commit: d4af2c179fda42135da14b73969608f9d0806ffe Author: layman <layman <AT> localhost> AuthorDate: Sun Aug 16 01:15:45 2015 +0000 Commit: Mike Auty <ikelos <AT> gentoo <DOT> org> CommitDate: Sun Aug 16 01:15:45 2015 +0000 URL: https://gitweb.gentoo.org/dev/ikelos.git/commit/?id=d4af2c17
Remove old vol-plugins ebuilds. app-forensics/vol-plugins-crypto/Manifest | 3 -- .../vol-plugins-crypto-1.0.ebuild | 38 ------------------- app-forensics/vol-plugins-malware/Manifest | 6 --- .../vol-plugins-malware-1.0.ebuild | 44 ---------------------- app-forensics/vol-plugins-moyix/Manifest | 7 ---- .../vol-plugins-moyix/vol-plugins-moyix-1.0.ebuild | 40 -------------------- app-forensics/vol-plugins-reg/Manifest | 2 - .../vol-plugins-reg/vol-plugins-reg-0.6.ebuild | 26 ------------- 8 files changed, 166 deletions(-) diff --git a/app-forensics/vol-plugins-crypto/Manifest b/app-forensics/vol-plugins-crypto/Manifest deleted file mode 100644 index 1fa3526..0000000 --- a/app-forensics/vol-plugins-crypto/Manifest +++ /dev/null @@ -1,3 +0,0 @@ -DIST cryptoscan.py 5720 RMD160 099028695e684515e6f9c4f8b43868af026ffaf1 SHA1 4241bca8edacb72a5fc5bfe9d739170f42a6b1b3 SHA256 c6d97346eefe7c27cda73ed711ea3225d509c5162ae346f8fa66c6159898c9c6 -DIST suspicious.py 6178 RMD160 e6d1813eb2853b5eba31437d81c6ab140281ab8a SHA1 c2640377095e963806b98169853668d1b4e15abc SHA256 7941afa01e6de182c8e7452a23908be86702fa9b691dea0d56ff0a6d2bcdda43 -EBUILD vol-plugins-crypto-1.0.ebuild 890 RMD160 6580fe1cd9e4110959d9f5cc20357b4ad469a629 SHA1 f90d3d78b58a3f26087c4a4553b43c9b475e7802 SHA256 51e7fd6844d263105184685c35185203cb44d5df1cad6ebf0dcf4037f8812947 diff --git a/app-forensics/vol-plugins-crypto/vol-plugins-crypto-1.0.ebuild b/app-forensics/vol-plugins-crypto/vol-plugins-crypto-1.0.ebuild deleted file mode 100644 index c65e246..0000000 --- a/app-forensics/vol-plugins-crypto/vol-plugins-crypto-1.0.ebuild +++ /dev/null @@ -1,38 +0,0 @@ -# Copyright 1999-2009 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: $ - -inherit python - -EAPI="2" - -DESCRIPTION="Volatility plugin for examining crypto in memory files" -HOMEPAGE="http://jessekornblum.com/tools/"; -SRC_URI="http://jessekornblum.com/tools/volatility/cryptoscan.py - http://jessekornblum.com/tools/volatility/suspicious.py"; -# Requires Andreas Schuster's enhancements to volatility -# http://mhl-malware-scripts.googlecode.com/files/driverirp.py - -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="~x86 ~amd64" -IUSE="" - -DEPEND="app-forensics/volatility" -RDEPEND="${DEPEND}" - -src_unpack() { - mkdir "${S}" - for i in ${A}; - do - echo "Copying ${i} from ${DISTDIR} to ${S}" - cp -L "${DISTDIR}/${i}" "${S}" - done -} - -src_install() { - local plugindir="$(python_get_sitedir)/memory_plugins" - insinto ${plugindir} - dodir ${plugindir} - doins "${S}"/* -} diff --git a/app-forensics/vol-plugins-malware/Manifest b/app-forensics/vol-plugins-malware/Manifest deleted file mode 100644 index 087a47b..0000000 --- a/app-forensics/vol-plugins-malware/Manifest +++ /dev/null @@ -1,6 +0,0 @@ -DIST idt.py 3163 RMD160 564600913cec56fad82e35e75538f8ef2cba5e16 SHA1 1e55018782cbcb0c8542e7e4757141448f480d62 SHA256 4ea358826d4f284f8f669a7bbddf4a6048c0fe3e83f98f973525cd1172d28b35 -DIST kernel_hooks.py 9500 RMD160 03cc8b782b801c84d0efe69907d9086d4d3598f9 SHA1 f976bb1ddf138bed8f0340049131045f51ae0d54 