Commit Graph

370 Commits

Author SHA1 Message Date
Andrew C 6882415656 Linux - protect against corruption in mount data structures 2014-12-29 17:09:21 -06:00
Andrew C 970b8049a4 Linux - fix mount_cache 2014-12-02 22:04:40 -06:00
Andrew C 041823fb63 Linux - restrict IDT to Intel based captures 2014-12-02 21:47:43 -06:00
Andrew C 9bb1d535db Linux - restrict info_regs to Intel samples 2014-12-02 21:41:06 -06:00
Andrew C b1ee66da09 Linux - fix info_regs 2014-12-02 21:31:46 -06:00
Andrew C 696d535db6 Linux - find list_raw bug 2014-12-02 21:18:47 -06:00
gleeda bfd9b66f41 adding back render_text to linux_apihooks because
it takes a really long time to get anything back.
this is because after getting text back with render_text
the plugin seems to hang.  ran for 30+ mins after output obtained
not sure why it just hangs there yet...
2014-12-02 19:05:39 -05:00
gleeda 12f864f172 converted linux_apihooks 2014-12-02 17:29:46 -05:00
gleeda 6b115f52f6 converted linux_check_creds 2014-12-02 14:26:15 -05:00
gleeda d418e4c83d converted linux_inline_kernel 2014-12-02 14:09:27 -05:00
gleeda 264b42d14d converted linux_check_fop 2014-12-02 14:04:49 -05:00
gleeda 6c79641cc8 converted linux_check_modules 2014-12-02 14:00:39 -05:00
gleeda 652f6ebb45 converted linux_check_syscall_arm
Note: haven't tested after conversion due to lack of samples
2014-12-02 13:57:33 -05:00
gleeda 0a0bb1dcc0 converted linux_check_syscall 2014-11-28 16:47:07 -05:00
gleeda 5f3e3e7adb converted linux_check_idt 2014-11-28 16:39:20 -05:00
gleeda ac0895bdff converted linux_hidden_modules 2014-11-28 16:19:11 -05:00
gleeda 833b9acfa8 converted linux_cpuinfo 2014-11-28 16:15:40 -05:00
gleeda 8feabc70ed converted linux_enumerate_files 2014-11-28 16:12:19 -05:00
gleeda 0363871d92 converted linux_ifconfig 2014-11-28 16:04:54 -05:00
gleeda ae887c2e7e converting linux_library_list 2014-11-28 16:00:51 -05:00
gleeda dc289d161a converted linux_ldrmodules 2014-11-28 15:47:04 -05:00
gleeda ce89e31184 converting linux_elfs 2014-11-28 15:41:56 -05:00
gleeda a343788f9e converted linux_bash_hash 2014-11-28 15:38:16 -05:00
gleeda b875b2693a converted linux_bash 2014-11-28 15:35:12 -05:00
gleeda 59910b4722 converted linux_lsof 2014-11-28 14:58:29 -05:00
gleeda 2be492c7d7 changed misnamed file: netfiler -> netfilter 2014-11-28 14:49:08 -05:00
gleeda 73d44a81e6 converted linux_netfilter 2014-11-28 14:48:19 -05:00
gleeda 3f545d544d converted linux_proc_maps.
may be slow, use --verbose
2014-11-28 14:42:47 -05:00
gleeda c1f7944f28 converted linux_psxview 2014-11-28 14:37:18 -05:00
gleeda dd12f088f1 converted linux_psenv 2014-11-28 14:31:49 -05:00
gleeda 63f8343963 converted psaux 2014-11-28 14:26:15 -05:00
gleeda 2174849eef removing render_text from linux_pslist and linux_memmap. we're able to use --verbose for quick text 2014-11-28 14:22:47 -05:00
gleeda 4eccf1b573 converting linux_pslist and linux_memmap 2014-11-28 14:20:09 -05:00
Andrew C 74b73abe30 Linux - update pointer printed by check modules 2014-10-28 12:35:21 -05:00
Andrew C 49f99f627c Linux - greatly improve performance of hidden_modules 2014-10-28 12:34:40 -05:00
Andrew C ea1fbcc6df Linux - update superblock name in linux_find_file 2014-10-27 23:05:20 -05:00
iMHLv2 74db572bf6 returning inside a generator broke pyinstaller 2014-10-25 19:03:32 -05:00
Andrew C 8ec4d6f957 Linux - make find_file more resillient to corrupted samples 2014-10-25 11:21:33 -05:00
Andrew C c9599b11ae Linux - remove unused code 2014-10-25 11:09:56 -05:00
Andrew C 7ab63e037d Linux - add linux_getcwd 2014-10-24 12:33:24 -05:00
Andrew C 081194620c Linux - update apihooks 2014-10-16 16:51:03 -05:00
Andrew C d507100d12 Linux - update mount & file cache enumeration logic 2014-10-15 23:52:00 -05:00
Andrew C b6a7ae43a9 Linux - update tmpfs 2014-10-13 15:05:43 -05:00
Andrew C f124d07fdb Linux - speed up virtual_process_from_physical_offset 2014-10-06 14:55:12 -05:00
Andrew C b95fc2fac1 Linux - move apihooks check into overlay 2014-10-06 14:24:40 -05:00
Andrew C 28bc62a2c8 Linux - attempt to find names of system calls from file cache 2014-09-29 13:24:22 -05:00
iMHLv2 eac0900801 remove old debug statement 2014-09-18 00:49:36 -05:00
Andrew C 6cdd0b2eed Linux - remove address from mount 2014-09-11 00:09:48 -05:00
Andrew C 3f7f3811e1 Linux - fix mount.py to be more robust 2014-09-10 23:31:16 -05:00
Andrew C da8d19f964 linux - update netstat api 2014-09-09 20:23:04 -05:00