defs Package

defs Package

dns Module

class vstruct.defs.dns.DnsAnswer[source]

Bases: vstruct.VStruct

pcb_dlength()[source]
class vstruct.defs.dns.DnsAnswerArray(reccnt)[source]

Bases: vstruct.VArray

class vstruct.defs.dns.DnsName[source]

Bases: vstruct.VArray

getFullName(dnspkt)[source]
vsParse(bytes, offset=0)[source]
class vstruct.defs.dns.DnsNamePart[source]

Bases: vstruct.VStruct

isNameTerm()[source]
pcb_length()[source]
class vstruct.defs.dns.DnsPacket[source]

Bases: vstruct.VStruct

getDnsAnswers()[source]
getDnsQueries()[source]
pcb_addt_cnt()[source]
pcb_answ_cnt()[source]
pcb_auth_cnt()[source]
pcb_ques_cnt()[source]
class vstruct.defs.dns.DnsQuery[source]

Bases: vstruct.VStruct

class vstruct.defs.dns.DnsQueryArray(reccnt)[source]

Bases: vstruct.VArray

elf Module

class vstruct.defs.elf.Elf32[source]

Bases: vstruct.VStruct

class vstruct.defs.elf.Elf32Dynamic[source]

Bases: vstruct.VStruct

class vstruct.defs.elf.Elf32Pheader[source]

Bases: vstruct.VStruct

class vstruct.defs.elf.Elf32Reloc[source]

Bases: vstruct.VStruct

class vstruct.defs.elf.Elf32Reloca[source]

Bases: vstruct.defs.elf.Elf32Reloc

class vstruct.defs.elf.Elf32Section[source]

Bases: vstruct.VStruct

class vstruct.defs.elf.Elf32Symbol[source]

Bases: vstruct.VStruct

class vstruct.defs.elf.Elf64[source]

Bases: vstruct.VStruct

class vstruct.defs.elf.Elf64Dynamic[source]

Bases: vstruct.defs.elf.Elf32Dynamic

class vstruct.defs.elf.Elf64Pheader[source]

Bases: vstruct.defs.elf.Elf32Pheader

class vstruct.defs.elf.Elf64Reloc[source]

Bases: vstruct.VStruct

class vstruct.defs.elf.Elf64Reloca[source]

Bases: vstruct.defs.elf.Elf64Reloc

class vstruct.defs.elf.Elf64Section[source]

Bases: vstruct.defs.elf.Elf32Section

class vstruct.defs.elf.Elf64Symbol[source]

Bases: vstruct.VStruct

gif Module

class vstruct.defs.gif.GIF8XA[source]

Bases: vstruct.VStruct

isValidGif()[source]
vsParse(bytes, offset)[source]
class vstruct.defs.gif.GIF_FILE_HEADER[source]

Bases: vstruct.VStruct

class vstruct.defs.gif.GIF_IMAGE_DESCRIPTOR[source]

Bases: vstruct.VStruct

class vstruct.defs.gif.RGB[source]

Bases: vstruct.VStruct

inet Module

Datalink / Network / Transport layer headers

class vstruct.defs.inet.ETHERII[source]

Bases: vstruct.VStruct

vsParse(sbytes, offset=0)[source]
class vstruct.defs.inet.IPv4[source]

Bases: vstruct.VStruct

class vstruct.defs.inet.IPv4Address(value=0)[source]

Bases: vstruct.primitives.v_uint32

class vstruct.defs.inet.TCP[source]

Bases: vstruct.VStruct

class vstruct.defs.inet.UDP[source]

Bases: vstruct.VStruct

vstruct.defs.inet.decIPv4Addr(addrstr)[source]
vstruct.defs.inet.reprIPv4Addr(addr)[source]

kdcom Module

Initial module with supporting structures for windows kernel serial debugging.

class vstruct.defs.kdcom.DBGKD_LOAD_SYMBOLS64[source]

Bases: vstruct.VStruct

class vstruct.defs.kdcom.DBGKD_WAIT_STATE_CHANGE64[source]

Bases: vstruct.VStruct

pcap Module

class vstruct.defs.pcap.PCAP_FILE_HEADER[source]

Bases: vstruct.VStruct

class vstruct.defs.pcap.PCAP_PACKET_HEADER[source]

