4 ms·
Interesting article. Did you try unblob as an alternative? It is capable of extracting multiple file formats including elf binaries.
by Moneysac 2y ago
Interesting article. Did you try unblob as an alternative? It is capable of extracting multiple file formats including elf binaries.
- joren485 2y agoThanks! I haven't really looked at alternative carvers (but I am aware that many great options exist). I didn't know unblob yet. Thanks for the suggestion! Looking at the code, they use the same methodology as I describe in the post [0]. They do, however, also check for the end of the last segment, which is interesting. [0] https://github.com/onekey-sec/unblob/blob/112da43587c80cc3a751f95545037a28e91a3a0e/unblob/handlers/executable/elf.py#L200 https://github.com/onekey-sec/unblob/blob/112da43587c80cc3a7...