A Python based GUI for volatility. Made by keeping CTFs in focus. Basic memory forensics in Clicks

Jul 31, 2022 1 min read

Vol-GUI

Vol-GUI.mp4

A few things to note:

When you clicked a button, it will be pressed until its execution is done.
If you did scannings before, now again you wanna analyse (Dump, Look) the output files. So no need to scan again, but make sure you click on ‘Check Profile’ once after you select your dump file via ‘Choose File’ button, so that it will be used for searching, dumping files etc etc
Sometimes you can encounter blank pop ups, that can happen when no data or specific output is available.
Files are saved with the naming convention- pluginName_output.txt inside the memory dump file folder created as memdumpFile_analysis

PS I m not a very good coder (hehe 🥴) so if you face any issues during runtime or have any suggestions or need some more functionality implemented please feel free contact me on Twitter

GitHub

View Github

GUI

John was the first writer to have joined pythonawesome.com. He has since then inculcated very effective writing and reviewing culture at pythonawesome which rivals have found impossible to imitate.