admin/mandiant-GoReSym
1
0
Fork 0
mirror of https://github.com/mandiant/GoReSym synced 2026-06-08 15:40:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • c69cbd66c3 Add function signature reconstruction for Issue #14 (#79) master kamran ul haq 2026-06-01 23:55:53 +05:00
  • 78c02cc730 add support for Go runtime v1.26 (#85) v3.3 jtbennett-fe 2026-03-05 21:29:56 +00:00
  • e5bc135355 Add basic 1.25 support #83 Stephen Eckels 2026-02-26 19:03:24 +00:00
  • 0ead0ced52 Add lint and test jobs to CI pipeline (#82) kamran ul haq 2026-02-26 04:13:39 +05:00
  • d7f23b7a3e Add -strings flag to extract Go strings from binaries (#77) v3.2 kamran ul haq 2026-02-17 20:14:48 +05:00
  • a3ebe90f33 Refactor moduledata parsing using field offset tables (Issue #55) (#78) kamran ul haq 2026-01-13 23:46:33 +05:00
  • ccc8e1baf2 add cli support + ida 9 compatibility (#76) random 2025-12-02 03:28:24 +09:00
  • 734a93aaf6 Try to fix version in action v3.1.2 Stephen Eckels 2025-08-08 13:50:38 +00:00
  • cdb1ef7ae3 Fix yaml format issue Stephen Eckels 2025-08-08 13:34:03 +00:00
  • becfccb1e5 Add version to output, embed tag as version in action Stephen Eckels 2025-08-08 13:30:07 +00:00
  • abe68451f2 Fix release GH workflow v3.1.1 Stephen Eckels 2025-08-07 10:53:07 -04:00
  • 6dd1aeb4d8 Fix argument parsing bug, fix 1.19 and 1.17 moduldata fallthroughs v3.1 Stephen Eckels 2025-08-07 14:33:52 +00:00
  • cb029c6522 Add Go 1.24 support with ABIType parsing (#73) Krishna Yarlagadda 2025-08-07 06:15:01 -07:00
  • 2a4af8e09c Add logo Stephen Eckels 2025-06-06 15:18:20 +00:00
  • 0125e4c958 Fix argc bug Stephen Eckels 2025-02-21 14:56:33 -05:00
  • a6bdd54b6a Fix tests v3.0.2 Stephen Eckels 2025-02-11 19:39:21 -05:00
  • 45d5c9d606 Optimize and omit duplicate pattern matches (#66) (#68) v3.0.1 Stephen Eckels 2024-10-19 14:59:29 -04:00
  • 54a6712945 Remove candidate cache, use go channel for generator of candidates v3.0 Stephen Eckels 2024-10-19 14:21:17 -04:00
  • 534ca84b42 Fix range length calculations and add more regex tests Stephen Eckels 2024-08-19 16:29:32 +00:00
  • 784db2d9be Add more regex unit tests Stephen Eckels 2024-08-19 15:43:17 +00:00
  • d7d9a98b02 More fixes and improvements to pattern matching (#64) ViRb3 2024-08-19 16:14:16 +01:00
  • 82e128d8a0 fixed compatibility for ghidrathon and jython (#65) Annie Nie 2024-08-19 23:30:54 +10:00
  • c25fb120cd Fixes and improvements to pattern matching (#63) ViRb3 2024-08-16 20:30:15 +01:00
  • e3bc1884ad Optionally skip printing the function sections (#60) Philippe Ombredanne 2024-08-02 16:26:59 +02:00
  • 5e05d76eba Update objfile.go - OOB indexing fix 53-research-inlined-instance-data brigadier-general 2024-06-26 16:28:13 -05:00
  • 31e5ef1054 Update symtab.go - only calculating offset into runtime.__func.funcdata[] brigadier-general 2024-06-26 16:27:12 -05:00
  • 6c347c1abc Update main.go - removing excess print statements brigadier-general 2024-06-25 16:38:32 -05:00
  • 1018a1f717 Update objfile.go -- adding inlined data to candidate Func list correctly brigadier-general 2024-06-25 16:37:53 -05:00
  • 190dbd8c26 Update symtab.go -- correctly adding inlined data to list brigadier-general 2024-06-25 16:37:01 -05:00
  • 86761c0563 Update pclntab.go -- copying inline data to InlinedList correctly brigadier-general 2024-06-25 16:31:37 -05:00
