volatility: 2.1 -> 2.3

This commit is contained in:
Thomas Penteker 2014-07-15 00:43:00 +02:00
parent f2bece5c6c
commit 7930f51575
3 changed files with 285 additions and 14 deletions

View File

@ -4,11 +4,11 @@ drwxr-xr-x root/root usr/bin/
drwxr-xr-x root/root usr/lib/
drwxr-xr-x root/root usr/lib/python2.7/
drwxr-xr-x root/root usr/lib/python2.7/site-packages/
drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility-2.1-py2.7.egg-info/
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility-2.1-py2.7.egg-info/PKG-INFO
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility-2.1-py2.7.egg-info/SOURCES.txt
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility-2.1-py2.7.egg-info/dependency_links.txt
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility-2.1-py2.7.egg-info/top_level.txt
drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility-2.3-py2.7.egg-info/
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility-2.3-py2.7.egg-info/PKG-INFO
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility-2.3-py2.7.egg-info/SOURCES.txt
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility-2.3-py2.7.egg-info/dependency_links.txt
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility-2.3-py2.7.egg-info/top_level.txt
drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility/
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/__init__.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/__init__.pyc
@ -24,6 +24,8 @@ drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility/
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/constants.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/debug.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/debug.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/dwarf.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/dwarf.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/exceptions.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/exceptions.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/fmtspec.py
@ -38,18 +40,30 @@ drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspac
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/__init__.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/amd64.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/amd64.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/arm.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/arm.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/crash.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/crash.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/hibernate.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/hibernate.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/hpak.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/hpak.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/ieee1394.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/ieee1394.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/intel.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/intel.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/legacyintel.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/legacyintel.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/lime.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/lime.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/macho.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/macho.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/paged.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/paged.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/standard.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/standard.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/vboxelf.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/vboxelf.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/vmware.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/vmware.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/bioskbd.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/bioskbd.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/common.py
@ -62,18 +76,80 @@ drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspac
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/crashinfo.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/dlldump.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/dlldump.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/dumpcerts.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/dumpcerts.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/dumpfiles.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/dumpfiles.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/envars.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/envars.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/evtlogs.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/evtlogs.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/fileparam.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/fileparam.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/filescan.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/filescan.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/getservicesids.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/getservicesids.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/getsids.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/getsids.pyc
drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/__init__.py (EMPTY)
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/__init__.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/atoms.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/atoms.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/clipboard.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/clipboard.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/constants.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/constants.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/desktops.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/desktops.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/eventhooks.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/eventhooks.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/gahti.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/gahti.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/gditimers.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/gditimers.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/messagehooks.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/messagehooks.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/screenshot.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/screenshot.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/sessions.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/sessions.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/userhandles.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/userhandles.pyc
drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/__init__.py (EMPTY)
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/__init__.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/vista.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/vista.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win2003.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win2003.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp0_x64_vtypes_gui.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp0_x64_vtypes_gui.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp0_x86_vtypes_gui.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp0_x86_vtypes_gui.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp1_x64_vtypes_gui.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp1_x64_vtypes_gui.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp1_x86_vtypes_gui.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp1_x86_vtypes_gui.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/xp.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/xp.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/win32k_core.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/win32k_core.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/windows.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/windows.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/windowstations.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/gui/windowstations.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/handles.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/handles.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/hibinfo.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/hibinfo.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/hpakinfo.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/hpakinfo.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/iehistory.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/iehistory.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/imagecopy.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/imagecopy.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/imageinfo.py
@ -82,6 +158,164 @@ drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility/plugins/addrspac
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/kdbgscan.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/kpcrscan.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/kpcrscan.pyc
drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/__init__.py (EMPTY)
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/__init__.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/arp.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/arp.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/banner.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/banner.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/bash.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/bash.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/check_afinfo.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/check_afinfo.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/check_creds.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/check_creds.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/check_evt_arm.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/check_evt_arm.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/check_fops.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/check_fops.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/check_idt.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/check_idt.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/check_modules.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/check_modules.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/check_syscall.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/check_syscall.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/check_syscall_arm.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/check_syscall_arm.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/common.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/common.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/cpuinfo.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/cpuinfo.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/dentry_cache.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/dentry_cache.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/dmesg.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/dmesg.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/dump_map.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/dump_map.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/find_file.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/find_file.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/flags.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/flags.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/ifconfig.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/ifconfig.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/iomem.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/iomem.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/keyboard_notifier.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/keyboard_notifier.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/linux_volshell.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/linux_volshell.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/linux_yarascan.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/linux_yarascan.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/lsmod.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/lsmod.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/lsof.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/lsof.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/mount.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/mount.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/mount_cache.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/mount_cache.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/netstat.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/netstat.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/pidhashtable.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/pidhashtable.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/pkt_queues.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/pkt_queues.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/proc_maps.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/proc_maps.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/psaux.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/psaux.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/pslist.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/pslist.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/pslist_cache.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/pslist_cache.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/pstree.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/pstree.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/psxview.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/psxview.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/route_cache.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/route_cache.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/sk_buff_cache.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/sk_buff_cache.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/slab_info.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/slab_info.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/tmpfs.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/tmpfs.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/tty_check.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/tty_check.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/vma_cache.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/linux/vma_cache.pyc
drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/__init__.py (EMPTY)
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/__init__.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/arp.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/arp.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/check_syscall_table.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/check_syscall_table.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/check_sysctl.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/check_sysctl.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/check_trap_table.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/check_trap_table.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/common.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/common.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/dead_procs.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/dead_procs.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/dmesg.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/dmesg.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/dump_map.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/dump_map.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/find_aslr_shift.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/find_aslr_shift.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/ifconfig.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/ifconfig.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/ip_filters.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/ip_filters.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/list_zones.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/list_zones.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/lsmod.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/lsmod.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/lsof.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/lsof.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/mac_volshell.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/mac_volshell.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/mac_yarascan.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/mac_yarascan.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/machine_info.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/machine_info.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/mount.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/mount.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/netstat.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/netstat.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/notifiers.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/notifiers.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/pgrp_hash_table.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/pgrp_hash_table.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/pid_hash_table.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/pid_hash_table.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/print_boot_cmdline.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/print_boot_cmdline.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/proc_maps.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/proc_maps.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/psaux.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/psaux.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/pslist.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/pslist.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/pstasks.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/pstasks.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/pstree.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/pstree.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/psxview.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/psxview.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/route.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/route.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/session_hash_table.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/session_hash_table.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/trustedbsd.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/trustedbsd.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/version.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mac/version.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/machoinfo.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/machoinfo.pyc
drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility/plugins/malware/
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/malware/__init__.py (EMPTY)
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/malware/__init__.pyc
@ -107,6 +341,10 @@ drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility/plugins/malware/
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/malware/threads.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/malware/timers.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/malware/timers.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mbrparser.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mbrparser.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mftparser.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/mftparser.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/moddump.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/moddump.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/modscan.py
@ -120,6 +358,20 @@ drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/__init__.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/basic.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/basic.pyc
drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/linux/
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/linux/__init__.py (EMPTY)
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/linux/__init__.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/linux/elf.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/linux/elf.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/linux/linux.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/linux/linux.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/linux/linux64.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/linux/linux64.pyc
drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/mac/
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/mac/__init__.py (EMPTY)
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/mac/__init__.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/mac/mac.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/mac/mac.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/native_types.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/native_types.pyc
drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/
@ -205,10 +457,10 @@ drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/xp_sp2_x86_vtypes.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/xp_sp3_x86_vtypes.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/xp_sp3_x86_vtypes.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/partitions.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/partitions.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/patcher.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/patcher.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/privileges.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/privileges.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/procdump.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/procdump.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/pstree.py
@ -228,10 +480,10 @@ drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility/plugins/registry
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/registry/printkey.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/registry/registryapi.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/registry/registryapi.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/registry/shellbags.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/registry/shellbags.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/registry/shimcache.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/registry/shimcache.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/reglist.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/reglist.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/sockets.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/sockets.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/sockscan.py
@ -242,10 +494,16 @@ drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility/plugins/registry
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/strings.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/taskmods.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/taskmods.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/timeliner.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/timeliner.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/userassist.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/userassist.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/vadinfo.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/vadinfo.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/vboxinfo.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/vboxinfo.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/vmwareinfo.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/vmwareinfo.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/volshell.py
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/plugins/volshell.pyc
-rw-r--r-- root/root usr/lib/python2.7/site-packages/volatility/protos.py
@ -284,6 +542,9 @@ drwxr-xr-x root/root usr/lib/python2.7/site-packages/volatility/win32/
drwxr-xr-x root/root usr/share/
drwxr-xr-x root/root usr/share/volatility/
drwxr-xr-x root/root usr/share/volatility/plugins/
drwxr-xr-x root/root usr/share/volatility/plugins/aspaces/
-rw-r--r-- root/root usr/share/volatility/plugins/aspaces/__init__.py (EMPTY)
-rw-r--r-- root/root usr/share/volatility/plugins/aspaces/ewf.py
-rw-r--r-- root/root usr/share/volatility/plugins/disablewarnings.py
-rw-r--r-- root/root usr/share/volatility/plugins/enumfunc.py
-rw-r--r-- root/root usr/share/volatility/plugins/example.py
@ -291,3 +552,13 @@ drwxr-xr-x root/root usr/share/volatility/plugins/
-rw-r--r-- root/root usr/share/volatility/plugins/psdispscan.py
-rw-r--r-- root/root usr/share/volatility/plugins/scanprof.py
-rw-r--r-- root/root usr/share/volatility/plugins/verinfo.py
drwxr-xr-x root/root usr/tools/
drwxr-xr-x root/root usr/tools/linux/
-rw-r--r-- root/root usr/tools/linux/Makefile
-rw-r--r-- root/root usr/tools/linux/module.c
drwxr-xr-x root/root usr/tools/linux/pmem/
-rw-r--r-- root/root usr/tools/linux/pmem/Makefile
-rw-r--r-- root/root usr/tools/linux/pmem/pmem.c
drwxr-xr-x root/root usr/tools/mac/
-rw-r--r-- root/root usr/tools/mac/convert.py
-rwxr-xr-x root/root usr/tools/vtype_diff.py

View File

@ -1 +1 @@
f4fb70fed999377583346417f53f1bff volatility-2.1.tar.gz
2628ac9ba0cb15e08381d3761e21ca3e volatility-2.3.tar.gz

View File

@ -4,9 +4,9 @@
# Depends on: python
name=volatility
version=2.1
version=2.3
release=1
source=(https://www.volatilesystems.com/volatility/$version/volatility-$version.tar.gz)
source=(https://volatility.googlecode.com/files/volatility-${version}.tar.gz)
build() {
cd $name-$version