Commit Graph

Select branches

Hide Pull Requests

1446-pstreepy-has-broken-types-and-pid-handling

1775-symlinkscan-needs-to-scan-paged-memory

add_lkm_load_parameters

arm64-support

blackhat_2024

bugfix/missing_modules

bugfix/module_kset_invalid_addr_exc

bugfix/volshell_dt_traceback

cached_files_exception_handling

develop

development/plugin_module_stubs

devicetree_traversal_and_offsets

dgmcdona/filescan_physical_offsets

dgmcdona/package_data

dgmcdona/windows_timers_raw_dpc_offset

docker

driver_signing_enforcement

feature/add-zstd-support

feature/better-config-automagic

feature/better-page-faulting

feature/column-select

feature/data-renderer

feature/disable-caching

feature/disable-caching-try2

feature/eve-string-speedup

feature/linux-utilities-split

feature/module-requirements

feature/pdbconv-cplusplus-vs19

feature/pyinstaller-artifact

feature/scan-one-layer-deep

feature/shtab

feature/use-less-memory

feature/vmsn

feature/volshell-breakpoints

feature/volshell-unicorn-support

feature/warn-on-bad-dwarf2json-version

feature/writecrashdump-plugin

fix_devicetree_device_offsets

fix_get_net_namespace_id

fix_kallsyms_smear_handling

freebsd-pslist

hotfix/v2.26.1

inodepages/memory_usage

intel-5level-paging

issue_1481_driver_objects

issue_197_windows_dumpfiles_debug_parent

issue_574_pstree_smear

issues/build-stable-exe-fix

issues/cache-locking

issues/fix-exe-build

issues/issue1255

issues/issue1255-2

issues/issue1367

issues/issue1874

issues/issue1958

issues/registry-plugin-expiry-date

issues/ruff-formatter

linux_list_tasks_smear

mac_list_files_smear

mac_map_iteration_smear

malfind_warning

mountinfo_exception_handling

november_training

npetroni/feature/pyinstaller-artifact

october_training

orphan_kernel_threads

pe_symbols

pedump

quickscanning

renderer-options

renderer-options2

revert-1736-feature/use-less-memory

safe-output

smeared_linux_processes

stable

threadpool

training

update_gui_pool_types

update_netfilter

vma_enumeration_issues

#1

#10

#100

#1000

#1000

#1001

#1003

#1004

#1008

#1010

#1011

#1012

#1012

#1015

#1016

#1018

#1020

#1023

#1024

#1025

#1027

#1028

#1029

#1034

#1035

#1036

#1036

#1037

#1038

#1039

#1043

#1043

#1044

#1048

#1049

#105

#1050

#1051

#1054

#1057

#106

#1061

#1062

#1063

#1064

#1068

#1069

#1070

#1071

#1072

#1072

#1073

#1073

#1075

#1076

#1077

#1079

#1080

#1082

#1082

#1083

#1084

#1085

#1085

#1088

#1088

#1091

#1092

#1093

#1094

#1096

#1098

#1099

#11

#11

#110

#1100

#1101

#1103

#1104

#1106

#1107

#1108

#1109

#1110

#1111

#1113

#1114

#1115

#1115

#1116

#1116

#1118

#1118

#112

#1120

#1122

#113

#1130

#1131

#1137

#114

#1140

#1141

#1143

#1144

#1145

#1147

#1149

#115

#1150

#1151

#1156

#1157

#116

#1160

#1164

#1165

#1167

#1168

#1169

#117

#1170

#1171

#1172

#1173

#1174

#1176

#1177

#1178

#1182

#1182

#1183

#1186

#1190

#1191

#1192

#1193

#1197

#1198

#1199

#12

#1201

#1202

#1204

#1205

#1206

#1207

#1208

#1209

#121

#1212

#1213

#1214

#1215

#1217

#1219

#122

#1221

#1222

#1224

#1225

#1227

#1228

#1229

#123

#1230

#1232

#1233

