kd8bny / limeaide Goto Github PK

Hash the ram dump after completion. I think Im going to modify LiME to do this

in progress

We need a way for a user to import their old stuff into the manifest. This leads into the issue of tracking missing profiles

Background a session and then return to pull back dump

For acquiring memory dumps on AWS instance can you add an option to use ssh keys and not just passwords?

so we dont have to pass as many args

Deploy from local host from a flash drive or such
Probably need a way around deploying from paramiko

With this ability we would make usage for the target user much easier and affect the target system less

This is a function of LiME lets use it

I havent been able to reproduce it yet but it seems the issues is with the paramiko library

LiME updated to 1.8 now includes digest features and bug fixes natively. We may ditch the fork for this update

doesnt hurt anything

Upstream is gaining ability to compress image at source

There is a python elf/dwarf library lets try to use that instead

Me thinks I've done this correctly, but apparently not...

$ git clone https://github.com/kd8bny/LiMEaide
$ mkdir LiMEaide/tools/
$ wget https://github.com/kd8bny/LiME/archive/v1.7.8.zip
$ unzip v1.7.8.zip -d LiMEaide/tools/
$ mv LiMEaide/tools/LiME-1.7.8/ LiMEaide/tools/LiME
$ python3 LiMEaide/limeaide.py <IP>

Please download LiME and place in the ./tools/ dir

$ ls -l LiMEaide/tools/

drwxrwxr-x. 4 user user 4096 Jun 15 02:21 LiME

What have I done wrong here?

LiMEaide will not transfer the bz2 if compressed due to the fact that the filename switches

Tweak to whole saved jobs deal. Maybe save job meta in a json file and the clients elsewhere

df return can fail bad output is received. Something we can't cast as a float.

When asking the user for a valid volatility directory the check doesnt really validate if that directory is the one we want. It accepts if the folder exists and on startup the next time it re-requests. We also dont tell the user whats happening.

We need to see if insmod exists before calling and set the path in needed.
export PATH=$PATH:/usr/sbin/:sbin/'

(or lack of)

Fedora doesnt include lsb_release. Define a fallabck