 iMHLv2
|
ff0b5b63f2
|
refs #54 displaying types with dynamic attributes (i.e. callable offsets) is not supported in volshell
|
2014-08-16 14:49:54 -05:00 |
|
|
iMHLv2
|
2c0104e29f
|
refs #54 prevent a backtrace on volshell dt() when the struct has dynamic members
|
2014-08-05 09:48:35 -05:00 |
|
|
iMHLv2
|
eb1f3dcabc
|
add a recursive option to volshell's dt() command
|
2014-06-14 18:52:42 -05:00 |
|
|
gleeda
|
154dc52a5f
|
adding an option to take a physical offset for an eprocess in cc()
|
2014-05-06 17:01:17 -04:00 |
|
|
iMHLv2
|
71015e6e58
|
patch from Raphaël Vinot to support more IPython versions in volshell
|
2014-04-06 18:14:01 -05:00 |
|
|
iMHLv2
|
4cf109274f
|
the patch put in to fix https://code.google.com/p/volatility/issues/detail?id=479 is causing pointers in dt() to show up blank when using physical space
|
2014-03-27 17:02:57 -05:00 |
|
|
iMHLv2
|
c708e74baf
|
add addrspace(), proc(), getprocs(), and getmods() helper APIs to volshell
|
2014-03-25 01:17:16 -05:00 |
|
|
iMHLv2
|
38923365a8
|
print some unicode decode errors in volshell dt()
|
2014-03-07 09:51:08 -06:00 |
|
|
iMHLv2
|
e6ed7078f9
|
sync with r3581 of trunk
|
2014-01-17 14:21:55 -06:00 |
|
|
iMHLv2
|
fccccc80ac
|
Revert "closes #2. prevent fake vtype members (i.e. RealVadRoot) from raising exceptions when using dt() in volshell (the member doesn't really have an offset)"
This reverts commit 4c54642b5c48b08901de188c621b174e860138ab.
|
2013-10-31 22:49:16 -04:00 |
|
|
iMHLv2
|
3c9164127b
|
closes #2. prevent fake vtype members (i.e. RealVadRoot) from raising exceptions when using dt() in volshell (the member doesn't really have an offset)
|
2013-10-10 01:22:22 -04:00 |
|
|
iMHLv2
|
f699e93a4f
|
sync with r3514
|
2013-10-08 01:04:26 -04:00 |
|
|
iMHLv2
|
d242168adb
|
initial commit of r3513 branch
|
2013-10-07 11:55:04 -04:00 |
|
|
awalters
|
4c7cc26502
|
Standardization of file headers. License clarification. Dumpfiles committed to trunk.
|
2013-10-08 04:16:13 +00:00 |
|
|
gleeda
|
6530638f4c
|
volshell: modified to allow 16bit disassembly if specified
|
2013-06-04 14:38:38 +00:00 |
|
|
gleeda
|
fcb99c94a7
|
small change in the comment/doc because sc() means "show context" not "print context"
|
2013-04-22 17:41:34 +00:00 |
|
|
iMHLv2
|
361f6d7654
|
2nd attempt at fixing the volshell -p/--pid parameter to work across windows, linux, and mac volshells
|
2013-04-22 17:02:36 +00:00 |
|
|
iMHLv2
|
3415d66c11
|
revert r3390
|
2013-04-22 16:48:26 +00:00 |
|
|
iMHLv2
|
c5f5bc902c
|
the -p/--pid option to volshell has never worked because its added as a comma-separated string, but we handle it as an int
|
2013-04-22 16:46:32 +00:00 |
|
|
iMHLv2
|
439835cc2b
|
the option description for volshell's IMNAME parameter says its a process ID, which it isn't, and also says it can be comma-separated, which it cannot
|
2013-04-22 16:35:31 +00:00 |
|
|
gleeda
|
31d40f2e0a
|
added a few more helpful tips and functions to volshell
|
2013-04-08 01:04:45 +00:00 |
|
|
gleeda
|
3ac888cee2
|
volshell: changed s/address_space/space for dt() to conform with other commands
|
2013-02-04 18:25:28 +00:00 |
|
|
iMHLv2
|
5b7a13e56e
|
change the name of the current process in volshell from eproc to proc to make it more generic and re-usable for linux and mac (whose process struct is not eprocess)
|
2013-02-04 14:19:11 +00:00 |
|
|
iMHLv2
|
a4be56b1c7
|
all windows-only plugins should inherit from common.AbstractWindowsCommand instead of commands.Command - so they don't show up in --help output for Linux profiles
|
2012-08-26 17:14:46 +00:00 |
|
|
mike.auty@gmail.com
|
7a27e3504b
|
Potential fix for issue 301, and minor pylint on volshell.
|
2012-07-17 16:09:55 +00:00 |
|
|
iMHLv2
|
9e228e87aa
|
volshell now supports 64bit disasm, according to current Profile/AS or as specified by the user
|
2012-06-05 23:38:18 +00:00 |
|
|
iMHLv2
|
3a2c9c4164
|
add a simple dq command (print qwords at address) to volshell for x64 addresses
|
2012-05-21 15:26:52 +00:00 |
|
|
mike.auty@gmail.com
|
5cb4ab5dda
|
Fix up a large number of very minor pylint/indentation/trailing space issues across the tree.
|
2012-05-14 23:06:56 +00:00 |
|
|
mike.auty@gmail.com
|
d04c721dd1
|
Remove width parameter from db in volshell because it's completely unused.
|
2012-05-14 23:06:47 +00:00 |
|
|
mike.auty@gmail.com
|
821130fb2e
|
Convert all *args to *args, **kwargs in __init__ functions.
|
2012-03-08 20:58:06 +00:00 |
|
|
mike.auty@gmail.com
|
e3e089b096
|
Merge the newprofile branch into trunk.
|
2012-02-18 10:33:47 +00:00 |
|
|
mike.auty@gmail.com
|
18f3c0e487
|
Fix volshell breakage since the move to obj_offset.
|
2012-02-06 15:56:08 +00:00 |
|
|
mike.auty@gmail.com
|
8e213fcae8
|
Pylint fix for plugins not everyone uses.
|
2012-02-06 11:24:10 +00:00 |
|
|
mike.auty@gmail.com
|
d649b5b9b0
|
Fix inconsistency in commands.command class capitalization.
|
2012-02-05 23:36:33 +00:00 |
|
|
iMHLv2
|
9dd68998e0
|
allow volshell's dt() to accept an address space, handle callable offsets/members. Fixes Issue #172
|
2011-12-14 21:30:57 +00:00 |
|
|
iMHLv2
|
984f9f4a30
|
add scudette's hexdump to volatility.utils. fix lsadump, printkey, volshell to use it
|
2011-08-20 16:05:02 +00:00 |
|
|
mike.auty@gmail.com
|
117e5b466a
|
Move the Volatility-1.4_rc1 branch over to trunk.
|
2011-06-29 21:01:19 +00:00 |
|