{"id":244,"date":"2011-11-25T17:49:02","date_gmt":"2011-11-25T16:49:02","guid":{"rendered":"https:\/\/www.phillips321.co.uk\/?p=244"},"modified":"2011-11-25T17:49:02","modified_gmt":"2011-11-25T16:49:02","slug":"upgrade-volatility-from-v1-3-to-v2-0-on-bt5","status":"publish","type":"post","link":"https:\/\/www.phillips321.co.uk\/2011\/11\/25\/upgrade-volatility-from-v1-3-to-v2-0-on-bt5\/","title":{"rendered":"Upgrade volatility from v1.3 to v2.0 on BT5"},"content":{"rendered":"

So for those that dont know volatility is a forensics tool for investigating data from memory. It can be found here:
\nhttp:\/\/www.volatilesystems.com\/default\/volatility<\/a><\/p>\n

Unfortunately BT5 was only on version 1.3 so I decided to update it to v2.0, the latest on the volatility website.<\/p>\n

Here’s the quick code to update to version 2.0 \ud83d\ude42 Enjoy!<\/p>\n

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
<\/div><\/td>
#!\/bin\/bash<\/span>
\napt-get<\/span> -y<\/span> install<\/span> cmake
\ncd<\/span> \/<\/span>root\/<\/span>
\nwget<\/span> http:\/\/<\/span>freddie.witherden.org\/<\/span>tools\/<\/span>libforensic1394\/<\/span>releases\/<\/span>libforensic1394-0.2<\/span>.tar.gz
\ntar<\/span> zxvf libforensic1394-0.2<\/span>.tar.gz
\ncd<\/span> libforensic1394-0.2<\/span>\/<\/span>
\ncmake -G<\/span>"Unix Makefiles"<\/span>
\nmake<\/span>
\ncp<\/span> libforensic1394.s*<\/span> \/<\/span>usr\/<\/span>lib\/<\/span>
\ncd<\/span> python\/<\/span>
\npython setup.py install<\/span>
\nrm<\/span> -rf<\/span> \/<\/span>pentest\/<\/span>forensics\/<\/span>volatility
\ncd<\/span> \/<\/span>root\/<\/span>
\nwget<\/span> http:\/\/<\/span>www.volatilesystems.com\/<\/span>volatility\/<\/span>2.0<\/span>\/<\/span>volatility-2.0<\/span>.tar.gz
\ntar<\/span> zxvf volatility-2.0<\/span>.tar.gz
\nmv<\/span> \/<\/span>root\/<\/span>volatility-2.0<\/span> \/<\/span>pentest\/<\/span>forensics\/<\/span>volatility
\nsed<\/span> -i<\/span> -e<\/span> 's|\\.\/volatility|\\.\/vol\\.py -h|'<\/span> \/<\/span>usr\/<\/span>share\/<\/span>applications\/<\/span>backtrack-volatility.desktop
\ncd<\/span> \/<\/span>root\/<\/span>
\nrm<\/span> -rf<\/span> libforensic1394*<\/span>
\nrm<\/span> -rf<\/span> volatility-2.0<\/span>.tar.gz<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n","protected":false},"excerpt":{"rendered":"

So for those that dont know volatility is a forensics tool for investigating data from memory. It can be found here: http:\/\/www.volatilesystems.com\/default\/volatility Unfortunately BT5 was only on version 1.3 so I decided to update it to v2.0, the latest on the volatility website. Here’s the quick code to update to version 2.0 \ud83d\ude42 Enjoy! 1234567891011121314151617181920#!\/bin\/bash […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[8,3,1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/posts\/244"}],"collection":[{"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/comments?post=244"}],"version-history":[{"count":6,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/posts\/244\/revisions"}],"predecessor-version":[{"id":250,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/posts\/244\/revisions\/250"}],"wp:attachment":[{"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/media?parent=244"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/categories?post=244"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.phillips321.co.uk\/wp-json\/wp\/v2\/tags?post=244"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}