  • 39b22a5db8 Update main.go brigadier-general 2024-06-24 14:01:36 -05:00
  • 52b00a96d4 Update disasm.go brigadier-general 2024-06-24 14:00:59 -05:00
  • 46c3b58cf0 Update objfile.go brigadier-general 2024-06-24 14:00:15 -05:00
  • 015e848ea8 Update symtab.go brigadier-general 2024-06-24 13:59:16 -05:00
  • cf6ae24cd2 Update pclntab.go brigadier-general 2024-06-24 13:58:33 -05:00
  • 128f46b161 reverting bad commits! -- pclntab.go brigadier-general 2024-06-10 16:06:09 -05:00
  • fce172d55e adding Gofunc field to LineTable -- pclntab.go brigadier-general 2024-06-10 16:04:33 -05:00
  • 8df84f7258 adding Gofunc param to NewLineTable() -- pclntab.go brigadier-general 2024-06-10 16:03:40 -05:00
  • e11a030731 typo fix brigadier-general 2024-06-10 15:57:55 -05:00
  • 1309938e62 adding Gofunc field to Pclntabcandidate struct and as param to New table() -- objfile.go brigadier-general 2024-06-10 15:52:14 -05:00
  • 5398a6a329 Reverting commits 82f4cfd, d0f297e, 0d5caca -- wrong branch brigadier-general 2024-06-10 15:42:17 -05:00
  • 82f4cfdfbf adding param to PCLineTable brigadier-general 2024-06-10 15:23:18 -05:00
  • d0f297e470 adding Gofunc field to pclntabcandidate struct brigadier-general 2024-06-10 15:21:28 -05:00
  • 0d5cacac35 adding Gofunc field input to NewLineTable brigadier-general 2024-06-10 15:19:52 -05:00
  • a116cfd197 adding Gofunc var in main brigadier-general 2024-06-10 15:16:22 -05:00
  • f767801d07 typo fix brigadier-general 2024-06-10 14:01:32 -05:00
  • de0de0f390 moving InlinedCall struct def brigadier-general 2024-06-10 14:00:30 -05:00
  • ad709c6a0d moving InlinedList to field in Func -- main.go brigadier-general 2024-06-10 13:43:40 -05:00
  • f5dc310d26 assigning Gofunc brigadier-general 2024-06-07 11:38:24 -05:00
  • 189e50ebc3 adding exported Gofunc to all ModuleData definitions brigadier-general 2024-06-07 11:27:52 -05:00
  • 35b5d92f77 Update inlinedFunctions.md brigadier-general 2024-06-06 12:45:50 -05:00
  • 911a044585 added description of how we validate inline call data brigadier-general 2024-06-06 12:43:45 -05:00
  • 41e39abd8c adding more references brigadier-general 2024-06-06 12:06:24 -05:00
  • 7dcddfc131 Create inlinedFunctions.md -- high-ish level write up on how we currently find inlined functions brigadier-general 2024-06-06 11:52:43 -05:00
  • 7b2141521d Update symtab.go. Func description comment fixed brigadier-general 2024-06-06 11:24:37 -05:00
  • 7c3536ddba fixing size for InlinedCall struct v1.16-1.18 brigadier-general 2024-06-05 19:19:07 -05:00
  • 105e95baf6 Update symtab.go -- fixed inline Id logic for go v1.20+ brigadier-general 2024-06-05 19:07:23 -05:00
  • b4fc18feec Update main.go -- fixed parsing v1.20+ inlining brigadier-general 2024-06-05 19:05:58 -05:00
  • 682a59f9f8 initial commit for inline func changes brigadier-general 2024-06-05 17:36:06 +00:00
  • b298ea42ba initial commit for inline func id changes brigadier-general 2024-06-05 17:35:15 +00:00
  • 1a342bc532 Update main.go brigadier-general 2024-06-05 17:33:52 +00:00
  • 62070ed5c3 Fixes to make goresym ghidrathon compatible (#57) Sven Ulke 2024-05-30 22:42:32 +02:00
  • cc91ae744f Fix workflow v2.7.4 Stephen Eckels 2024-05-07 10:49:58 -04:00
  • 6e65730ad1 Separate Release Workflow by OS Stephen Eckels 2024-05-07 10:46:32 -04:00
