Giters

Zeecka / AperiSolve

Steganalysis web platform

Home Page:https://www.aperisolve.com/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Binwalk download fail

Maijin opened this issue · comments

commented

Hello o/

Binwalk output on the website is correct:

image

Unfortunately the downloaded files aren't:

image

When launching binwalk locally I got the proper files + filenames:

image

See also MD5, something definitely looks off:

image

Reproducer can be found here:
lol.zip

(Zsteg also looks stuck)

commented

Thanks for reporting. I already knew this issue but it wasn't documented. I've got to dig into that.
For Zsteg it's because the process took too much time to complete. I think I'll rework the whole infrastructure to have microservices working on each task (and avoid Flask crashing). I should also keep a cache for recent submitted files (and maybe keep often submitted ones and make data analysis ?).

commented

Yeah that'd make sense if your tool start to be popular, it could suffer of a heavy use during CTFs over the same files.

Stats/data analysis is a good idea, depending what you want to do, you may not want to show the most recent info as it could leak flags of on-going CTFs, maybe add a delay of few days on the shown stats?

Could also add stats on the file submitted (like number of time submitted)

commented

Update :

  1. The original issue was due to options I set to binwalk. I usually set flag -dd='.*' to export data because it's more efficient. I assume you set flag -e that's why you got filenames. I'm working locally on the new version and I just set both flags ;).
  2. I put some data analysis in this new version such as: passwords statistics, previous passwords submitted by other users for a given image, statistics about image (number of time submitted, ...) ...
  3. In this new version, a daemon with multithreaded process is running to perform steganalysis. I'm working on an efficient cache for image that already have been submitted (but my storage is limited, so I've got to make a smart cache). I hope/think this new version will be faster.
  4. No release date for the moment but I hope it'll be up until 2021. Backend progress = 80% (the garbage collector / cache is missing). Frontend progress = 50%.
commented

Fixed, now you can download both output at once :).