Hi,

The least amount of code I could write for a plugin is:

# -- START --
import volatility.commands as commands

class Hello(commands.Command):
    """Prints 'hello world'"""
    
    def render_text(self, outfd, data):
        outfd.write('Hello world!\n')

# -- END --

Obviously this doesn't do anything with the memory image.

Quick tips:
- outfd: the stream to which output is written (stdout)
- data: the data yielded by the plugin's calculate method (in this example, inherits from commands.Command)

Good luck!
Adam


On 10 May 2016 at 12:38, P1kachu <p1kachu@lse.epita.fr> wrote:
Hello,

I am having some trouble loading a simple plugin with the '--plugins=.'
option. It seems to be loaded (there were some errors that were fixed
thanks to volatility displaying them) but it doesn't appear in the
--info list. If I try this option in one of the community folder, it
works (the plugins appear).
What is the basic requirement for a plugin to be recognized, and what
could I miss ? I started mine based on one from the
community folder (CsabaBarta/usnjrnl.py)

Thank you,

--
Stanislas 'P1kachu' Lejay
EPITA - LSE
If you're sleeping, you're doing it wrong.
_______________________________________________
Vol-users mailing list
Vol-users@volatilesystems.com
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users