  • 7c37bd7476 Update README.md v2.7.3 Stephen Eckels 2024-04-15 10:01:19 -04:00
  • 80893bd677 Add about and license info Stephen Eckels 2024-04-15 13:58:43 +00:00
  • 76f8f7c2d3 Fix attempt logic in moduledata scan to ignore erroneous early hits and add them to the ignorelist, resolves #50 v2.7.2 Stephen Eckels 2024-02-23 12:49:00 -05:00
  • 0860a1b1b4 Update README.md Stephen Eckels 2024-02-08 14:59:59 -05:00
  • 9c9af9a984 Update README.md Stephen Eckels 2024-02-08 13:52:16 -05:00
  • 5e8c513087 Rollback module go version v2.7.1 Stephen Eckels 2024-02-08 17:52:17 +00:00
  • 7918cd1750 Rollback CI version Stephen Eckels 2024-02-08 17:50:18 +00:00
  • 9307a5e1e4 Merge some upstream changes v2.7.0 Stephen Eckels 2024-02-08 17:48:22 +00:00
  • a2567ab318 Fix 1.21 and 1.22 moduledata, add basic 1.22 support Stephen Eckels 2024-02-08 17:19:49 +00:00
  • d75fbb44e7 Merge branch 'master' of https://github.com/mandiant/GoReSym v2.6.4 Stephen Eckels 2023-11-28 14:41:49 -05:00
  • 7c3a6bb8e7 Remove x64 signature on nop, as it's not always present Stephen Eckels 2023-11-28 14:41:31 -05:00
  • c7be20ecb0 Update README.md Stephen Eckels 2023-11-27 12:34:18 -05:00
  • e1627a7d31 Update README.md Stephen Eckels 2023-11-27 12:33:57 -05:00
  • e867149423 Resolve #42 v2.6.3 Stephen Eckels 2023-11-10 11:39:36 -05:00
  • 7e2623758c Widen x64 signature, partial fix for #42 Stephen Eckels 2023-11-10 10:55:08 -05:00
  • a885617625 Catch typename decode issues fn_types Stephen Eckels 2023-10-23 10:33:06 -04:00
  • 71750b398b Quite errors Stephen Eckels 2023-10-19 10:30:58 -04:00
  • cdf5ea3c8d fixup naming scheme, remove old defs Stephen Eckels 2023-10-18 14:48:16 -04:00
  • ae9bca37a0 Add runtime definitions for all go version, improve import of weird types Stephen Eckels 2023-10-18 14:46:37 -04:00
  • 4dc2cc0d3a Improve ordering of operations and import quality Stephen Eckels 2023-10-17 16:36:50 -04:00
  • 9855b668d9 Start function type work Stephen Eckels 2023-10-13 13:48:06 -04:00
  • fd75e4c4f8 Use higher level type apis Stephen Eckels 2023-10-13 10:39:03 -04:00
  • 5f3a1ad725 Fix applied type IDA types, add function sig fn Stephen Eckels 2023-10-12 15:36:36 -04:00
  • 41c8b47e38 Import types into IDA Stephen Eckels 2023-10-12 14:11:03 -04:00
  • 5764f925cb Add type importing to IDA Stephen Eckels 2023-10-12 13:56:18 -04:00
  • ce1e7522e6 Fix basic type aliases Stephen Eckels 2023-10-12 12:57:51 -04:00
  • 6d33cb4e88 Change interface type name to match IDA Stephen Eckels 2023-10-12 10:49:26 -04:00
  • d5b0f4f60f Fix caching v2.6.2 Stephen Eckels 2023-10-09 17:31:52 -04:00
  • 60e1cf4d4d Add interface method name recovery v2.6.1 Stephen Eckels 2023-10-09 13:35:29 -04:00
  • 532f64c4dd Cache regex compilation Stephen Eckels 2023-10-09 10:55:17 -04:00
  • 9a35d6567e Fix action v2.6 Stephen Eckels 2023-10-06 14:04:37 -04:00
  • 3409ba662e Add build action Stephen Eckels 2023-10-06 14:00:41 -04:00
  • 773d0abf9b Merge pull request #40 from mandiant/revert-38-master Stephen Eckels 2023-10-06 13:46:05 -04:00
  • 402bbea3c0 Revert "parse field tag and interface method name" Stephen Eckels 2023-10-06 13:45:48 -04:00
  • 49f4186a87 Merge pull request #38 from virusdefender/master Stephen Eckels 2023-10-06 13:33:23 -04:00
  • ce406e4387 Merge branch 'master' into master Stephen Eckels 2023-10-06 13:33:15 -04:00