 B Lebel
|
aeaeda538a
|
Added unified outputs to some modules. Also, added "offset" to the output allowing easier manual exploration of the file. Finally added "addr_limit" output to threads as it can be used to detect processess that leverage exploits to expand the addr_limit in order to modify kernel objects (e.g. Towelroot on Android).
|
2015-06-04 11:33:02 -04:00 |
|
|
gleeda
|
8a82587819
|
adding back pretty printing
unified output still intact for other renderings
|
2015-03-18 11:01:00 +00:00 |
|
|
Andrew C
|
3f96d09a5d
|
Linux - update help menus
|
2015-02-10 00:04:13 -06:00 |
|
|
gleeda
|
3f545d544d
|
converted linux_proc_maps.
may be slow, use --verbose
|
2014-11-28 14:42:47 -05:00 |
|
|
Andrew Case
|
ad83cdb506
|
Linux - update APIs
|
2014-08-15 11:11:09 -05:00 |
|
|
Andrew Case
|
db04f99482
|
Linux - update ldrmodules and minor proc_maps
|
2014-07-26 13:49:58 -05:00 |
|
|
Andrew C
|
76bd415c0b
|
Linux - switch all code to vm_name
|
2014-07-08 05:31:12 -05:00 |
|
|
iMHLv2
|
e6ed7078f9
|
sync with r3581 of trunk
|
2014-01-17 14:21:55 -06:00 |
|
|
iMHLv2
|
f699e93a4f
|
sync with r3514
|
2013-10-08 01:04:26 -04:00 |
|
|
iMHLv2
|
d242168adb
|
initial commit of r3513 branch
|
2013-10-07 11:55:04 -04:00 |
|
|
awalters
|
4c7cc26502
|
Standardization of file headers. License clarification. Dumpfiles committed to trunk.
|
2013-10-08 04:16:13 +00:00 |
|
|
iMHLv2
|
d15e9e252e
|
yet another attempt to fix the negative numbers in vm_area_struct for linux when using proc_maps
|
2013-04-02 11:24:23 +00:00 |
|
|
iMHLv2
|
edeee594a6
|
include the task ID in the table column for linux_proc_maps. otherwise when you view maps for multiple processes, you can't tell which range belongs to which process
|
2013-03-07 16:04:53 +00:00 |
|
|
iMHLv2
|
1f48e304e7
|
remove unnecessary import from proc_maps
|
2013-02-12 20:44:10 +00:00 |
|
|
iMHLv2
|
728a6a21d3
|
some whitespace in proc_maps
|
2013-02-12 20:43:10 +00:00 |
|
|
iMHLv2
|
1fa8f1800d
|
we don't need to create a new super_block object in linux_proc_maps, we can leverage the auto-dereference capability when just accessing the inode.i_sb attribute
|
2013-02-12 20:40:56 +00:00 |
|
|
iMHLv2
|
27f6029040
|
create a super_block object class with 'major' and 'minor' properties
|
2013-02-12 20:37:54 +00:00 |
|
|
iMHLv2
|
2e5ebc6120
|
create a Flags object for handling rwx, r-x style output for linux, instead of using the format_perms() method attached to a specific plugin
|
2013-02-12 20:27:29 +00:00 |
|
|
iMHLv2
|
ffd749a839
|
remove the mask_number() method from linux_proc_maps, its no longer needed
|
2013-02-12 19:35:38 +00:00 |
|
|
iMHLv2
|
ee0ac2406a
|
change the Pgoff column in linux_proc_maps to [addr] instead of decimal 6-char width
|
2013-02-05 04:51:13 +00:00 |
|
|
atcuno
|
dd44c49f8e
|
Linux - update proc_maps interface and add search_process_memory
|
2013-02-05 03:15:37 +00:00 |
|
|
atcuno
|
984f68dd88
|
Linux - change proc maps to table
|
2012-11-23 03:11:54 +00:00 |
|
|
atcuno
|
39150fc6b5
|
Linux - proc_maps remove an unneeded fixme
|
2012-09-10 20:07:06 +00:00 |
|
|
mike.auty@gmail.com
|
e017034023
|
Pylint, formatting and styles fixes for all linux plugins.
|
2012-09-10 15:06:57 +00:00 |
|
|
atcuno
|
8b0203cb70
|
Linux - move mask_number to proc_maps and make 64 bit aware
|
2012-09-09 21:13:39 +00:00 |
|
|
atcuno
|
b8c8e3ceca
|
Linux - make each plugin get its own address space
|
2012-09-09 18:18:57 +00:00 |
|
|
iMHLv2
|
41230fba3c
|
Linux - whitespace in proc_maps.py
|
2012-09-03 01:28:41 +00:00 |
|
|
iMHLv2
|
845045162b
|
minor changes to linux plugin descriptions for consistency
|
2012-08-26 17:25:25 +00:00 |
|
|
mike.auty@gmail.com
|
e5ae67f65a
|
Merge in most of linux-support.
|
2012-08-16 11:00:06 +00:00 |
|