Andrew C
6882415656
Linux - protect against corruption in mount data structures
2014-12-29 17:09:21 -06:00
Andrew C
970b8049a4
Linux - fix mount_cache
2014-12-02 22:04:40 -06:00
Andrew C
041823fb63
Linux - restrict IDT to Intel based captures
2014-12-02 21:47:43 -06:00
Andrew C
9bb1d535db
Linux - restrict info_regs to Intel samples
2014-12-02 21:41:06 -06:00
Andrew C
b1ee66da09
Linux - fix info_regs
2014-12-02 21:31:46 -06:00
Andrew C
696d535db6
Linux - find list_raw bug
2014-12-02 21:18:47 -06:00
gleeda
bfd9b66f41
adding back render_text to linux_apihooks because
...
it takes a really long time to get anything back.
this is because after getting text back with render_text
the plugin seems to hang. ran for 30+ mins after output obtained
not sure why it just hangs there yet...
2014-12-02 19:05:39 -05:00
gleeda
12f864f172
converted linux_apihooks
2014-12-02 17:29:46 -05:00
gleeda
6b115f52f6
converted linux_check_creds
2014-12-02 14:26:15 -05:00
gleeda
d418e4c83d
converted linux_inline_kernel
2014-12-02 14:09:27 -05:00
gleeda
264b42d14d
converted linux_check_fop
2014-12-02 14:04:49 -05:00
gleeda
6c79641cc8
converted linux_check_modules
2014-12-02 14:00:39 -05:00
gleeda
652f6ebb45
converted linux_check_syscall_arm
...
Note: haven't tested after conversion due to lack of samples
2014-12-02 13:57:33 -05:00
gleeda
0a0bb1dcc0
converted linux_check_syscall
2014-11-28 16:47:07 -05:00
gleeda
5f3e3e7adb
converted linux_check_idt
2014-11-28 16:39:20 -05:00
gleeda
ac0895bdff
converted linux_hidden_modules
2014-11-28 16:19:11 -05:00
gleeda
833b9acfa8
converted linux_cpuinfo
2014-11-28 16:15:40 -05:00
gleeda
8feabc70ed
converted linux_enumerate_files
2014-11-28 16:12:19 -05:00
gleeda
0363871d92
converted linux_ifconfig
2014-11-28 16:04:54 -05:00
gleeda
ae887c2e7e
converting linux_library_list
2014-11-28 16:00:51 -05:00
gleeda
dc289d161a
converted linux_ldrmodules
2014-11-28 15:47:04 -05:00
gleeda
ce89e31184
converting linux_elfs
2014-11-28 15:41:56 -05:00
gleeda
a343788f9e
converted linux_bash_hash
2014-11-28 15:38:16 -05:00
gleeda
b875b2693a
converted linux_bash
2014-11-28 15:35:12 -05:00
gleeda
59910b4722
converted linux_lsof
2014-11-28 14:58:29 -05:00
gleeda
2be492c7d7
changed misnamed file: netfiler -> netfilter
2014-11-28 14:49:08 -05:00
gleeda
73d44a81e6
converted linux_netfilter
2014-11-28 14:48:19 -05:00
gleeda
3f545d544d
converted linux_proc_maps.
...
may be slow, use --verbose
2014-11-28 14:42:47 -05:00
gleeda
c1f7944f28
converted linux_psxview
2014-11-28 14:37:18 -05:00
gleeda
dd12f088f1
converted linux_psenv
2014-11-28 14:31:49 -05:00
gleeda
63f8343963
converted psaux
2014-11-28 14:26:15 -05:00
gleeda
2174849eef
removing render_text from linux_pslist and linux_memmap. we're able to use --verbose for quick text
2014-11-28 14:22:47 -05:00
gleeda
4eccf1b573
converting linux_pslist and linux_memmap
2014-11-28 14:20:09 -05:00
Andrew C
74b73abe30
Linux - update pointer printed by check modules
2014-10-28 12:35:21 -05:00
Andrew C
49f99f627c
Linux - greatly improve performance of hidden_modules
2014-10-28 12:34:40 -05:00
Andrew C
ea1fbcc6df
Linux - update superblock name in linux_find_file
2014-10-27 23:05:20 -05:00
iMHLv2
74db572bf6
returning inside a generator broke pyinstaller
2014-10-25 19:03:32 -05:00
Andrew C
8ec4d6f957
Linux - make find_file more resillient to corrupted samples
2014-10-25 11:21:33 -05:00
Andrew C
c9599b11ae
Linux - remove unused code
2014-10-25 11:09:56 -05:00
Andrew C
7ab63e037d
Linux - add linux_getcwd
2014-10-24 12:33:24 -05:00
Andrew C
081194620c
Linux - update apihooks
2014-10-16 16:51:03 -05:00
Andrew C
d507100d12
Linux - update mount & file cache enumeration logic
2014-10-15 23:52:00 -05:00
Andrew C
b6a7ae43a9
Linux - update tmpfs
2014-10-13 15:05:43 -05:00
Andrew C
f124d07fdb
Linux - speed up virtual_process_from_physical_offset
2014-10-06 14:55:12 -05:00
Andrew C
b95fc2fac1
Linux - move apihooks check into overlay
2014-10-06 14:24:40 -05:00
Andrew C
28bc62a2c8
Linux - attempt to find names of system calls from file cache
2014-09-29 13:24:22 -05:00
iMHLv2
eac0900801
remove old debug statement
2014-09-18 00:49:36 -05:00
Andrew C
6cdd0b2eed
Linux - remove address from mount
2014-09-11 00:09:48 -05:00
Andrew C
3f7f3811e1
Linux - fix mount.py to be more robust
2014-09-10 23:31:16 -05:00
Andrew C
da8d19f964
linux - update netstat api
2014-09-09 20:23:04 -05:00