112 Commits

Author	SHA1	Message	Date
forrest-orr	4d46f92f5f	CLR filter working/tested	2020-06-03 11:38:36 -04:00
forrest-orr	b86090ae31	Scan working	2020-06-02 18:17:30 -04:00
forrest-orr	0371f01cfe	Began recursive ref scanner	2020-06-02 16:12:28 -04:00
forrest-orr	26d98bc276	Full ref scan	2020-06-02 14:07:23 -04:00
forrest-orr	1532991adc	Debug prep for legacy vs SOS	2020-06-02 13:02:30 -04:00
forrest-orr	2bf547d60c	Debug	2020-06-01 16:57:06 -04:00
forrest-orr	959d4f8f6d	Added clr.dll .data section scans	2020-06-01 13:11:44 -04:00
forrest-orr	7abbf3e798	Added region size to Moneta ref scan	2020-06-01 09:41:16 -04:00
forrest-orr	d744ba9d27	Memory scan fixes	2020-06-01 09:29:21 -04:00
Forrest	540da677d3	Added external command for debug	2020-05-29 13:07:47 -07:00
Forrest	0735082a74	Update Process.cpp	2020-05-28 13:40:57 -07:00
forrest-orr	9bdb88679a	Added filter logic for unsigned modules, clr rwx heap, metadata modules	2020-05-11 16:08:04 -07:00
forrest-orr	e9b2437dcb	Added ClrMd command execution for PRV RWX	2020-05-09 20:55:50 -07:00
forrest-orr	cf2dc6ba90	Added .NET test DLLs and architecture output to Moneta	2020-04-23 12:36:26 -07:00
forrest-orr	798e0a4534	Update Process.cpp	2020-04-20 18:00:18 -07:00
forrest-orr	32a0cc2791	References working	2020-04-19 15:11:43 -07:00
forrest-orr	7387c865ac	Update Process.cpp	2020-04-19 14:42:23 -07:00
forrest-orr	af9731e5df	Update Process.cpp	2020-04-18 17:21:42 -07:00
forrest-orr	baa2352463	Update Process.cpp	2020-04-18 14:35:43 -07:00
forrest-orr	a6631314f1	Added base memory dump code for references	2020-04-18 13:11:20 -07:00
forrest-orr	a503df97d6	Moved user input to scanner context class	2020-04-17 18:28:00 -07:00
forrest-orr	7aab36160f	Added reference search function prototype	2020-04-16 18:38:28 -07:00
forrest-orr	1a004c8865	Update Process.cpp	2020-04-15 18:51:48 -07:00
forrest-orr	a6ad75bec6	PE type added to output	2020-04-13 17:48:09 -07:00
forrest-orr	a5f34ba2e7	Added PE methods for .NET, EXE, and DLL	2020-04-13 11:43:27 -07:00
forrest-orr	06739eaf87	Finished TEB/PEB 32/64 association	2020-04-08 10:07:14 -07:00
forrest-orr	bcaae8d60c	TEB query	2020-04-08 06:14:08 -07:00
forrest-orr	5b44cccfc0	Heap search via PEB for x86	2020-04-08 05:52:35 -07:00
forrest-orr	95df8a224b	Heaps queried from PEB x64	2020-04-08 05:27:39 -07:00
forrest-orr	47bfc553d4	Updating PEB code	2020-04-07 15:03:53 -07:00
forrest-orr	8860ed79f9	Adding PEB query for 32/64	2020-04-07 14:36:17 -07:00
forrest-orr	af112de137	Typedef re-factor and section size bug fix	2020-04-07 13:02:50 -07:00
forrest-orr	c64a338e55	Heap debugging	2020-04-06 16:22:16 -07:00
forrest-orr	c1fb911bcd	Added heap filtering and attribute output	2020-04-06 14:51:10 -07:00
forrest-orr	8c6edf21d8	Filtered private +rwx from clr.dll due to heaps	2020-04-05 14:17:49 -07:00
forrest-orr	61fb86cba7	Added heap list to process class	2020-04-05 13:59:59 -07:00
forrest-orr	eb09042031	Finished re-factor and added signing type distinction	2020-03-29 16:42:44 -07:00
forrest-orr	39e1a84a47	Typecast re-factor up to PeFile.cpp	2020-03-28 18:49:02 -07:00
forrest-orr	2c3df8bc56	Const vars/methods and processes namespace	2020-03-27 17:20:30 -07:00
forrest-orr	0c7b83f976	More cleanup	2020-03-26 16:34:17 -07:00
forrest-orr	50845f5614	Initial source polish	2020-03-24 16:23:07 -07:00
forrest-orr	9d1c5ee90f	Added new code banner	2020-03-22 17:03:23 -07:00
forrest-orr	10fa895243	Cleaned up headers	2020-03-22 16:20:32 -07:00
forrest-orr	d8f77b12b6	Fixed working set bug	2020-03-21 20:12:40 -07:00
forrest-orr	a833968b5c	Added banner and console color enum	2020-03-21 18:56:24 -07:00
forrest-orr	76c8aa237a	Added colors to output	2020-03-20 15:16:03 -07:00
forrest-orr	7759e96463	Consolidated interface verbosity	2020-03-20 11:13:56 -07:00
forrest-orr	224836077d	Consolidated classes/namespaces and headers	2020-03-18 14:37:25 -07:00
forrest-orr	a29df6563a	Re-structuring classes into namespaces	2020-03-18 11:28:52 -07:00
forrest-orr	d00a8e5f9b	Get/set methods and fixed private query bug	2020-03-17 16:07:39 -07:00