SHA256 5911d54bb2e4802feb9cc5915dbabde395a89cbf1fd0217626112646da04e055 -DIST malfind2.py 9807 RMD160 64eadef0d7505381bf11f6dfe4cd9ab1f5a75bc6 SHA1 7d57d811c70d0e29f5ef8463d6a0c1cf170f6d6c SHA256 8ad794435ad7a3cda7e3ec12525c781b14f5f09d6e37ffc39e5923ac07c304ec -DIST orphan_threads.py 5539 RMD160 007b90b90d89500962507da2d5c4e980ffd7b622 SHA1 21e7074ebdbd03908cb43c0143ccf971137b1767 SHA256 009239a031cd53a82378a815ce81803ad3b7d4e8bd6257f34e50a5833cc0bda9 -DIST usermode_hooks2.py 16977 RMD160 88bde5c7e797c80828bb41154ca81225e974dd83 SHA1 c4b0a7f72b9364e9f91651644b787eb9baa259a0 SHA256 fae684cb49922dbf0c7920c4195876805ed591887e1b34dd590472a2a5a55de1 -EBUILD vol-plugins-malware-1.0.ebuild 1193 RMD160 81199dcc07ec86a1019b13cb2d1f7dd8559a86a0 SHA1 b129f9232fc714be566e8d49dd74a1f0e4eb5b8a SHA256 c9fd45f59e3e3f32ba3ec263218fa7d32f0632781ae6e524b1fdb913a0ad64d4 diff --git a/app-forensics/vol-plugins-malware/vol-plugins-malware-1.0.ebuild b/app-forensics/vol-plugins-malware/vol-plugins-malware-1.0.ebuild deleted file mode 100644 index 3dc2aff..0000000 --- a/app-forensics/vol-plugins-malware/vol-plugins-malware-1.0.ebuild +++ /dev/null @@ -1,44 +0,0 @@ -# Copyright 1999-2009 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: $ - -inherit python - -EAPI="2" - -DESCRIPTION="Volatility plugin for examining malware in memory files" -HOMEPAGE="http://mhl-malware-scripts.googlecode.com/"; -SRC_URI="http://mhl-malware-scripts.googlecode.com/files/malfind2.py - http://mhl-malware-scripts.googlecode.com/files/idt.py - http://mhl-malware-scripts.googlecode.com/files/kernel_hooks.py - http://mhl-malware-scripts.googlecode.com/files/orphan_threads.py - http://mhl-malware-scripts.googlecode.com/files/usermode_hooks2.py"; -# Requires Andreas Schuster's enhancements to volatility -# http://mhl-malware-scripts.googlecode.com/files/driverirp.py - -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="~x86 ~amd64" -IUSE="" - -DEPEND="app-forensics/volatility" -RDEPEND="${DEPEND} - app-forensics/vol-plugins-driverscan - dev-python/pefile - dev-python/pydasm" - -src_unpack() { - mkdir "${S}" - for i in ${A}; - do - echo "Copying ${i} from ${DISTDIR} to ${S}" - cp -L "${DISTDIR}/${i}" "${S}" - done -} - -src_install() { - local plugindir="$(python_get_sitedir)/memory_plugins" - insinto ${plugindir} - dodir ${plugindir} - doins "${S}"/* -} diff --git a/app-forensics/vol-plugins-moyix/Manifest b/app-forensics/vol-plugins-moyix/Manifest deleted file mode 100644 index 40ad19f..0000000 --- a/app-forensics/vol-plugins-moyix/Manifest +++ /dev/null @@ -1,7 +0,0 @@ -DIST getsids.py 7232 RMD160 2622b7b6ef428275e82455b63944829f16f91c09 SHA1 ff320ebd3e81caa0398978b7a94318caf51d3d73 SHA256 a403bfbb98d49d9a73cc0f9928994f5ed3bcbf9ef249627e1bb0b86f2c24e41b -DIST lists.py 1093 RMD160 bb1cb4e23753ded75474230896ea33310adcaf87 SHA1 f7bd837e06f21c671a4e65192cf8b2ac97b9a833 SHA256 793b9a77a6b04c941c870cb4d22f3d8a9447a0431aaa954da04b4fcdee5dc140 -DIST moddump.py 5597 RMD160 d3cd52c656cd5bdf269f3aef8b6031c058d2bca1 SHA1 958f4e554ebbb8f56ff735080e82a0ec13f5d3aa SHA256 93771efe555c99d720371a5f6556aa9c734a49d514e782e0d3ceaf097019e522 -DIST ssdt.py 36746 RMD160 c1259f68ee9a7642867786f1a473b8dabc930a0b SHA1 5f9560fd515dc06f9cbc8ec8e731ca96cf0604d9 SHA256 71eb77f04e7191cf11c8cabdaa9f25e090b0eac2da091cbef4b46b393f1a2e3d -DIST