Progress on various modules

Imanol-Mikel Barba Sabariego
1 parent dbab5089
Showing 10 changed files with 188 additions and 102 deletions
.idea/workspace.xml
__pycache__/tomb.cpython-34.pyc
digger.py
modules/__pycache__/info.cpython-34.pyc
modules/__pycache__/mft.cpython-34.pyc
modules/__pycache__/winreg.cpython-34.pyc
modules/info.py
modules/mft.py
modules/winreg.py
tomb.py
@@ -2,7 +2,12 @@
 <project version="4">
   <component name="ChangeListManager">
     <list default="true" id="33419617-7da8-422e-9ac6-68e0b317ebf8" name="Default" comment="">
+      <change type="NEW" beforePath="" afterPath="$PROJECT_DIR$/modules/info.py" />
+      <change type="NEW" beforePath="" afterPath="$PROJECT_DIR$/modules/winreg.py" />
+      <change type="MODIFICATION" beforePath="$PROJECT_DIR$/.idea/workspace.xml" afterPath="$PROJECT_DIR$/.idea/workspace.xml" />
+      <change type="MODIFICATION" beforePath="$PROJECT_DIR$/digger.py" afterPath="$PROJECT_DIR$/digger.py" />
       <change type="MODIFICATION" beforePath="$PROJECT_DIR$/modules/mft.py" afterPath="$PROJECT_DIR$/modules/mft.py" />
+      <change type="MODIFICATION" beforePath="$PROJECT_DIR$/tomb.py" afterPath="$PROJECT_DIR$/tomb.py" />
     </list>
     <ignored path="gravedigger.iws" />
     <ignored path=".idea/workspace.xml" />
@@ -27,21 +32,11 @@
   </component>
   <component name="FileEditorManager">
     <leaf>
-      <file leaf-file-name="digger.sh" pinned="false" current-in-tab="false">
-        <entry file="file://$PROJECT_DIR$/scripts/digger.sh">
-          <provider selected="true" editor-type-id="text-editor">
-            <state relative-caret-position="133">
-              <caret line="7" column="26" selection-start-line="7" selection-start-column="26" selection-end-line="7" selection-end-column="26" />
-              <folding />
-            </state>
-          </provider>
-        </entry>
-      </file>
-      <file leaf-file-name="digger.py" pinned="false" current-in-tab="false">
+      <file leaf-file-name="digger.py" pinned="false" current-in-tab="true">
         <entry file="file://$PROJECT_DIR$/digger.py">
           <provider selected="true" editor-type-id="text-editor">
-            <state relative-caret-position="-190">
-              <caret line="11" column="0" selection-start-line="11" selection-start-column="0" selection-end-line="11" selection-end-column="0" />
+            <state relative-caret-position="446">
+              <caret line="75" column="13" selection-start-line="75" selection-start-column="13" selection-end-line="75" selection-end-column="13" />
               <folding>
                 <element signature="e#25#38#0" expanded="true" />
               </folding>
@@ -62,8 +57,8 @@
       <file leaf-file-name="module.py" pinned="false" current-in-tab="false">
         <entry file="file://$PROJECT_DIR$/module.py">
           <provider selected="true" editor-type-id="text-editor">
-            <state relative-caret-position="304">
-              <caret line="16" column="58" selection-start-line="16" selection-start-column="58" selection-end-line="16" selection-end-column="58" />
+            <state relative-caret-position="152">
+              <caret line="8" column="21" selection-start-line="8" selection-start-column="21" selection-end-line="8" selection-end-column="21" />
               <folding />
             </state>
           </provider>
@@ -72,7 +67,7 @@
       <file leaf-file-name="ntfsvol.py" pinned="false" current-in-tab="false">
         <entry file="file://$PROJECT_DIR$/vars/ntfsvol.py">
           <provider selected="true" editor-type-id="text-editor">
-            <state relative-caret-position="542">
+            <state relative-caret-position="608">
               <caret line="32" column="29" selection-start-line="32" selection-start-column="29" selection-end-line="32" selection-end-column="29" />
               <folding>
                 <element signature="e#0#31#0" expanded="true" />
@@ -91,11 +86,11 @@
           </provider>
         </entry>
       </file>
-      <file leaf-file-name="mft.py" pinned="false" current-in-tab="true">
+      <file leaf-file-name="mft.py" pinned="false" current-in-tab="false">
         <entry file="file://$PROJECT_DIR$/modules/mft.py">
           <provider selected="true" editor-type-id="text-editor">