#1234

#1236

#1237

#1238

#1239

#1239

#124

#1242

#1243

#1243

#1245

#1247

#1249

#1250

#1253

#1254

#1258

#1259

#126

#1260

#1261

#1262

#1263

#1264

#1266

#1268

#127

#1270

#1271

#1272

#1273

#1274

#1276

#1277

#1278

#1279

#1281

#1283

#1284

#1285

#1287

#1288

#1289

#1290

#1293

#1295

#1297

#1299

#13

#1300

#1301

#1304

#1305

#1306

#1307

#1308

#1310

#1311

#1314

#1315

#1316

#1316

#1317

#1318

#132

#1320

#1321

#1321

#1323

#1326

#1327

#1328

#1329

#133

#1330

#1332

#1335

#1337

#1338

#1339

#1340

#1341

#1342

#1343

#1344

#1345

#1346

#1347

#1348

#1350

#1352

#1353

#1354

#1356

#1357

#1359

#1362

#1363

#1364

#1365

#1368

#1369

#137

#1370

#1371

#1375

#1375

#1376

#1377

#1378

#1378

#1381

#1382

#1384

#1386

#1388

#1389

#1390

#1391

#1393

#1394

#1395

#1396

#1397

#1398

#1399

#14

#140

#1402

#1403

#1405

#1406

#1407

#141

#1412

#1414

#1415

#1416

#1416

#1420

#1421

#1422

#1423

#1424

#1425

#1426

#1427

#1428

#1429

#143

#1430

#1431

#1432

#1433

#1440

#1448

#1449

#1449

#145

#1450

#1451

#1452

#1453

#1454

#1455

#1457

#1459

#146

#1460

#1461

#1462

#1463

#1464

#1465

#1466

#1467

#147

#148

#1485

#1486

#1488

#1489

#149

#1490

#1491

#1492

#1494

#1495

#1497

#1498

#1499

#15

#150

#1500

#1501

#1502

#1503

#1506

#1508

#1509

#1510

#1512

#1513

#1514

#1515

#1516

#1517

#1518

#152

#1521

#1528

#1529

#153

#153

#1530

#1531

#1532

#1533

#1536

#1537

#1538

#1539

#154

#1540

#1541

#1542

#1543

#1544

#1545

#1548

#1549

#1550

#1551

#1553

#1555

#1556

#1557

#1558

#1559

#1560

#1561

#1562

#1563

#1564

#1566

#1567

#1568

#1570

#1571

#1572

#1576

#1578

#1579

#1581

#1582

#1584

#1585

#1586

#1587

#159

#1590

#1591

#1592

#1593

#1595

#1596

#1598

#1599

#1601

#1606

#1607

#1608

#1609

#1610

#1611

#1613

#1615

#1616

#1617

#1619

#162

#1620

#1621

#1622

#1623

#1624

#1625

#1626

#1627

#1628

#1630

#1631

#1632

#1634

#1635

#164

#1640

#1641

#165

#1652

#1653

#1654

#1655

#1656

#1657

#1658

#1659

#166

#1660

#1661

#1663

#1664

#1665

#1666

#1667

#1668

#1669

#167

#1670

#1671

#1672

#1673

#1674

#1675

#1676

#1677

#1678

#1679

#168

#1680

#1681

#1682

#1683

#1683

#1684

#1686

#1689

#169

#1690

#1691

#1692

#1693

#1694

#1695

#1696

#1697

#1698

#170

#1700

#1701

#1702

#1703

#1704

#1706

#1707

#1708

#1709

#171

#1710

#1711

#1712

#1713

#1715

#1716

#1717

#1718

#1719

#172

#1720

#1721

#1722

#1723

#1724

#1726

#1727

#1728

#1729

#173

#1730

#1731

#1733

#1734

#1735

#1736

#1737

#1738

#1739

#174

#1740

#1742

#1743

#1746

#1747

#1748

#1749

#175

#1750

#1751

#1752

#1753

#1755

#1757

#1758

#176

#1760

#1763

#1764

#1765

#1766

#1767

#1768

#1769

#1770

#1771

#1772

#1773

#1776

#1777

#1778

#1779

#1781

#1783

#1786

#1787

#1788

#1788

#1789

#1791

#1792

#1793

#1794

#1795

#1796

#1798

#1799

#180

#1800

#1801

#1802

#1804

#1804

#1807

#1810

#1811

#1812

#1813

#1814

#1815

#1816

#1816

#1818

#1818

#1821

#1822

#1823

#1824

#1825

#1826

#1827

#1828

#1829

#183