threadqueues.py 17621 RMD160 5eaa8705fa1edbe798243a4c89cc0952f9774eaa SHA1 a3f00d52542d510fd743bfe158ba064a6cc2d96c SHA256 4e370bfb29f673373ea1cc36991b42457894d12a1eb8df720e8ef040484d9d0e -DIST volshell.py 16752 RMD160 61e2ba452ba4771142a8585632e506f9bdf58a43 SHA1 7724797ed6045818e71c3477b1b1837af0542701 SHA256 e0b0b23eb00bf25b160399916004afe34da1c8ae3ebb870e901d09147f310962 -EBUILD vol-plugins-moyix-1.0.ebuild 1036 RMD160 7ecc5914dd81435dcf88a8eb3cbc10825520a1c9 SHA1 9f367cbfe0b9df48da9f588bed62f754ff700f9d SHA256 4699391c48b9c53929f812e2a9150d76c51a08b92bf25399975dce99d6332512 diff --git a/app-forensics/vol-plugins-moyix/vol-plugins-moyix-1.0.ebuild b/app-forensics/vol-plugins-moyix/vol-plugins-moyix-1.0.ebuild deleted file mode 100644 index 1538d8d..0000000 --- a/app-forensics/vol-plugins-moyix/vol-plugins-moyix-1.0.ebuild +++ /dev/null @@ -1,40 +0,0 @@ -# Copyright 1999-2009 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: $ - -inherit python - -EAPI="2" - -DESCRIPTION="Volatility plugin for examining memory written by moyix" -HOMEPAGE="http://www.cc.gatech.edu/~brendan/volatility/"; -SRC_URI="http://www.cc.gatech.edu/~brendan/volatility/dl/getsids.py - http://www.cc.gatech.edu/~brendan/volatility/dl/lists.py - http://www.cc.gatech.edu/~brendan/volatility/dl/moddump.py - http://www.cc.gatech.edu/~brendan/volatility/dl/ssdt.py - http://www.cc.gatech.edu/~brendan/volatility/dl/threadqueues.py - http://www.cc.gatech.edu/~brendan/volatility/dl/volshell.py"; - -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="~x86 ~amd64" -IUSE="" - -DEPEND="app-forensics/volatility" -RDEPEND="${DEPEND}" - -src_unpack() { - mkdir "${S}" - for i in ${A}; - do - echo "Copying ${i} from ${DISTDIR} to ${S}" - cp -L "${DISTDIR}/${i}" "${S}" - done -} - -src_install() { - local plugindir="$(python_get_sitedir)/memory_plugins" - insinto ${plugindir} - dodir ${plugindir} - doins "${S}"/* -} diff --git a/app-forensics/vol-plugins-reg/Manifest b/app-forensics/vol-plugins-reg/Manifest deleted file mode 100644 index 456b483..0000000 --- a/app-forensics/vol-plugins-reg/Manifest +++ /dev/null @@ -1,2 +0,0 @@ -DIST volreg-0.6.tar.gz 15530 RMD160 d3a6ffffe04b76543ebf5d26ab0c85119b216ca1 SHA1 daadc6d5daf291f620a0fad35bcafc003257e428 SHA256 f7edb7de5040e902f6ce64a08b430eb39faf00ef01150a24c239835332ea7f4b -EBUILD vol-plugins-reg-0.6.ebuild 535 RMD160 ffe0a6b414a47137b5e5924985fe2178de6e0992 SHA1 79130403e8ac4a3b71db9962d610fc2bcb3d1563 SHA256 5120662f58c55fe73f3e14f8dc550844c320d2160d118794e04f347da3417288 diff --git a/app-forensics/vol-plugins-reg/vol-plugins-reg-0.6.ebuild b/app-forensics/vol-plugins-reg/vol-plugins-reg-0.6.ebuild deleted file mode 100644 index fd55200..0000000 --- a/app-forensics/vol-plugins-reg/vol-plugins-reg-0.6.ebuild +++ /dev/null @@ -1,26 +0,0 @@ -# Copyright 1999-2009 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: $ - -inherit python - -EAPI="2" - -DESCRIPTION="Volatility plugin for examining registry files in memory files" -HOMEPAGE="" -SRC_URI="http://www.cc.gatech.edu/%7Ebrendan/volatility/dl/volreg-${PV}.tar.gz"; - -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="~x86 ~amd64" -IUSE="" - -DEPEND="app-forensics/volatility" -RDEPEND="${DEPEND}" - -S=${WORKDIR} - -src_install() { - dodir $(python_get_sitedir) - cp -r "${S}"/* "${D}/$(python_get_sitedir)" -}
