Hi,
The least amount of code I could write for a plugin is:
# -- START --
import volatility.commands as commands
class Hello(commands.Command):
"""Prints 'hello world'"""
def render_text(self, outfd, data):
outfd.write('Hello world!\n')
# -- END --
Obviously this doesn't do anything with the memory image.
Quick tips:
- outfd: the stream to which output is written (stdout)
- data: the data yielded by the plugin's calculate method (in this example,
inherits from commands.Command)
Good luck!
Adam
On 10 May 2016 at 12:38, P1kachu <[email protected]> wrote:
> Hello,
>
> I am having some trouble loading a simple plugin with the '--plugins=.'
> option. It seems to be loaded (there were some errors that were fixed
> thanks to volatility displaying them) but it doesn't appear in the
> --info list. If I try this option in one of the community folder, it
> works (the plugins appear).
> What is the basic requirement for a plugin to be recognized, and what
> could I miss ? I started mine based on one from the
> community folder (CsabaBarta/usnjrnl.py)
>
> Thank you,
>
> --
> Stanislas 'P1kachu' Lejay
> EPITA - LSE
> If you're sleeping, you're doing it wrong.
> _______________________________________________
> Vol-users mailing list
> [email protected]
> http://lists.volatilesystems.com/mailman/listinfo/vol-users
>
_______________________________________________
Vol-users mailing list
[email protected]
http://lists.volatilesystems.com/mailman/listinfo/vol-users
