Commit Graph

68 Commits

Author SHA1 Message Date
Alberto Ortega
6b8bcf189a house-keeping 2015-01-01 17:17:06 +01:00
Alberto Ortega
abb13ad351 Adds GetTickCount() sleep patching detection 2015-01-01 13:08:47 +01:00
Alberto Ortega
417963345c Minor bugfix 2014-12-31 20:28:11 +01:00
Alberto Ortega
02a6590271 Huge refactor, TRUE FALSE types added, utils functions added, fix encoding, trailing spaces, CRLF removed 2014-12-31 20:24:11 +01:00
Alberto Ortega
6912bb1565 Compilation fixes 2014-12-30 16:53:10 +01:00
Alberto Ortega
9816ed8eaa Adding device detection #13 (Thorsten commit) 2014-12-29 01:20:21 +01:00
Alberto Ortega
30892b519c Merge pull request #21 from Thorsten-Sick/GetDiskFreeSpace
Added GetDiskFreeSpace based disk space detection with the min size 60 G...
2014-12-29 00:44:46 +01:00
Thorsten Sick
f4dc13aec8 Added GetDiskFreeSpace based disk space detection with the min size 60 GB 2014-07-15 13:47:51 +02:00
Alberto Ortega
226200924d Merge pull request #18 from nilp0inter/unattended_and_retval2
Unattended analysis and return value. (Fixed)
2014-05-02 15:35:50 +02:00
Roberto Abdelkader Martínez Pérez
a8be2e22bd Restored binary file to previous verion. Let's the author compile it himself. 2014-05-02 13:44:57 +02:00
Roberto Abdelkader Martínez Pérez
78eff7982e Merge branch 'unattended_and_retval' into unattended_and_retval2 2014-05-02 13:37:58 +02:00
Roberto Abdelkader Martínez Pérez
9a760b8765 Changed strcmp for strncmp. 2014-05-02 13:31:34 +02:00
Alberto Ortega
05859e7db5 Merge pull request #16 from Thorsten-Sick/vbox_tools
scanning for VirtualBox tools
2014-05-02 13:13:48 +02:00
Roberto Abdelkader Martínez Pérez
c54d7516fd Added command line option -q that disables the last getchar() for unattended analysis.
Changed command return value to match the analysis result; with the following scheme:
 - Everything `OK` -> 0
 - Something `suspicious` but nothing `traced` -> 1
 - Something `traced` -> 2
2014-05-01 19:47:45 +02:00
Thorsten Sick
9477202717 scanning for VirtualBox tools 2014-04-03 15:07:12 +02:00
Thorsten Sick
c4edcc791e Adding device detection 2014-03-20 11:32:49 +01:00
Alberto Ortega
75299a4fc9 Merge pull request #12 from Thorsten-Sick/vbox_collection2
VBox tricks, code cleanup
2014-02-21 10:59:35 +01:00
Thorsten Sick
0bec600f71 Some code cleanup 2014-02-21 10:38:43 +01:00
Thorsten Sick
5fe5830875 Adding comments, some cleanup 2014-02-21 10:18:04 +01:00
Thorsten Sick
144e204c65 Removing Copy and Paste artifacts 2014-02-21 09:36:41 +01:00
Thorsten Sick
7dd7563aee Checking services in registry 2014-02-20 15:45:23 +01:00
Thorsten Sick
79bf3e7430 Added two more registry keys: FADT and RSDT in Hardware/ACPI 2014-02-20 12:01:13 +01:00
Thorsten Sick
e15a37eb96 Looking for VirtualBox processes 2014-02-20 11:48:16 +01:00
Alberto Ortega
b040fcf4bd Merge pull request #11 from Thorsten-Sick/vbox_collection
Vbox collection
2014-02-19 16:31:17 +01:00
Thorsten Sick
214bcadc4b Adding Walied Assar credits 2014-02-18 09:37:08 +01:00
Thorsten Sick
b45a1334c6 network share detection 2014-02-17 15:57:12 +01:00
Thorsten Sick
925db8543e Registry IDE device scanning 2014-02-17 14:58:14 +01:00
Thorsten Sick
6d80982d41 VirtualBox tray tool window detection 2014-02-17 11:53:40 +01:00
Thorsten Sick
69d2ffc190 VirtualBox pipe detection 2014-02-17 10:56:00 +01:00
Thorsten Sick
e2ea0340b6 ACPI key added 2014-02-17 10:15:24 +01:00
Thorsten Sick
2902f5f21f Added pseudo-device vm detection 2014-02-17 09:56:19 +01:00
Thorsten Sick
7830b7a7d6 Added missing sysfile2 to header file 2014-02-17 09:45:31 +01:00
Alberto Ortega
2ced233a84 Merge pull request #10 from Thorsten-Sick/vbox_mac
Vbox mac
2014-02-14 18:46:28 +01:00
Thorsten Sick
f0e2ce07f9 Looking for NICs with VirtualBox Mac addresses 2014-02-14 15:07:54 +01:00
Thorsten Sick
083926cf24 libraries added to Makefile 2014-02-14 15:02:27 +01:00
Alberto Ortega
b639688a7b Merge pull request #9 from Thorsten-Sick/multi_virtualbox_files_support
Multi virtualbox files support
2014-02-14 14:34:22 +01:00
Thorsten Sick
1f13f9bda4 Adding detection for system32 virtualbox dll and exe files 2014-02-13 16:47:07 +01:00
Thorsten Sick
af05de0f78 Supporting all drivers now 2014-02-13 16:33:29 +01:00
Alberto Ortega
33c836c913 Merge pull request #7 from Thorsten-Sick/linux_compile
lower case file name is essential for linux compilation
2014-02-13 15:59:55 +01:00
Thorsten Sick
34ada0bc8f lower case file name is essential for linux compilation 2014-02-13 14:10:29 +01:00
Alberto
f7275532a2 Minor change in README 2014-01-01 14:02:27 +01:00
Alberto
14b29d5b02 Bump v03 2014-01-01 14:00:09 +01:00
Alberto Ortega
3ade0a8ade Merge pull request #6 from espenfjo/master
Add Makefile for cross compiling on Linux
2013-11-19 00:19:05 -08:00
Espen Fjellvær Olsen
1bccb0a07d Add Makefile for cross compiling on Linux 2013-11-18 19:35:19 +01:00
Alberto Ortega
ecf2dfab81 Minor change in readme 2013-10-23 12:58:17 +02:00
Alberto Ortega
b273134f0c Minor change 2013-08-14 08:47:32 +02:00
Alberto
516e42caaa Minor change 2013-08-13 19:26:41 +02:00
Alberto Ortega
7955fb25c3 Minor change in readme 2013-07-04 15:25:06 +02:00
Alberto
6dc3bed8a1 Updated readme, added some more examples 2013-06-09 20:46:21 +02:00
Alberto
c31f7f5d44 Submitted version 2.5 2013-06-09 20:21:01 +02:00