-            <state relative-caret-position="190">
-              <caret line="10" column="23" selection-start-line="10" selection-start-column="23" selection-end-line="10" selection-end-column="23" />
+            <state relative-caret-position="0">
+              <caret line="0" column="0" selection-start-line="0" selection-start-column="0" selection-end-line="25" selection-end-column="0" />
               <folding>
                 <element signature="e#0#25#0" expanded="true" />
               </folding>
@@ -103,31 +98,45 @@
           </provider>
         </entry>
       </file>
-      <file leaf-file-name="tomb.py" pinned="false" current-in-tab="false">
-        <entry file="file://$PROJECT_DIR$/tomb.py">
+      <file leaf-file-name="winreg.py" pinned="false" current-in-tab="false">
+        <entry file="file://$PROJECT_DIR$/modules/winreg.py">
           <provider selected="true" editor-type-id="text-editor">
-            <state relative-caret-position="190">
-              <caret line="10" column="25" selection-start-line="10" selection-start-column="25" selection-end-line="10" selection-end-column="25" />
-              <folding />
+            <state relative-caret-position="323">
+              <caret line="17" column="12" selection-start-line="17" selection-start-column="12" selection-end-line="18" selection-end-column="10" />
+              <folding>
+                <element signature="e#0#25#0" expanded="true" />
+              </folding>
             </state>
           </provider>
         </entry>
       </file>
-      <file leaf-file-name="modulevar.py" pinned="false" current-in-tab="false">
-        <entry file="file://$PROJECT_DIR$/modulevar.py">
+      <file leaf-file-name="info.py" pinned="false" current-in-tab="false">
+        <entry file="file://$PROJECT_DIR$/modules/info.py">
+          <provider selected="true" editor-type-id="text-editor">
+            <state relative-caret-position="266">
+              <caret line="14" column="22" selection-start-line="14" selection-start-column="22" selection-end-line="14" selection-end-column="22" />
+              <folding>
+                <element signature="e#0#25#0" expanded="true" />
+              </folding>
+            </state>
+          </provider>
+        </entry>
+      </file>
+      <file leaf-file-name="tomb.py" pinned="false" current-in-tab="false">
+        <entry file="file://$PROJECT_DIR$/tomb.py">
           <provider selected="true" editor-type-id="text-editor">
             <state relative-caret-position="114">
-              <caret line="6" column="21" selection-start-line="6" selection-start-column="21" selection-end-line="6" selection-end-column="21" />
+              <caret line="6" column="27" selection-start-line="6" selection-start-column="27" selection-end-line="6" selection-end-column="27" />
               <folding />
             </state>
           </provider>
         </entry>
       </file>
-      <file leaf-file-name="__init__.py" pinned="false" current-in-tab="false">
-        <entry file="file://$PROJECT_DIR$/modules/__init__.py">
+      <file leaf-file-name="modulevar.py" pinned="false" current-in-tab="false">
+        <entry file="file://$PROJECT_DIR$/modulevar.py">
           <provider selected="true" editor-type-id="text-editor">
-            <state relative-caret-position="0">
-              <caret line="0" column="0" selection-start-line="0" selection-start-column="0" selection-end-line="0" selection-end-column="0" />
+            <state relative-caret-position="114">
+              <caret line="6" column="21" selection-start-line="6" selection-start-column="21" selection-end-line="6" selection-end-column="21" />
               <folding />
             </state>
           </provider>
@@ -152,7 +161,6 @@
         <option value="$PROJECT_DIR$/dig.service" />
         <option value="$PROJECT_DIR$/modules/module.py" />
         <option value="$PROJECT_DIR$/modulevar.py" />
-        <option value="$PROJECT_DIR$/digger.py" />
         <option value="$PROJECT_DIR$/module.py" />
         <option value="$PROJECT_DIR$/scripts/digger.sh" />
         <option value="$PROJECT_DIR$/runcmd.py" />
@@ -160,6 +168,9 @@
         <option value="$PROJECT_DIR$/scripts/list_ntfs.sh" />
         <option value="$PROJECT_DIR$/tomb.py" />
         <option value="$PROJECT_DIR$/modules/mft.py" />