#1830

#1831

#1832

#1833

#1834

#1835

#1837

#1838

#1839

#1840

#1841

#1842

#1843

#1844

#1845

#1846

#1849

#185

#1850

#1851

#1852

#1853

#1854

#1856

#1859

#1859

#1861

#1863

#1866

#1868

#187

#1871

#1873

#1877

#1878

#188

#1880

#1882

#1882

#1884

#1888

#189

#1890

#1894

#1894

#1895

#1895

#1896

#1896

#1897

#1897

#1898

#1898

#19

#190

#1900

#1900

#1901

#1901

#1902

#1903

#1903

#1904

#1904

#1905

#1905

#1906

#1906

#1907

#1907

#1908

#1909

#1909

#1910

#1910

#1911

#1911

#1912

#1912

#1913

#1913

#1914

#1914

#1915

#1915

#1917

#1921

#1924

#1926

#1927

#1929

#1932

#1933

#1933

#1935

#1937

#1939

#1939

#1941

#1942

#1946

#1948

#1949

#1949

#195

#1950

#1950

#1953

#1955

#1956

#1957

#1957

#1959

#1959

#1960

#1961

#1962

#1963

#1964

#1964

#1966

#1967

#1967

#1968

#1968

#1969

#1969

#1971

#1972

#1974

#1974

#1976

#1976

#1977

#1980

#1981

#1982

#1982

#1983

#1984

#1984

#1986

#1986

#1988

#1989

#1989

#199

#1990

#1990

#1991

#1991

#1992

#1993

#1994

#1994

#1995

#1995

#1996

#1996

#1997

#1997

#1998

#1999

#1999

#2

#20

#2000

#2000

#2001

#2003

#2005

#2007

#2007

#2008

#2008

#2009

#2010

#2010

#2011

#2011

#2012

#2012

#2013

#2014

#2015

#2016

#2017

#2018

#2018

#2019

#2019

#2020

#2020

#2022

#2023

#2023

#2024

#2024

#2025

#2025

#207

#212

#213

#216

#220

#221

#223

#224

#226

#228

#229

#23

#230

#235

#236

#237

#238

#239

#24

#240

#243

#244

#245

#247

#248

#249

#25

#25

#251

#253

#254

#255

#256

#257

#258

#260

#261

#261

#262

#263

#265

#266

#267

#268

#269

#273

#275

#276

#277

#28

#28

#280

#282

#283

#284

#285

#286

#287

#288

#289

#29

#290

#292

#293

#294

#295

#296

#297

#298

#299

#3

#30

#30

#300

#301

#303

#305

#307

#309

#31

#311

#314

#319

#32

#321

#322

#323

#325

#326

#327

#328

#329

#33

#331

#334

#335

#336

#337

#338

#339

#34

#342

#343

#344

#345

#346

#347

#348

#349

#35

#350

#351

#352

#354

#355

#359

#36

#362

#363

#364

#37

#370

#378

#38

#380

#383

#388

#389

#392

#393

#394

#395

#396

#397

#4

#40

#401

#402

#403

#404

#405

#406

#407

#41

#410

#411

#414

#415

#416

#417

#418

#419

#42

#42

#421

#426

#428

#429

#43

#430

#435

#436

#438

#442

#443

#444

#445

#446

#448

#45

#450

#451

#452

#453

#454

#455

#458

#459

#46

#460

#461

#462

#465

#465

#466

#467

#468

#469

#47

#471

#472

#472

#475

#476

#477

#478

#479

#48

#480

#481

#482

#483

#484

#487

#491

#492

#496

#498

#499

#5

#50

#504

#507

#51

#510

#511

#513

#518

#518

#519

#52

#523

#526

#527

#53

#531

#533

#534

#535

#536

#537

#538

#54

#540

#543

#544

#545

#546

#548

#549

#55

#551

#554

#555

#557

#559

#56

#561

#563

#569

#57

#570

#572

#575

#579

#58

#580

#581

#581

#582

#584

#586

#593

#594

#596

#597

#6

#60

#600

#601

#603

#605

#606

#606

#609

#610

#611

#612

#613

#614

#615

#619

#622

#623

#624

#625

#626

#628

#63

#630

#633

#635

#64

#641

#643

#644

#645

#647

#65

#650

#650

#651

#653

#654

#655

#656

#656

#657

#658

#659

#66

#660

#662

#663

#664

#666

#667

#669

#67

#670

#673

#675

#676

#677

#68

#682

#683

#684

#685

#689

#69

#690

#693

#694

#695

#698

#7

#70

#700

#702

#705

#706

#708

#71

#711

#714

#718

#718

#72

#720

#721

#722

#724

#725

#726

#727

#728

#729

#73

#730

#731

#732

#733

#734

#735

#736

#737

#738

#74

#741

#742

#743

#745

#749

#75

#750

#751

#752

#753

#753

#754

#755

#758

#76

#761

#761

#766

#768

#769

#769

#77

#771

#772

#774

#775

#776

#777

#778

#778

#78

#782

#783

#784

#785

#786

#788

#789

#79

#790

#791

#793

#795

#796

#797

#8

#80

#802

#805

#806

#808

#809

#81

#810

#813

#814

#817

#818

#819

#82

#821

#822

#823

#824

#825

#826

#827

#828

#83

#834

#835

#837

#838

#839

#84

#840

#841

#845

#846

#849

#85

#850

#852

#855

#857

#858

#86

#869

#87

#873

#877

#879

#88

#881

#882

#884

#885

#886

#887

#888

#89

#891

#892

#892

#894

#898

#899

#9

#9

#90

#900

#902

#903

#904

#905

#907

#913

#915

#916

#92

#920

#921

#928

#933

#934

#935

#936

#938

#941

#942

#945

#947

#948

#949

#951

#952

#957

#960

#962

#968

#968

#970

#975

#976

#976

#978

#984

#987

#988

#995

#996

#997

#999

dev-prerelease

v1.0.0

v1.0.0-beta.1

v1.0.1

v2.0.0

v2.0.1

v2.11.0

v2.26.0

v2.26.2

v2.27.0

v2.28.0

v2.4.0

v2.4.1

v2.5.0

v2.5.2

v2.7.0

v2.8.0

Mono Color

• c5cd3595de Fix up minor typo and hard depend on >= python 3.4. Mike Auty 2016-12-25 13:44:03 +00:00
• 60bf657895 Allow pickling of FileLayers by unsetting the file (it'll be reopened as soon as a read happens). Mike Auty 2016-12-25 00:02:42 +00:00
• e230bbf6a8 Ensure we don't ever get in a loop looking up ._vol (could happen when pickling/unpickling). Mike Auty 2016-12-25 00:02:11 +00:00
• d51dd2a992 Add in TODOs for future heuristic enhancements. Mike Auty 2016-12-24 19:44:06 +00:00
• 6a0b0d71c0 Remove debugging code that shouldn't have made it in the final code. Mike Auty 2016-12-24 19:41:58 +00:00
• bea0a57942 Merge pull request #3 from npetroni/fix-pdbscan-utility ikelosandGitHub 2016-12-23 18:35:21 +00:00
• 1b532a0b47 fix pdbscanner standalone utility -- scan() API changed Nick L. Petroni, Jr 2016-12-23 11:26:41 -05:00
• 3aa187e293 Fix minor lint with docstring. Mike Auty 2016-12-22 16:00:58 +00:00
• 23e61d9756 Add in a little more information to the debug log. Mike Auty 2016-12-22 16:00:46 +00:00
• bbabf4db0e Add in a heuristic for finding the correct DTB on recent Win10. Mike Auty 2016-12-22 15:42:23 +00:00
• 70314386c8 Fix a rather critical issue with the end condition for a scanned range (and reduce the overlap if it's unnecessarily large). Mike Auty 2016-12-22 15:41:00 +00:00
• d669b57546 Rewrite our fallback virtual kernel offset algorithm. Mike Auty 2016-12-21 16:54:35 +00:00
• aad6aa9b4d Rewrite the intel scanning engine (and fix up the internal _translate function to include the mapped layer). Mike Auty 2016-12-21 16:53:52 +00:00
• 9ca001df8b Allow start/end positions on the pdb scanning. Mike Auty 2016-12-21 02:28:03 +00:00
• 591d9eba27 Add in better bounds checking for the scan call. Mike Auty 2016-12-21 02:20:47 +00:00
• 56388fc903 Fix up the incorrect scanning boundaries. Mike Auty 2016-12-21 01:45:44 +00:00
• 76f435e519 Update schemas to be more strict on providing all the required information. Mike Auty 2016-12-20 10:49:23 +00:00
• c6d5eef2f9 Fix up a documentation warning. Mike Auty 2016-12-20 09:00:17 +00:00
• 7a1fcec1b5 Change subtype to base_type to match the __init__ parameter name. Mike Auty 2016-12-20 08:31:01 +00:00
• 1e6911b753 Create appropriate VolTemplateProxy classes for BitField and Enumeration. Mike Auty 2016-12-20 08:29:41 +00:00
• a7d3a95ad0 Fix BitFields (and Enumerations) to accept only Integer basetypes and derive from them properly. Mike Auty 2016-12-20 08:25:55 +00:00
• 60c3fbc5ce Don't cache failures and add additional logging for the long schema validation pause. Mike Auty 2016-12-19 21:49:14 +00:00
• bb00ac03a0 Merge pull request #2 from ikelos/python3-doc-theme ikelosandGitHub 2016-12-19 09:29:39 +00:00
• bbb07b49c0 Ensure we enforce requirements on the schemas (these should always have been in place, so no version bumps). Mike Auty 2016-12-18 22:10:01 +00:00
• 0f548e864c Add in comment in case of mutability trouble in the Struct TemplateProxy. Mike Auty 2016-12-18 20:52:38 +00:00
• 2323e15ec3 Clarify in the documentation that these updates are transient. Mike Auty 2016-12-18 19:38:22 +00:00
• be075939d2 Remove flags as a fully-fledged object until it's been discussed Mike Auty 2016-12-18 19:38:05 +00:00
• a8b4db3ee3 Don't forget to also clone during intermediate format native creation. Mike Auty 2016-12-18 19:25:27 +00:00
• 09ee0e6258 Fix fairly deep flaw where resolved templates could be modified by casting or creating an object. Mike Auty 2016-12-18 19:21:27 +00:00
• 1754f3bc85 Attempt to fix up any possible re-encoding issues the str() call in the renderer might bring. Mike Auty 2016-12-18 16:58:58 +00:00
• 190bcd7bf1 Include an initial flags object. Mike Auty 2016-12-18 16:29:19 +00:00
• 54678823f8 Refactor BitField subtype to base_type to match enums (and fix a minor enum typo too). Mike Auty 2016-12-18 16:12:08 +00:00
• 45d37bb961 Remove misleading TODO. Mike Auty 2016-12-18 15:52:03 +00:00
• efad3362db Reset the string encoding changes, since we were doing it right the first time. Mike Auty 2016-12-18 15:51:27 +00:00
• 6f1a929f88 Refactor the location of windows extension classes. Mike Auty 2016-12-18 15:38:46 +00:00
• e4905febf9 Ensure all objects can be inherited from. Mike Auty 2016-12-18 15:38:11 +00:00
• 6102054bb6 Enable string encoding and emphasize that max_length applies to bytes in memory not to number of characters in the string. Mike Auty 2016-12-18 15:37:05 +00:00
• 65ef2927a3 Refactor the enumeration_choices code into the existing weak_resolve code. Mike Auty 2016-12-18 02:53:07 +00:00
• b2701d7ba6 Update inaccurate error message. Mike Auty 2016-12-18 02:48:46 +00:00
• cf4ac3a7f6 Allow enumeration dictionaries to be accessed through the SymbolSpace directly. Mike Auty 2016-12-18 02:48:23 +00:00
• 6b973f1538 Expose VolTemplateProxy.vol values in the Proxy (to allow for enumeration access in a template). Mike Auty 2016-12-18 02:19:46 +00:00
• fbb66e6603 Support inverse caching of enumerations. Mike Auty 2016-12-18 02:10:42 +00:00
• 4ac682fc42 Rename Enumeration subtype to base_type, since it should always be a primitive. Mike Auty 2016-12-18 02:07:11 +00:00
• bd3762a81c Improve exception returns in TemplateProxy. Mike Auty 2016-12-18 01:49:09 +00:00
• 5f6c9ca08a Add in support for version 2.0.0 of the JSON schema. Mike Auty 2016-12-17 21:03:54 +00:00
• 8a687ef409 Ensure we include the natives in the Intermed type lists. Mike Auty 2016-12-16 00:26:22 +00:00
• 884e397836 Update Enumeration objects again, hopefully correctly this time. Mike Auty 2016-12-15 23:04:51 +00:00
• ac6a5a2b9a Ensure that we use a reasonable type for enumerations when constructing them without further details. Mike Auty 2016-12-15 23:04:23 +00:00
• 7719aaa960 Convert the validity functions to class functions to allow them to be used in __new__ methods. Mike Auty 2016-12-15 23:03:48 +00:00
• bf61357ed2 Don't forget to call super's struct_format. Mike Auty 2016-12-15 09:06:05 +00:00
• de58df2363 Fix negation flip that returned entirely the wrong values for arrays. Mike Auty 2016-12-15 02:07:25 +00:00
• d3f6a40d66 Change the docstrings to use name rather than entry for enumerations. Mike Auty 2016-12-15 02:07:03 +00:00
• de18fe234c Add in an implementation for Enumeration for testing. Mike Auty 2016-12-15 02:02:30 +00:00
• 698d1c2b4a Improve the granularity of logging. Mike Auty 2016-12-15 01:38:24 +00:00
• b686c65c9e Rework array slicing to piggy-back off python's code. Mike Auty 2016-12-14 23:26:31 +00:00
• 30fe381d00 Don't do work we don't have to. Mike Auty 2016-12-14 09:26:15 +00:00
• 6b4e80f1e5 Take a tiny bit longer, but properly check all the kernels in case a match is hiding later in the list. Mike Auty 2016-12-14 01:54:50 +00:00
• 90b024562f Rule out kernels that couldn't find a suitable MZ header. Mike Auty 2016-12-14 01:42:40 +00:00
• cad0cf2d4f Improve vmware segment calculations. Mike Auty 2016-12-14 01:31:22 +00:00
• 0f416b4765 Improve logging from the stacker. Mike Auty 2016-12-14 01:30:30 +00:00
• eec68707bd Improve the vmware layer (not sure it's finished yet though). Mike Auty 2016-12-14 00:28:05 +00:00
• 2c60747355 Minor fix, small but might as well fix it. Mike Auty 2016-12-14 00:27:41 +00:00
• 2c02df125a Fix the truncation of strings Mike Auty 2016-12-13 20:41:09 +00:00
• a32c7e27a9 Add in cryptic comments nearly lost during the vtypes purge. Mike Auty 2016-12-13 19:40:18 +00:00
• 058346b74d Ensure IntermediateSymbols can handle cross-table references. Mike Auty 2016-12-13 19:32:22 +00:00
• a2eedd1972 Clarify the lack of validation if jsonschema fails to import. Mike Auty 2016-12-13 14:20:03 +00:00
• fa427d2a2b Add in the starts of a vmware layer and stacker. Mike Auty 2016-12-13 02:21:15 +00:00
• 584c566687 Plug the configuration saving/restoring into the CLI, roughly. Mike Auty 2016-12-12 02:10:56 +00:00
• ed716ca12a Convert SymbolTableInterfaces to descend from ConfigurableInterface Mike Auty 2016-12-12 02:08:32 +00:00
• d43b294f36 Ensure we store all relevant config values rather than just those stores as variables. Mike Auty 2016-12-12 02:07:48 +00:00
• eae84fd8e0 Ensure we only stack when needed Mike Auty 2016-12-12 02:05:29 +00:00
