Mike Auty
fdc6efc4ad
Add in the LICENSE and the README.
2018-12-19 23:55:03 +00:00
Mike Auty
e3ab3b1c8f
Make certain methods protected, otherwise they should be classmethods.
2018-12-19 22:48:16 +00:00
Mike Auty
189c8786f1
Rename filt to filter_func (because we value clarity over brevity) and another small fix.
2018-12-19 22:46:33 +00:00
Mike Auty
70e8204113
Fix up linux version of mmap_iter property to get_mmap_iter.
2018-12-19 22:38:43 +00:00
Mike Auty
39634893d6
Reformat with yapf and change filter to filt.
2018-12-19 19:43:56 +00:00
Andrew Case and ikelos
989e8643e9
add mac_bash
2018-12-19 19:43:56 +00:00
Andrew Case and ikelos
06cd454913
add mac_trustedbsd
2018-12-19 19:43:56 +00:00
Andrew Case and ikelos
ab877b3907
move plugins into proper directory
2018-12-19 19:43:56 +00:00
Mike Auty
af8719d299
Keep a separate list of resolve symbols, in case they share the name of a type.
2018-12-19 19:43:27 +00:00
Mike Auty
eb2b96e0ad
Reorder the sanitization to ensure booleans are stored as bools.
2018-12-19 19:41:46 +00:00
Mike Auty
d4cc02025c
Add in sanitization to prevent volatility objects leaking into the configuration data.
2018-12-19 18:54:48 +00:00
Andrew Case
2655fd1666
prevent double shifting of ASLR slides
2018-12-19 11:12:58 -06:00
Mike Auty
2a3b7348be
Add in minor changes and remove the duplicate plugins for mac.
2018-12-19 01:01:53 +00:00
Andrew Case and ikelos
7b3420f5b7
updated mac_psaux to report requirements correctly and remove stale debug print
2018-12-19 00:54:51 +00:00
Andrew Case and ikelos
6d582a8a68
remove while 1 and broad exception catching
2018-12-19 00:54:51 +00:00
Andrew Case and ikelos
19d39e53ff
add docstrings for malfind
2018-12-19 00:54:51 +00:00
Andrew Case and ikelos
a98995aa4e
remove unnecesary calls to int()
2018-12-19 00:54:51 +00:00
Andrew Case and ikelos
1dba08c005
remove try/except block that should have been removed originally
2018-12-19 00:54:51 +00:00
Andrew Case and ikelos
8f213a95d7
vol_class -> CPPObject
2018-12-19 00:54:51 +00:00
Mike Auty
857c970125
Update typing to match master.
2018-12-19 00:54:51 +00:00
Mike Auty
1322ebd44f
More minor cleanup.
2018-12-19 00:54:51 +00:00
Mike Auty
3a2d3c604f
Tidying. Renaming variables to avoid shadowing of classes, etc.
2018-12-19 00:54:51 +00:00
Mike Auty
c5ebf91915
Yapf reformat of the patches.
2018-12-19 00:54:51 +00:00
Andrew Case and ikelos
6aac0571e6
add support for objective C classes in OSX and json format
2018-12-19 00:54:51 +00:00
Andrew Case and ikelos
12e470ab55
add malfind plugin part 2 (extension update)
2018-12-19 00:54:51 +00:00
Andrew Case and ikelos
5ab483a0c3
add malfind plugin
2018-12-19 00:54:51 +00:00
Andrew Case and ikelos
002ced1b5d
add mac_pslist
2018-12-19 00:54:51 +00:00
Mike Auty
f4544fec05
Yapf reformat and change map_iter property to get_map_iter function.
2018-12-19 00:54:51 +00:00
Andrew Case and ikelos
e9ae7c45ce
add mac_psaux plugin
2018-12-19 00:54:51 +00:00
Andrew Case and ikelos
c0581eeeea
newest updates
2018-12-19 00:54:51 +00:00
Andrew Case and ikelos
e2e2bf9758
Fix call to find_aslr
2018-12-19 00:54:51 +00:00
Mike Auty
5375e154d8
Add in configuration caching to potentially avoid an unnecessary lookup.
2018-12-17 22:17:02 +00:00
Mike Auty
7ca5514b83
Remove long-broken convenience code from ConfigurableInterface.
...
In the dim and distant past, I seemingly thought it a good idea to copy
all the values out of an object's config and into local private
attributes (I guess to avoid config lookups?). It turns out, it was
always broken because it looking at the root of the config tree, rather
than under the object's specific config settings.
This first turned up as an issue where self._meta_layer was being
overwritten by None in the vmware layer. Removing this resolved the
issue.
2018-12-17 22:08:24 +00:00
Mike Auty
cf94012956
Yapf reformat the poolscanner code.
2018-12-17 19:41:27 +00:00
Michael Ligh and ikelos
90b7f2aa3b
add backup methods of detecting windows versions, in case metadata in the json isn't available
2018-12-17 19:40:14 +00:00
Mike Auty
7f973f9e3e
Refactor the ResourceAccessor so it can be used by layers.
2018-12-17 19:38:18 +00:00
Mike Auty
0462c98f44
Fix up vmss/vmsn typo.
2018-12-17 18:10:17 +00:00
Mike Auty
de4fa6df51
Ensure we can see how the stacker is acting.
2018-12-17 17:32:46 +00:00
Mike Auty
e65a00894a
Minor style tweaks and mass changes across the codebase because of it.
2018-12-17 12:46:14 +00:00
Mike Auty
76e81eb478
Fix up python-3.5 type syntax.
2018-12-17 09:09:34 +00:00
Mike Auty
b61ac3bd47
Many more typing fixes.
2018-12-17 01:17:06 +00:00
Mike Auty
91f6e32cf7
Minor typing addition.
2018-12-16 22:59:19 +00:00
Mike Auty
3386b3c536
Minor timeliner fix.
2018-12-16 21:28:30 +00:00
Mike Auty
78268379e5
Rename the style to a default location for tooling.
2018-12-16 17:18:49 +00:00
Mike Auty
19572b6e1e
Reformat all python files using yapf with custom volatility style.
2018-12-16 16:50:17 +00:00
Mike Auty
5bf2b78884
Add in a yapf file defining the majority of the volatility cocding style.
2018-12-16 16:42:31 +00:00
Mike Auty
9b951d5fbe
More typing additions and fixes.
2018-12-16 15:21:41 +00:00
Mike Auty
4bf995059b
Improve documentation for __init__ files.
2018-12-16 14:06:47 +00:00
Mike Auty
7818fba4a4
Fix up ChainMap issue in python-3.5.
2018-12-16 13:46:04 +00:00
Mike Auty
35ad2325a8
Move all core plugins over to framework/plugins.
...
This should have no impact functionality-wise.
The statistics plugin was left out a) as an example and b) because it
was committed by mistake in the first place and was never meant to be a
real plugin.
2018-12-16 13:40:15 +00:00
Mike Auty