Bases: vstruct.VStruct

vstruct.defs.pcap.iterPcapFile(fd, reuse=False)[source]
vstruct.defs.pcap.iterPcapFileName(filename, reuse=False)[source]

pe Module

class vstruct.defs.pe.IMAGE_BASE_RELOCATION[source]

Bases: vstruct.VStruct

class vstruct.defs.pe.IMAGE_DATA_DIRECTORY[source]

Bases: vstruct.VStruct

class vstruct.defs.pe.IMAGE_DOS_HEADER[source]

Bases: vstruct.VStruct

class vstruct.defs.pe.IMAGE_EXPORT_DIRECTORY[source]

Bases: vstruct.VStruct

class vstruct.defs.pe.IMAGE_FILE_HEADER[source]

Bases: vstruct.VStruct

class vstruct.defs.pe.IMAGE_IMPORT_BY_NAME(namelen=128)[source]

Bases: vstruct.VStruct

class vstruct.defs.pe.IMAGE_IMPORT_DIRECTORY[source]

Bases: vstruct.VStruct

class vstruct.defs.pe.IMAGE_LOAD_CONFIG_DIRECTORY[source]

Bases: vstruct.VStruct

class vstruct.defs.pe.IMAGE_NT_HEADERS[source]

Bases: vstruct.VStruct

class vstruct.defs.pe.IMAGE_NT_HEADERS64[source]

Bases: vstruct.VStruct

class vstruct.defs.pe.IMAGE_OPTIONAL_HEADER[source]

Bases: vstruct.VStruct

class vstruct.defs.pe.IMAGE_OPTIONAL_HEADER64[source]

Bases: vstruct.VStruct

class vstruct.defs.pe.IMAGE_RESOURCE_DATA_ENTRY[source]

Bases: vstruct.VStruct

class vstruct.defs.pe.IMAGE_RESOURCE_DIRECTORY[source]

Bases: vstruct.VStruct

class vstruct.defs.pe.IMAGE_RESOURCE_DIRECTORY_ENTRY[source]

Bases: vstruct.VStruct

class vstruct.defs.pe.IMAGE_RUNTIME_FUNCTION_ENTRY[source]

Bases: vstruct.VStruct

Used in the .pdata section of a PE32+ for all non leaf functions.

class vstruct.defs.pe.IMAGE_SECTION_HEADER[source]

Bases: vstruct.VStruct

class vstruct.defs.pe.VS_FIXEDFILEINFO[source]

Bases: vstruct.VStruct

rar Module

class vstruct.defs.rar.RarBlock[source]

Bases: vstruct.VStruct

pcb_ADD_SIZE()[source]
pcb_HEAD_FLAGS()[source]
class vstruct.defs.rar.RarChunkUnkn[source]

Bases: vstruct.VStruct

win32 Module

class vstruct.defs.win32.CLIENT_ID[source]

Bases: vstruct.VStruct

class vstruct.defs.win32.CLSID[source]

Bases: vstruct.VStruct

class vstruct.defs.win32.EXCEPTION_RECORD[source]

Bases: vstruct.VStruct

class vstruct.defs.win32.EXCEPTION_REGISTRATION[source]

Bases: vstruct.VStruct

class vstruct.defs.win32.HEAP[source]

Bases: vstruct.VStruct

class vstruct.defs.win32.HEAP_ENTRY[source]

Bases: vstruct.VStruct

class vstruct.defs.win32.HEAP_SEGMENT[source]

Bases: vstruct.VStruct

class vstruct.defs.win32.IID[source]

Bases: vstruct.VStruct

class vstruct.defs.win32.ListEntry[source]

Bases: vstruct.VStruct

class vstruct.defs.win32.NT_TIB[source]

Bases: vstruct.VStruct

class vstruct.defs.win32.PEB[source]

Bases: vstruct.VStruct

class vstruct.defs.win32.SEH3_SCOPETABLE[source]

Bases: vstruct.VStruct

class vstruct.defs.win32.SEH4_SCOPETABLE[source]

Bases: vstruct.VStruct

class vstruct.defs.win32.TEB[source]

Bases: vstruct.VStruct

Table Of Contents

This Page