ASLR aware
|
2018-11-08 00:19:17 +00:00 |
|
|
Andrew Caseandikelos
|
af496d4741
|
update lsof to print name properly
|
2018-11-08 00:19:17 +00:00 |
|
|
Andrew Caseandikelos
|
98e472e211
|
major updates and new plugins
|
2018-11-08 00:19:17 +00:00 |
|
|
Andrew Caseandikelos
|
63e9cd4604
|
initial set of Linux plugins and extensions for ikelos review
|
2018-11-08 00:19:17 +00:00 |
|
|
Mike Auty
|
813e3ec5eb
|
Remove NLP DTB finder, since it seems most other scanners cover all the bases.
|
2018-11-07 20:12:24 +00:00 |
|
|
Mike Auty
|
36cc973d6d
|
Fix up minor typo in the plugin help.
|
2018-11-04 22:43:46 +00:00 |
|
|
Mike Auty
|
001d53e768
|
Rework some code to help with typing.
|
2018-11-01 11:17:15 +00:00 |
|
|
Mike Auty
|
8b7c34c20b
|
Ensure all the schemas, json files and plugins get pulled in.
|
2018-10-31 17:15:59 +00:00 |
|
|
Mike Auty
|
4629d5c1e2
|
Ensure we package all the plugins and their data files.
|
2018-10-31 17:03:58 +00:00 |
|
|
Mike Auty
|
f3fce720b1
|
Don't show errors if there are none.
|
2018-10-31 17:03:43 +00:00 |
|
|
Mike Auty
|
3d7dc1fb21
|
Add more debugging for plugin paths.
|
2018-10-31 00:03:39 +00:00 |
|
|
Mike Auty
|
dd33333d89
|
Make sure volshell is in sync.
|
2018-10-31 00:03:27 +00:00 |
|
|
Mike Auty
|
e3e1c4e00b
|
Initial commit of pyinstaller spec. Some changes to path handling to help.
|
2018-10-30 23:56:34 +00:00 |
|