Cool_Tools/CyberChef
1
0
Fork 0
mirror of synced 2025-01-31 20:05:20 +01:00
Code Releases Activity

Merge branch 'extract-files-min-size' of https://github.com/n1073645/CyberChef

Browse Source
This commit is contained in:
n1474335 2022-07-08 13:57:06 +01:00
commit bb6c1c54ff
1 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
src/core/operations/ExtractFiles.mjs
View File

@ -38,7 +38,7 @@ class ExtractFiles extends Operation {
<li> <li>
${supportedExts.join("</li><li>")} ${supportedExts.join("</li><li>")}
</li> </li>
</ul>`; </ul>Minimum File Size can be used to prune small false positives.`;
this.infoURL = "https://forensicswiki.xyz/wiki/index.php?title=File_Carving"; this.infoURL = "https://forensicswiki.xyz/wiki/index.php?title=File_Carving";
this.inputType = "ArrayBuffer"; this.inputType = "ArrayBuffer";
this.outputType = "List<File>"; this.outputType = "List<File>";
@ -54,6 +54,11 @@ class ExtractFiles extends Operation {
name: "Ignore failed extractions", name: "Ignore failed extractions",
type: "boolean", type: "boolean",
value: true value: true
},
{
name: "Minimum File Size",
type: "number",
value: 0
} }
]); ]);
} }
@ -66,6 +71,7 @@ class ExtractFiles extends Operation {
run(input, args) { run(input, args) {
const bytes = new Uint8Array(input), const bytes = new Uint8Array(input),
categories = [], categories = [],
minSize = args.pop(1),
ignoreFailedExtractions = args.pop(1); ignoreFailedExtractions = args.pop(1);
args.forEach((cat, i) => { args.forEach((cat, i) => {
@ -80,7 +86,9 @@ class ExtractFiles extends Operation {
const errors = []; const errors = [];
detectedFiles.forEach(detectedFile => { detectedFiles.forEach(detectedFile => {
try { try {
files.push(extractFile(bytes, detectedFile.fileDetails, detectedFile.offset)); let file;
if ((file = extractFile(bytes, detectedFile.fileDetails, detectedFile.offset)).size >= minSize)
files.push(file);
} catch (err) { } catch (err) {
if (!ignoreFailedExtractions && err.message.indexOf("No extraction algorithm available") < 0) { if (!ignoreFailedExtractions && err.message.indexOf("No extraction algorithm available") < 0) {
errors.push( errors.push(