 gleeda
|
9c1c613be2
|
Merge pull request #501 from mutedmouse/master
Added unified output to netstat (linux) and ppid to pslist (mac)
|
2018-12-06 10:22:54 -06:00 |
|
|
atcuno
|
343753c64f
|
Linux - update operations member checking to avoid RedHat stupidity
|
2018-10-10 22:43:57 -05:00 |
|
|
atcuno
|
2ce4c7f039
|
Add support for the new process tracking radix tree in kernels 4.15+
|
2018-10-01 12:41:25 -05:00 |
|
|
atcuno
|
a48aa66856
|
Linux - sanity check height member
|
2018-06-12 13:38:15 -05:00 |
|
|
atcuno
|
62b516682d
|
Linux - add cache for per-process file path lookups
|
2018-06-11 13:08:47 -05:00 |
|
|
atcuno
|
e7eaee242a
|
Linux - make type check specific in check_syscall
|
2018-06-11 09:49:41 -05:00 |
|
|
atcuno
|
9ad2619a95
|
Linux - add pidhashtable sanity checks
|
2018-06-06 11:19:28 -05:00 |
|
|
Andrew Case
|
1b81b83a6a
|
Linux - fix height calculation
|
2018-04-24 00:12:26 -05:00 |
|
|
Andrew Case
|
f567ace9a3
|
Linux - check tree height in file cache
|
2018-04-17 08:35:06 -05:00 |
|
|
Muted Mouse
|
19e4c5f001
|
add unified output
|
2018-03-24 17:22:36 -04:00 |
|
|
atcuno
|
682b340ae3
|
Linux - update psscan to debug.warning instead of debug.error
|
2018-02-22 14:24:28 -06:00 |
|
|
Andrew Case
|
2da5aec5ce
|
Linux - update system call API
|
2017-08-17 22:57:27 -05:00 |
|
|
Andrew Case
|
4b680c86ec
|
Linux - add support for indexes for both system call tables on 64 bit systems
|
2017-08-17 19:18:06 -05:00 |
|
|
Andrew Case
|
f56382a389
|
Linux - remove prints and update api for linux_moddump
|
2017-08-17 04:01:55 -05:00 |
|
|
Andrew Case
|
5a64808793
|
Linux - update check_fop through 4.13 and with more checks
|
2017-08-14 19:01:48 -05:00 |
|
|
Andrew Case
|
7f9f7715db
|
Linux - add stricter checks in cached file enumeration
|
2017-08-14 18:59:40 -05:00 |
|
|
Andrew Case
|
68065613c3
|
Linux - remove dead code from keyboard_notifiers
|
2017-08-01 09:29:42 -05:00 |
|
|
Andrew Case
|
0d8eb81eab
|
Linux - add support for file extraction through 4.13
|
2017-07-31 23:12:03 -05:00 |
|
|
Andrew Case
|
9c9315ac3e
|
Linux - add support for module scanning, extraction, and enumeration through 4.13
|
2017-07-31 14:11:01 -05:00 |
|
|
Andrew Case
|
c84c491a11
|
Update kref reference counter handling for 4.12
|
2017-07-31 13:07:26 -05:00 |
|
|
atcuno
|
f93390e09c
|
Linux - fix module reference
|
2017-06-09 13:38:58 -05:00 |
|
|
Fabio
|
1bdb319ab4
|
ktime_t is not a union anymore
|
2017-05-13 15:08:43 +02:00 |
|
|
Andrew Case
|
f803a13bc3
|
Merge pull request #403 from bneuburg/issue-392-fixed
Use read_long_long_phys for LinuxAMD64PagedMemory address
|
2017-05-08 08:40:07 -05:00 |
|
|
atcuno
|
3619c8a32f
|
Linux - add support for kernel physical ASLR in 4.9+ kernels
|
2017-05-04 18:06:37 -05:00 |
|
|
atcuno
|
51c8248eae
|
Linux - hardend arp against smear
|
2017-04-29 12:03:43 -05:00 |
