 gleeda
|
be20a9a4ec
|
converted impscan
|
2014-11-17 12:00:01 -05:00 |
|
|
iMHLv2
|
013506e7d7
|
refs #86 remove the is_valid_address check in impscan for base address
|
2014-09-12 11:10:28 -05:00 |
|
|
iMHLv2
|
8471ad3c26
|
disable the #include output in impscan idc format
|
2014-04-10 18:59:13 -05:00 |
|
|
iMHLv2
|
bdb732627a
|
refs #40 impscan uses MakeQword on 64-bits
|
2014-04-10 18:22:10 -05:00 |
|
|
iMHLv2
|
e5793a1253
|
get image size from peheader if impscan is used on an unlinked or hidden module
|
2014-04-10 18:18:55 -05:00 |
|
|
iMHLv2
|
e6ed7078f9
|
sync with r3581 of trunk
|
2014-01-17 14:21:55 -06:00 |
|
|
iMHLv2
|
f699e93a4f
|
sync with r3514
|
2013-10-08 01:04:26 -04:00 |
|
|
iMHLv2
|
d242168adb
|
initial commit of r3513 branch
|
2013-10-07 11:55:04 -04:00 |
|
|
awalters
|
4c7cc26502
|
Standardization of file headers. License clarification. Dumpfiles committed to trunk.
|
2013-10-08 04:16:13 +00:00 |
|
|
iMHLv2
|
345cecb041
|
remove the Exit() call from the IDC code generated by impscan's render_idc function. this exits the IDA application after importing labels, which is not what we want to do when using IDA interactively - the Exit() statement was leftover from when IDA was being used in background mode to create IDBs in batch
|
2013-07-03 01:36:47 +00:00 |
|
|
iMHLv2
|
a3dacd1b08
|
fix a bug in impscan.enum_apis() which adds mod.Dllbase to func_addr without checking if func_addr is None/NoneObject (which it will be in the exported function is forwarded). also make the NoneObject reason more descriptive so we get useful debugging information when encountering forwarded exports. spotted by carl pulley. fixes issue #403.
|
2013-04-09 14:59:43 +00:00 |
|
|
iMHLv2
|
680d676e49
|
use distorm3's DecomposeGenerator instead of Decompose, otherwise large amounts of memory can be consumed when data is all decomposed at once. fixes issue #400 reported by carl pulley
|
2013-04-03 16:25:48 +00:00 |
|
|
iMHLv2
|
e4b8caf53e
|
the --pid parameter to impscan should be an integer (comma separated strings are not accepted)
|
2012-11-23 16:32:11 +00:00 |
|
|
iMHLv2
|
f37e895f7c
|
make ImpScan.enum_apis() a @staticmethod so it can be called from volshell scripts etc without having to subclass ImpScan's plugin
|
2012-09-29 23:32:18 +00:00 |
|
|
iMHLv2
|
a4be56b1c7
|
all windows-only plugins should inherit from common.AbstractWindowsCommand instead of commands.Command - so they don't show up in --help output for Linux profiles
|
2012-08-26 17:14:46 +00:00 |
|
|
iMHLv2
|
9db11a27e5
|
fix an off-by-one error in the impscan plugin. use the new vad.Length property added in r2076
|
2012-07-24 19:39:48 +00:00 |
|
|
mike.auty@gmail.com
|
43ff231ada
|
Fix minor typo in impscan.
|
2012-07-17 16:09:48 +00:00 |
|
|
mike.auty@gmail.com
|
f7b46ccef5
|
Fix a minor error in netscan, and pylint the rest of the recently changed code.
|
2012-07-12 20:00:04 +00:00 |
|
|
iMHLv2
|
65507320be
|
prevent impscan from raising an IndexError when no imports are found. Fixes issue #300
|
2012-07-12 16:28:21 +00:00 |
|
|
iMHLv2
|
3292d8e67b
|
add impscan plugin for x86 and x64
|
2012-06-18 16:06:11 +00:00 |
|