Skip to content
Attempt to replicate the functions of auto_rip by Corey Harrell in Python.
Python
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
.gitattributes
.gitignore
README.md
autoripy.py
plugin_categories.py
plugin_selector.py

README.md

autoripy

autoripy is an attempt to replicate the functions of auto_rip by Corey Harrell in Python. auto_rip automates the execution of RegRipper according to an examination process. auto_rip is a Copyright of Corey Harrell (jIIr).

Why was this created?

I like the concept of auto_rip and have been using it for registry analysis. However, it had not been updated for two (2) years. In the meantime, Harlen Carvey (and others) had released new regripper plugins that were not executed as part of auto_rip.

This was written in Python because of my familiarity with the language. It was also re-written in such a way that users can easily update the supported plugins or their categories in plugin_categories.py without programming knowledge.

Dependencies

  1. Python 2.7 or 3.7
  2. Perl
  3. Parse::Win32Registry perl module

Regripper's rip.pl is used instead of rip.exe due to some discrepancies in the latter's output

Usage

See python autoripy.py -h

References

  1. Regripper
  2. Unleasing autorip
You can’t perform that action at this time.