• 046d1955b5 Ensure that only unfulfilled symbol requirements trigger the pdb scanner. Mike Auty 2016-12-12 02:04:20 +00:00
• e2d5f51ad5 Remove old and rotten code. Mike Auty 2016-12-12 00:25:03 +00:00
• 21c4e4bdef Refactor the segmented layer out of lime for use with other layers. Mike Auty 2016-12-11 19:13:35 +00:00
• b9dbc80baf Improve logging of automagic actitivies. Mike Auty 2016-12-11 18:16:02 +00:00
• 5d15f810e1 Tidy up the config namespace around automagic a little. Mike Auty 2016-12-11 13:58:17 +00:00
• e51c15ceb0 Add in rudimentary plugin selector. Mike Auty 2016-12-08 22:18:05 +00:00
• 9bb0745b83 Clean up the debug messages for pdbscanning. Mike Auty 2016-12-08 16:29:36 +00:00
• 2aebb99ee6 Slightly improve the output and get rid of pointless parameters. Mike Auty 2016-12-08 16:24:59 +00:00
• 8a0609e800 Add in a secondary scan to determine the kernel base in randomized kernel base systems. Mike Auty 2016-12-08 16:23:04 +00:00
• 13b1126b90 Guard against no progress_callback in intel layer. Mike Auty 2016-12-08 16:03:22 +00:00
• 482516d93d Rework the kvo finding code to allow for Win10 kernel base randomization. Mike Auty 2016-12-08 14:56:32 +00:00
• 555f587b15 Ensure the progress value for translation layer scanning is correct. Mike Auty 2016-12-08 12:08:42 +00:00
• 631ae07a26 Insert a check to use valid kernels where a pdb signature is found in multiple locations. Mike Auty 2016-12-08 11:55:46 +00:00
• 183ff67699 Attach the kernel virtual offset to intel spaces. Mike Auty 2016-12-07 16:00:31 +00:00
• 1f6fcd7bad Ensure that the value of pointers always fall within their layer. Mike Auty 2016-12-07 09:52:33 +00:00
• 797e51608e Move the masking code into the data layer. Mike Auty 2016-12-07 09:50:49 +00:00
• 6cb5d06d6d Ensure all offsets are normalized to fall within their layer's address range. Mike Auty 2016-12-07 00:07:57 +00:00
• 20d0e83e1d Ensure we don't ever round down when log-ing. Mike Auty 2016-12-07 00:05:47 +00:00
• 734b9a68b8 Ensure we use math.log correctly. Mike Auty 2016-12-06 23:40:21 +00:00
• 40694ff26c Add a note about precedence to the pdb loader. Mike Auty 2016-12-06 09:08:51 +00:00
• a064c76628 Ensure we initialize kvo, change the filename format and give human readable feedback on the choice of natives. Mike Auty 2016-12-06 02:44:50 +00:00
• 1c7de06bd0 Fix up issue with pointer sizes. Since cls is never used we're not losing information. Mike Auty 2016-12-06 02:44:11 +00:00
• c52bf7cb6f Pull out the appropriate natives based on the intermediate format data. Mike Auty 2016-12-04 23:50:13 +00:00
• 770a8ee42a Improve error handling to prevent endless recursion in template.__call__ Mike Auty 2016-12-04 11:17:48 +00:00
• 05ae4aa64a Fix up offset for PAE. Mike Auty 2016-12-04 10:24:33 +00:00
• d8b72cfc14 Add in checks and set the appropriate kernel location for all architectures. Mike Auty 2016-12-04 02:15:28 +00:00
• a0f7c81128 Reveal the register size in intel spaces. Mike Auty 2016-12-04 02:14:54 +00:00
• 4121895d4d Ensure the kernel virtual to physical offset mapping is correct. Mike Auty 2016-12-04 01:21:10 +00:00
• 2d9992fb83 Quick patch the CLI to accept filenames for testing. Mike Auty 2016-12-04 01:03:26 +00:00