+        <option value="$PROJECT_DIR$/modules/info.py" />
+        <option value="$PROJECT_DIR$/modules/winreg.py" />
+        <option value="$PROJECT_DIR$/digger.py" />
       </list>
     </option>
   </component>
@@ -170,10 +181,10 @@
     <sorting>DEFINITION_ORDER</sorting>
   </component>
   <component name="ProjectFrameBounds">
-    <option name="x" value="1915" />
-    <option name="y" value="31" />
+    <option name="x" value="2113" />
+    <option name="y" value="215" />
     <option name="width" value="1930" />
-    <option name="height" value="1174" />
+    <option name="height" value="1173" />
   </component>
   <component name="ProjectLevelVcsManager" settingsEditedManually="false">
     <OptionsSetting value="true" id="Add" />
@@ -244,20 +255,6 @@
               <option name="myItemType" value="com.intellij.ide.projectView.impl.nodes.PsiDirectoryNode" />
             </PATH_ELEMENT>
             <PATH_ELEMENT>
-              <option name="myItemId" value="scripts" />
-              <option name="myItemType" value="com.intellij.ide.projectView.impl.nodes.PsiDirectoryNode" />
-            </PATH_ELEMENT>
-          </PATH>
-          <PATH>
-            <PATH_ELEMENT>
-              <option name="myItemId" value="gravedigger" />
-              <option name="myItemType" value="com.intellij.ide.projectView.impl.nodes.ProjectViewProjectNode" />
-            </PATH_ELEMENT>
-            <PATH_ELEMENT>
-              <option name="myItemId" value="gravedigger" />
-              <option name="myItemType" value="com.intellij.ide.projectView.impl.nodes.PsiDirectoryNode" />
-            </PATH_ELEMENT>
-            <PATH_ELEMENT>
               <option name="myItemId" value="modules" />
               <option name="myItemType" value="com.intellij.ide.projectView.impl.nodes.PsiDirectoryNode" />
             </PATH_ELEMENT>
@@ -508,6 +505,9 @@
   <component name="ShelveChangesManager" show_recycled="false">
     <option name="remove_strategy" value="false" />
   </component>
+  <component name="SvnConfiguration">
+    <configuration />
+  </component>
   <component name="TaskManager">
     <task active="true" id="Default" summary="Default task">
       <changelist id="33419617-7da8-422e-9ac6-68e0b317ebf8" name="Default" comment="" />
@@ -519,7 +519,7 @@
     <servers />
   </component>
   <component name="ToolWindowManager">
-    <frame x="1915" y="31" width="1930" height="1174" extended-state="6" />
+    <frame x="2113" y="215" width="1930" height="1173" extended-state="0" />
     <editor active="true" />
     <layout>
       <window_info id="Project" active="false" anchor="left" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="true" show_stripe_button="true" weight="0.25" sideWeight="0.5" order="0" side_tool="false" content_ui="combo" />
@@ -528,7 +528,7 @@
       <window_info id="Database" active="false" anchor="right" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.33" sideWeight="0.5" order="-1" side_tool="false" content_ui="tabs" />
       <window_info id="Python Console" active="false" anchor="bottom" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.33" sideWeight="0.5" order="-1" side_tool="false" content_ui="tabs" />
       <window_info id="Version Control" active="false" anchor="bottom" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.33" sideWeight="0.5" order="-1" side_tool="false" content_ui="tabs" />
-      <window_info id="Run" active="false" anchor="bottom" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="true" show_stripe_button="true" weight="0.32992566" sideWeight="0.5" order="2" side_tool="false" content_ui="tabs" />
+      <window_info id="Run" active="false" anchor="bottom" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="true" show_stripe_button="true" weight="0.33023256" sideWeight="0.5" order="2" side_tool="false" content_ui="tabs" />
       <window_info id="Structure" active="false" anchor="left" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.25" sideWeight="0.5" order="1" side_tool="false" content_ui="tabs" />
       <window_info id="Terminal" active="false" anchor="bottom" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.33" sideWeight="0.5" order="-1" side_tool="false" content_ui="tabs" />
