mirrors/CyberChef
1
0
Fork 0
mirror of https://github.com/gchq/CyberChef.git synced 2025-04-20 14:56:19 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Improved continueUntil, added consumeWhile and made the EVTX extractor more complete

Browse source
This commit is contained in:
n1073645 2019-11-11 15:47:16 +00:00
parent eb81b9217e
commit d240d65c5f
2 changed files with 58 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

8
src/core/lib/FileSignatures.mjs
View file

@ -3348,11 +3348,11 @@ export function extractEVTX(bytes, offset) {
while (stream.hasMore()) {
// Loop through ELFCHNKs.
if (stream.getBytes(7).join("") === [0x45, 0x6c, 0x66, 0x43, 0x68, 0x6e, 0x6b].join(""))
stream.moveForwardsBy(0xfff9);
else
break;
if (stream.getBytes(7).join("") !== [0x45, 0x6c, 0x66, 0x43, 0x68, 0x6e, 0x6b].join(""))
break;
stream.moveForwardsBy(0xfff9);
}
stream.consumeWhile(0x00);
return stream.carve();
}