admin
|
36329805eb
|
fix: pefile now also has PE header as section
|
2023-02-13 19:10:55 +01:00 |
|
admin
|
a72296ecb9
|
refactor: mypy
|
2023-02-13 18:46:06 +01:00 |
|
admin
|
2524a66981
|
feature: PE analyzer fallback
|
2023-02-13 09:22:46 +01:00 |
|
admin
|
75939c32f9
|
fix: .bin files problem
|
2023-02-10 19:35:00 +01:00 |
|
admin
|
06a3ea0a39
|
refactor: rework verifications model
|
2023-02-10 11:53:20 +01:00 |
|
admin
|
6774e0e34f
|
refactor: split model
|
2023-02-10 10:34:04 +01:00 |
|
admin
|
7f17799400
|
fix: decode error on invalid section names
|
2023-02-04 19:17:48 +01:00 |
|
admin
|
49d13749e3
|
fix: bug where virtaddr_adj is None for some binaries
|
2023-02-04 19:10:38 +01:00 |
|
admin
|
1c9c29dd25
|
feature: files_results overview and support
|
2023-02-04 18:38:46 +01:00 |
|
admin
|
974db5709d
|
fix: double debug in office analyzer
|
2023-02-03 14:10:56 +01:00 |
|
admin
|
30f262fb50
|
refactor: translation of disassembly -> uiDiasmLines nicer
|
2023-02-03 14:09:20 +01:00 |
|
admin
|
c4da10d0f8
|
fix: dot.net disassembly bytes not showing
|
2023-02-02 20:52:18 +01:00 |
|
admin
|
5b484c8880
|
fix: include all il's
|
2023-02-02 20:44:38 +01:00 |
|
admin
|
c96f4a18ab
|
refactor: rename info to sectionInfo
|
2023-02-02 20:40:18 +01:00 |
|
admin
|
a2689dd7e9
|
feature: return all method names in info
|
2023-02-02 19:43:56 +01:00 |
|
admin
|
ee5af3ce80
|
refactor: IlMethod with offset, rva, correct headersize
|
2023-02-01 21:38:55 +01:00 |
|
admin
|
3f0ec950b0
|
fix: info output too many .text
|
2023-01-30 21:05:46 +01:00 |
|
admin
|
ee21b3d445
|
refactor: simplify getDotNetDissembly and DncilParser::Query()
|
2023-01-30 21:03:12 +01:00 |
|
admin
|
4ae4eaebef
|
fix: info output for dotnet
|
2023-01-30 20:52:09 +01:00 |
|
admin
|
250933e186
|
refactor: use file offset instead of rva for dotnet
|
2023-01-30 20:39:13 +01:00 |
|
admin
|
388b7daf7f
|
refactor: replaced .net de4dot with python dncil
|
2023-01-29 21:55:35 +01:00 |
|
admin
|
af3f8d6f8b
|
refactor: use dotnetfile library instead of my own parser
|
2023-01-16 19:48:09 +01:00 |
|
admin
|
d03a376647
|
feature: .net: support more sections, better signature support
|
2023-01-14 14:00:24 +01:00 |
|
admin
|
c0f810a847
|
fix: small .net improvement
|
2023-01-13 22:43:48 +01:00 |
|
admin
|
71298a4ca9
|
feature: more detailed .net sections (streams)
|
2023-01-13 14:59:50 +01:00 |
|
Dobin Rutishauser
|
4775a9c693
|
feature: more .net infos
|
2023-01-13 08:56:20 +01:00 |
|
Dobin Rutishauser
|
cb1ea4b233
|
ui: show file offset for disassembly lines
|
2023-01-12 11:00:42 +01:00 |
|
Dobin Rutishauser
|
eea1778b28
|
refactor: dict to DisasmLine
|
2023-01-12 10:15:33 +01:00 |
|
Dobin Rutishauser
|
b61e10d899
|
ui: display file offset in .net il
|
2023-01-11 07:47:38 +01:00 |
|
Dobin Rutishauser
|
c3a88d346a
|
refactor: hexdump with offset, and .net with header size
|
2023-01-11 07:13:49 +01:00 |
|
Dobin Rutishauser
|
1613e203f1
|
ui: small .net improvements
|
2023-01-10 08:24:14 +01:00 |
|
Dobin Rutishauser
|
39c9df55d8
|
refactor: improve dotnet analyzer
|
2023-01-10 05:50:20 +01:00 |
|
Dobin Rutishauser
|
7662ee29fb
|
fix: dot.net tests
|
2023-01-09 12:06:19 +01:00 |
|
Dobin Rutishauser
|
bb331771ac
|
feature: support disassembly of .net files
|
2023-01-09 10:44:54 +01:00 |
|
Dobin Rutishauser
|
65e9e8684a
|
fix: bug in pe parser
|
2023-01-08 11:07:41 +01:00 |
|
Dobin Rutishauser
|
c7356476e9
|
feature: ilspy parser
|
2023-01-08 11:07:21 +01:00 |
|
Dobin Rutishauser
|
2bbd94b92e
|
fix: PE augmentation
|
2023-01-06 10:54:24 +01:00 |
|
Dobin Rutishauser
|
d7073cecd3
|
refactor: office: make nicer, add comments
|
2023-01-05 07:45:31 +01:00 |
|
Dobin Rutishauser
|
f39effa2d9
|
fix: better vba code matching
|
2023-01-05 05:21:10 +01:00 |
|
Dobin Rutishauser
|
e7b88089d7
|
fix: vba offset bug
|
2023-01-05 05:09:16 +01:00 |
|
Dobin Rutishauser
|
d4abbef4dc
|
feature: multiple sections for each match
|
2023-01-04 06:40:56 +01:00 |
|
Dobin Rutishauser
|
b39f7f7502
|
feature: fileinfo
|
2023-01-04 05:59:44 +01:00 |
|
Dobin Rutishauser
|
ccbaff3eba
|
feature: section name for word documents
|
2023-01-04 05:10:55 +01:00 |
|
Dobin Rutishauser
|
96572d6558
|
feature: addr->section for word files support
|
2023-01-04 04:39:17 +01:00 |
|
Dobin Rutishauser
|
fa3ddda279
|
feature: better vba address converter
|
2023-01-02 07:09:00 +01:00 |
|
Dobin Rutishauser
|
792a6c9790
|
fix: make docx output work in webapp
|
2022-12-31 04:14:22 +01:00 |
|
Dobin Rutishauser
|
ee8c187ce3
|
fix: make pcodedmp output quiet
|
2022-12-31 03:03:15 +01:00 |
|
Dobin Rutishauser
|
34a6afdc6f
|
fix: office analyzer
|
2022-12-30 13:16:27 +01:00 |
|
Dobin Rutishauser
|
78e07713f7
|
feature: vba code dump/ correlation
|
2022-12-30 09:47:20 +01:00 |
|
Dobin Rutishauser
|
8815004c2d
|
log: error for directory entry
|
2022-12-30 09:44:00 +01:00 |
|