       <window_info id="Favorites" active="false" anchor="left" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.33" sideWeight="0.5" order="-1" side_tool="true" content_ui="tabs" />
@@ -542,6 +542,14 @@
       <window_info id="Ant Build" active="false" anchor="right" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.25" sideWeight="0.5" order="1" side_tool="false" content_ui="tabs" />
     </layout>
   </component>
+  <component name="Vcs.Log.UiProperties">
+    <option name="RECENTLY_FILTERED_USER_GROUPS">
+      <collection />
+    </option>
+    <option name="RECENTLY_FILTERED_BRANCH_GROUPS">
+      <collection />
+    </option>
+  </component>
   <component name="VcsContentAnnotationSettings">
     <option name="myLimit" value="2678400000" />
   </component>
@@ -566,14 +574,6 @@
         </state>
       </provider>
     </entry>
-    <entry file="file://$PROJECT_DIR$/modulevar.py">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="114">
-          <caret line="6" column="21" selection-start-line="6" selection-start-column="21" selection-end-line="6" selection-end-column="21" />
-          <folding />
-        </state>
-      </provider>
-    </entry>
     <entry file="file://$PROJECT_DIR$/scripts/digger.sh">
       <provider selected="true" editor-type-id="text-editor">
         <state relative-caret-position="133">
@@ -582,25 +582,25 @@
         </state>
       </provider>
     </entry>
-    <entry file="file://$PROJECT_DIR$/scripts/list_ntfs.sh">
+    <entry file="file://$PROJECT_DIR$/runcmd.py">
       <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="38">
-          <caret line="2" column="83" selection-start-line="2" selection-start-column="83" selection-end-line="2" selection-end-column="83" />
+        <state relative-caret-position="76">
+          <caret line="4" column="22" selection-start-line="4" selection-start-column="22" selection-end-line="4" selection-end-column="22" />
           <folding />
         </state>
       </provider>
     </entry>
-    <entry file="file://$PROJECT_DIR$/runcmd.py">
+    <entry file="file://$PROJECT_DIR$/module.py">
       <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="76">
-          <caret line="4" column="22" selection-start-line="4" selection-start-column="22" selection-end-line="4" selection-end-column="22" />
+        <state relative-caret-position="152">
+          <caret line="8" column="21" selection-start-line="8" selection-start-column="21" selection-end-line="8" selection-end-column="21" />
           <folding />
         </state>
       </provider>
     </entry>
     <entry file="file://$PROJECT_DIR$/vars/ntfsvol.py">
       <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="542">
+        <state relative-caret-position="608">
           <caret line="32" column="29" selection-start-line="32" selection-start-column="29" selection-end-line="32" selection-end-column="29" />
           <folding>
             <element signature="e#0#31#0" expanded="true" />
@@ -608,41 +608,69 @@
         </state>
       </provider>
     </entry>
-    <entry file="file://$PROJECT_DIR$/module.py">
+    <entry file="file://$PROJECT_DIR$/scripts/list_ntfs.sh">
       <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="304">
-          <caret line="16" column="58" selection-start-line="16" selection-start-column="58" selection-end-line="16" selection-end-column="58" />
+        <state relative-caret-position="38">
+          <caret line="2" column="83" selection-start-line="2" selection-start-column="83" selection-end-line="2" selection-end-column="83" />
           <folding />
         </state>
       </provider>
     </entry>
-    <entry file="file://$PROJECT_DIR$/digger.py">
+    <entry file="file://$PROJECT_DIR$/modules/info.py">
       <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="-190">
-          <caret line="11" column="0" selection-start-line="11" selection-start-column="0" selection-end-line="11" selection-end-column="0" />
+        <state relative-caret-position="266">
+          <caret line="14" column="22" selection-start-line="14" selection-start-column="22" selection-end-line="14" selection-end-column="22" />
           <folding>
-            <element signature="e#25#38#0" expanded="true" />
+            <element signature="e#0#25#0" expanded="true" />
           </folding>
         </state>
       </provider>
     </entry>
