3 ms·
Thanks! I haven't really looked at alternative carvers (but I am aware that many great options exist). I didn't know unblob yet. Thanks for the suggestion! Lo
by joren485 2y ago
Thanks!
I haven't really looked at alternative carvers (but I am aware that many great options exist). I didn't know unblob yet. Thanks for the suggestion!
Looking at the code, they use the same methodology as I describe in the post [0]. They do, however, also check for the end of the last segment, which is interesting.
[0] https://github.com/onekey-sec/unblob/blob/112da43587c80cc3a751f95545037a28e91a3a0e/unblob/handlers/executable/elf.py#L200 https://github.com/onekey-sec/unblob/blob/112da43587c80cc3a7...