a45fe45621
moddump: moving debug error to rendering function
2014-12-29 13:47:07 -05:00
d3d133fe7e
Change all the existing converted plugins over to the new mechanism.
2014-10-25 18:32:33 +01:00
6572510318
Convert moddump to use unified_output.
2014-10-03 11:09:02 +01:00
6c6f3844e4
condense ProcExeDump and ProcMemDump
...
dumping exe vs mem is now just a commandline arg to ProcDump. move main
methods to object classes of _IMAGE_DOS_HEADER - now its easier to
extract PE files from anywhere without inheriting from a plugin
2014-01-27 18:20:25 -06:00
e6ed7078f9
sync with r3581 of trunk
2014-01-17 14:21:55 -06:00
f699e93a4f
sync with r3514
2013-10-08 01:04:26 -04:00
d242168adb
initial commit of r3513 branch
2013-10-07 11:55:04 -04:00
4c7cc26502
Standardization of file headers. License clarification. Dumpfiles committed to trunk.
2013-10-08 04:16:13 +00:00
a48925ce7b
fix a % to format() in moddump
2013-02-05 20:09:37 +00:00
08eadf1dd5
remove the outfd parameter to ProcExeDump.get_code, get_image, and dump_pe. this addresses item 4 from comment #5 of issue #291 . the API breakage is documented on the APIChangePerVersion wiki page
2012-08-10 15:08:07 +00:00
712ac11fdf
prevent the 'NoneObject as string' warning when using regex with dlldump and moddump. we do plan on finding some other solution for all this after 2.1
2012-07-18 15:02:33 +00:00
f7b46ccef5
Fix a minor error in netscan, and pylint the rest of the recently changed code.
2012-07-12 20:00:04 +00:00
7a4021fea1
convert dlldump, procexedump, and moddump to table_header/row output. increases code sharing between the plugins. adds more descriptive error messages when pe files cannot be dumped. accomplishes goals 1, 2, and 3 from issue #291 . all parties agree commit is OK wrt 2.1 RC1
2012-07-10 18:27:08 +00:00
33cbf31032
Apply SanityCheckExceptions that can be disabled/ignored using the --unsafe/-u flag. Fixes issue 243.
2012-07-07 19:19:58 +00:00
7366f215ce
Change the moddump offset flag to a base flag to better fit the values. Fixes issue 254.
2012-05-14 20:43:09 +00:00
821130fb2e
Convert all *args to *args, **kwargs in __init__ functions.
2012-03-08 20:58:06 +00:00
dd5c5b3a1b
change all plugins that print Unknown to UNKNOWN for consistency. Fixes Issue #193
2012-01-24 15:48:44 +00:00
bbd15a5dd0
allow dlldump to work on PE's not in the PEB list. remove try/except block from moddump. Fixes Issue #109
2011-11-30 18:25:17 +00:00
1220d59ba7
move find_space to win32.tasks and extend _EPROCESS for DLL listings. Fixes Issue #160
2011-10-26 20:10:43 +00:00
117e5b466a
Move the Volatility-1.4_rc1 branch over to trunk.
2011-06-29 21:01:19 +00:00
gleeda