     <entry file="file://$PROJECT_DIR$/tomb.py">
       <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="190">
-          <caret line="10" column="25" selection-start-line="10" selection-start-column="25" selection-end-line="10" selection-end-column="25" />
+        <state relative-caret-position="114">
+          <caret line="6" column="27" selection-start-line="6" selection-start-column="27" selection-end-line="6" selection-end-column="27" />
+          <folding />
+        </state>
+      </provider>
+    </entry>
+    <entry file="file://$PROJECT_DIR$/modulevar.py">
+      <provider selected="true" editor-type-id="text-editor">
+        <state relative-caret-position="114">
+          <caret line="6" column="21" selection-start-line="6" selection-start-column="21" selection-end-line="6" selection-end-column="21" />
           <folding />
         </state>
       </provider>
     </entry>
     <entry file="file://$PROJECT_DIR$/modules/mft.py">
       <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="190">
-          <caret line="10" column="23" selection-start-line="10" selection-start-column="23" selection-end-line="10" selection-end-column="23" />
+        <state relative-caret-position="0">
+          <caret line="0" column="0" selection-start-line="0" selection-start-column="0" selection-end-line="25" selection-end-column="0" />
           <folding>
             <element signature="e#0#25#0" expanded="true" />
           </folding>
         </state>
       </provider>
     </entry>
+    <entry file="file://$PROJECT_DIR$/modules/winreg.py">
+      <provider selected="true" editor-type-id="text-editor">
+        <state relative-caret-position="323">
+          <caret line="17" column="12" selection-start-line="17" selection-start-column="12" selection-end-line="18" selection-end-column="10" />
+          <folding>
+            <element signature="e#0#25#0" expanded="true" />
+          </folding>
+        </state>
+      </provider>
+    </entry>
+    <entry file="file://$PROJECT_DIR$/digger.py">
+      <provider selected="true" editor-type-id="text-editor">
+        <state relative-caret-position="446">
+          <caret line="75" column="13" selection-start-line="75" selection-start-column="13" selection-end-line="75" selection-end-column="13" />
+          <folding>
+            <element signature="e#25#38#0" expanded="true" />
+          </folding>
+        </state>
+      </provider>
+    </entry>
   </component>
 </project>
 \ No newline at end of file
@@ -6,6 +6,7 @@ import glob
 import os
 import sys
 import subprocess as sp
+import tomb
 sys.path.append('modules')
 sys.path.append('vars')
@@ -27,8 +28,6 @@ def getModules():
             sys.modules.pop(modname)
         except Exception as e:
             print("Exception raised while importing " + modname)
-
-    choiceList.append(("all","Execute all modules",False))
     return choiceList
 def prepareModule(moduleName):
@@ -41,29 +40,43 @@ d = Dialog(dialog=&quot;dialog&quot;,autowidgetsize=True)
 d.set_background_title("Gravedigger")
 moduleList = getModules()
-code, tags = d.checklist("Select modules to execute",
-                         choices=moduleList,
-                         title="Module selection")
+code,value = d.inputbox("Input computer's name")
 if code == d.OK:
-    runlist = []
-    try:
-        if "All" in tags:
-            for module in moduleList:
-                runlist.append(prepareModule(module))
-        else:
-            for tag in tags:
-                runlist.append(prepareModule(tag))
+    tomb.__MACHINE_NAME__ = value
+    d.set_background_title("Gravedigger - " + value)
+    code, tags = d.checklist("Select modules to execute",
+                         choices=moduleList + [("all","Execute all modules",False)],
+                         title="Module selection")
+    if code == d.OK:
+        runlist = []
+        try:
+            if "all" in tags:
+                for module in moduleList:
+                    runlist.append(prepareModule(module[0]))
+            else:
+                for tag in tags:
+                    runlist.append(prepareModule(tag))
-        sp.call('clear', shell=True)
+            sp.call('clear', shell=True)
-        for module in runlist:
-            print("Running " + module.name + "...")
