hard tabs
parent
a4d9e59934
commit
4a3d2a18de
|
@ -12,10 +12,10 @@ class Hive
|
|||
hive_blob = open(hivepath, "rb") { |io| io.read }
|
||||
|
||||
@hive_regf = RegfBlock.new(hive_blob)
|
||||
return nil if !@hive_regf.root_key_offset
|
||||
return nil if !@hive_regf.root_key_offset
|
||||
|
||||
@root_key = NodeKey.new(hive_blob, 0x1000 + @hive_regf.root_key_offset)
|
||||
return nil if !@root_key.lf_record
|
||||
@root_key = NodeKey.new(hive_blob, 0x1000 + @hive_regf.root_key_offset)
|
||||
return nil if !@root_key.lf_record
|
||||
|
||||
keys = []
|
||||
root_key.lf_record.children.each do |key|
|
||||
|
|
|
@ -34,9 +34,9 @@ class NodeKey
|
|||
@class_name_length = hive[offset+0x4a, 2].unpack('c').first
|
||||
@name = hive[offset+0x4c, @name_length].to_s
|
||||
|
||||
windows_time = @timestamp
|
||||
unix_time = windows_time/10000000-11644473600
|
||||
ruby_time = Time.at(unix_time)
|
||||
windows_time = @timestamp
|
||||
unix_time = windows_time/10000000-11644473600
|
||||
ruby_time = Time.at(unix_time)
|
||||
|
||||
@readable_timestamp = ruby_time
|
||||
|
||||
|
|
|
@ -375,7 +375,7 @@ when "list_drivers"
|
|||
when "get_everything"
|
||||
Dir.foreach(ARGV[1]) do |file|
|
||||
next if file =~ /^\./
|
||||
next if ::File.directory?(ARGV[1] + "/" + file)
|
||||
next if ::File.directory?(ARGV[1] + "/" + file)
|
||||
|
||||
@hive = Rex::Registry::Hive.new(ARGV[1] + "/" + file)
|
||||
|
||||
|
|
Loading…
Reference in New Issue