 Mike Auty
|
df57ee5045
|
Fix minor typo in poolscanner logic (thanks mypy!).
|
2018-10-10 15:32:28 +01:00 |
|
|
Mike Auty
|
e500e87fc6
|
Add in type annotations for the poolscanner plugin.
|
2018-10-05 00:20:44 +01:00 |
|
|
Mike Auty
|
d6b60149a1
|
Update poolscanner to use the new symbol_table_is_64bit function.
|
2018-10-03 23:36:54 +01:00 |
|
|
Mike Auty
|
09f12a2126
|
Add in most of the code required for poolscanning goodness. @imhlv2 to fix the tests.
|
2018-10-03 22:03:29 +01:00 |
|
|
Mike Auty
|
c0b7376226
|
Ensure we don't break all plugins on versions where _POOL_HEADER doesn't exist.
|
2018-09-30 17:00:25 +01:00 |
|
|
Mike Auty
|
569bc97bc2
|
Fix up the use of native_layer_name in the poolscanning code.
|
2018-09-16 15:31:50 +01:00 |
|
|
Mike Auty
|
5add8ea078
|
Remove the obsolete FIXME.
|
2018-09-15 15:23:43 +01:00 |
|
|
Michael Lighandikelos
|
fffdd253ae
|
use renderers.NotApplicableValue() for the poolscanner plugin's name field
|
2018-09-15 15:22:38 +01:00 |
|
|
Mike Auty
|
0baa0ecdf5
|
Update the poolscanner to take care of multiple constraints with the same tag.
|
2018-09-15 15:22:38 +01:00 |
|
|
Michael Lighandikelos
|
9d6055d2ba
|
add a lambda placeholder for is_windows_10 - replace it once we have PE file version checks
|
2018-09-15 15:22:38 +01:00 |
|
|
Michael Lighandikelos
|
f02df7a92e
|
reduce the extra tag_type_map lookup by yielding the constraint from the pool scanner
|
2018-09-15 15:22:38 +01:00 |
|
|
Michael Lighandikelos
|
5d20faa0a7
|
work on _POOL_HEADER.get_object()
|
2018-09-15 15:22:38 +01:00 |
|
|
Michael Lighandikelos
|
be6a351a11
|
start adding the _POOL_HEADER extension. expand the pool constraints to include processes
|
2018-09-15 15:22:38 +01:00 |
|
|
Mike Auty
|
ce4ed9fea8
|
Add in the start of actual output from the poolscanner.
|
2018-09-15 15:22:38 +01:00 |
|
|
Michael Lighandikelos
|
56a5012a46
|
fix alignment, should offset be optional to context.module()? refactor pool type checks
|
2018-09-15 15:22:38 +01:00 |
|
|
Mike Auty
|
8a5d3b0c1e
|
Initial poolscanning code.
|
2018-09-15 15:22:38 +01:00 |
|