-            try:
-                module.run()
-            except Exception as e:
-                print("Exception raised while running " + module.name + ": " + str(e))
+            for module in runlist:
+                print("Running " + module.name + "...")
+                try:
+                    module.run()
+                except Exception as e:
+                    print("Exception raised while running " + module.name + ": " + str(e))
-    except Exception as e:
-        print("Exception raised while preparing module: " + str(e))
+            code, tag = d.menu("All modules finished execution",choices=[("Poweroff","Shutdown the computer"),
+                                                                         ("Reboot","Reboot the computer"),
+                                                                         ("Restart","Run Gravedigger again")])
+            if(code == d.OK):
+                if tag == "Poweroff":
+                    sp.call("poweroff",shell=True)
+                elif tag == "Reboot":
+                    sp.call("reboot", shell=True)
+
+
+        except Exception as e:
+            print("Exception raised while preparing module: " + str(e))
+from module import Module
+from runcmd import runProcess
+import tomb
+import os
+
+def getInstance():
+    return INFOModule()
+
+class INFOModule(Module):
+
+    def __init__(self):
+        self.name = "info"
+        self.description = "Extracts information about this machine"
+        self.requiredVars = []
+        self.vars = {}
+
+    def run(self):
+        path = tomb.getPath() + self.name + "/"
+        os.mkdir(path)
+        #getinfo
@@ -15,10 +15,11 @@ class MFTModule(Module):
         self.vars = {}
     def run(self):
-        os.mkdir(tomb.getPath() + "mft/")
+        path = tomb.getPath() + self.name + "/"
+        os.mkdir(path)
         for vol in self.vars['ntfsvol'].value:
             result = runProcess(["icat","/dev/" + vol,"0"])
-            mftbin = open(tomb.getPath() + "mft/" + vol + ".bin",'wb')
+            mftbin = open(path + vol + ".bin",'wb')
             mftbin.write(result[0])
             mftbin.close()
+from module import Module
+from runcmd import runProcess
+import tomb
+import os
+
+def getInstance():
+    return RegistryModule()
+
+class RegistryModule(Module):
+
+    def __init__(self):
+        self.name = "winreg"
+        self.description = "Extracts Windows Registry files"
+        self.requiredVars = ["ntfsvol"]
+        self.vars = {}
+
+    def run(self):
+        path = tomb.getPath() + self.name + "/"
+        os.mkdir(path)
+        for vol in self.vars['ntfsvol'].value:
+            pass
+            #runstuff
+
 import os
 __ROOT_PATH__ = "/bones/"
+__MACHINE_NAME__ = "JOHN_DOE"
 def __getTomb__():
-    return "test"
+    return __MACHINE_NAME__
 def getPath():
     path = __ROOT_PATH__ + __getTomb__() + "/"