|
|
atcuno
|
58c40cc97c
|
Linux - harden dmesg against smear
|
2017-04-29 12:00:09 -05:00 |
|
|
atcuno
|
b66d5f8da4
|
Linux - move boot time calculation into common for clear API access
|
2017-04-28 16:41:41 -05:00 |
|
|
Bastian Neuburger
|
595ef3c388
|
Use read_long_long_phys for LinuxAMD64PagedMemory address space insted of read_long_phys
|
2017-04-13 06:38:51 +02:00 |
|
|
atcuno
|
266005c070
|
Linux - add support through Linux 4.9 for cpuinfo
|
2016-11-18 10:28:09 -06:00 |
|
|
atcuno
|
bc824fd3e2
|
Linux - fix smearing issue check_fops and substantially improve performance
|
2016-11-18 10:18:08 -06:00 |
|
|
atcuno
|
b223e10889
|
Linux - remove print and add infinite loop protection to bash_hash
|
2016-10-25 16:03:35 -05:00 |
|
|
atcuno
|
4d5fbcb61a
|
Linux - re-enable strict validation of linux_bash_hash
|
2016-10-25 15:49:24 -05:00 |
|
|
atcuno
|
1d65795714
|
Linux - fix overflow error in ARP table size calculation
|
2016-10-25 13:50:29 -05:00 |
|
|
atcuno
|
2ff525da7d
|
Linux - fix hidden modules related to issue 273
|
2016-10-17 11:41:02 -05:00 |
|
|
atcuno
|
33d461c312
|
Linux - check for corruption on hash table size in arp table enumeration
|
2016-10-17 11:25:29 -05:00 |
|
|
atcuno
|
f85cb934d9
|
Linux - ensure address checks are done on int and not CType
|
2016-10-17 11:21:43 -05:00 |
|
|
atcuno
|
527bf4d6f2
|
Linux - add support for kaslr kernels
|
2016-10-17 10:20:43 -05:00 |
|
|
atcuno
|
534374da57
|
Linux - fix two bugs
|
2016-10-07 09:36:31 -05:00 |
|
|
atcuno
|
3d326487e2
|
Linux - add linux_psscan
|
2016-06-06 16:33:04 -05:00 |
|
|
atcuno
|
324dd7341d
|
Linux - fix file extraction for 4.6plus
|
2016-06-06 13:39:01 -05:00 |
|
|
atcuno
|
dd1a851b6e
|
Linux - final fix for arp
|
2016-06-06 12:33:33 -05:00 |
|
|
atcuno
|
9d220063ac
|
Linux - final AF_UNIX fix
|
2016-05-23 13:14:32 -05:00 |
|
|
atcuno
|
ec09685213
|
Linux - fix syscall index parsing
|
2016-05-22 19:00:01 -05:00 |
|
|
Michael Ligh
|
baeff2a4f1
|
add an initial safety check to guard against memory corruptions and the different implementations of the arp structures seen between opensuse kernels and others
|
2016-05-22 18:22:53 -05:00 |
|
|
Andrew Case
|
7de83e416e
|
Merge pull request #301 from haco20292/linux_dmesg_bugfix
Fix an exception in linux_dmesg
|
2016-05-09 12:38:12 -07:00 |
|
|
atcuno
|
5d873fb862
|
Linux - small updates
|
2016-04-29 14:37:08 -05:00 |
|
|
atcuno
|
95797fe1fb
|
Linux - don't print default entries in netscan
|
2016-04-26 15:47:00 -05:00 |
|
|
atcuno
|
f98d221ec1
|
Linux - avoid corruption in mount
|
2016-04-26 15:46:29 -05:00 |
|
|
atcuno
|
461ea435d6
|
Linux - make malfind print disasm correctly
|
2016-04-26 15:46:01 -05:00 |
|
|
haco20292
|
f2c094ed8f
|
Fix an exception in linux_dmesg
There're two "log_buf" symbols, one is d-type and the other is b-type.
|
2016-04-27 01:09:13 +08:00 |
|