Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unable to automatically download necessary files to ntkrnlmp.pdb #1331

Open
Etopop opened this issue Oct 31, 2024 · 2 comments
Open

Unable to automatically download necessary files to ntkrnlmp.pdb #1331

Etopop opened this issue Oct 31, 2024 · 2 comments

Comments

@Etopop
Copy link

Etopop commented Oct 31, 2024

very sorry for not asking a correct bug related question, but I searched many websites and asked questions and couldn't solve the problem.

It was my first time to try doing CTF.This tool to perform raw file forensics,but bad luck it was.

Can anyone tell me why the essential profile is not included in the folder and there isn't anyway to get it?

D:\volatility3>python vol.py -f "C:\Users\35015\Desktop\moectf2024\flag.raw" windows.info
Volatility 3 Framework 2.11.0
Progress:  100.00               Downloading http://msdl.microsoft.com/download/symbols/ntkrnlmp.pdb/ECE191A20CFF4465AE46WARNING  volatility3.framework.plugins: Automagic exception occurred: volatility3.framework.exceptions.InvalidAddressException: Offset outside of the buffer boundaries

Unsatisfied requirement plugins.Info.kernel.symbol_table_name:<code>

A symbol table requirement was not fulfilled.  Please verify that:
        The associated translation layer requirement was fulfilled
        You have the correct symbol file for the requirement
        The symbol file is under the correct directory or zip file
        The symbol file is named appropriately or contains the correct banner

Unable to validate the plugin requirements: ['plugins.Info.kernel.symbol_table_name']

I'm not familiar with this area now and desperate for guidance from you!

@atcuno
Copy link
Contributor

atcuno commented Oct 31, 2024

This error often triggers when you have a partially downloaded file. Can you clear your symbol cache and try again? This will attempt to redownload the full file.

@Etopop
Copy link
Author

Etopop commented Oct 31, 2024

This error often triggers when you have a partially downloaded file. Can you clear your symbol cache and try again? This will attempt to redownload the full file.

I've cleaned cache for twice and downloaded official "windows.zip" for symbols.But I still didn't find this file...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants