jgaunt/CyberChef
2
0
Fork 0
mirror of https://github.com/gchq/CyberChef synced 2025-12-12 06:13:31 +00:00
Code Issues Releases Wiki Activity

Improved continueUntil, added consumeWhile and made the EVTX extractor more complete

Browse Source
This commit is contained in:
n1073645
2019-11-11 15:47:16 +00:00
parent eb81b9217e
commit d240d65c5f
2 changed files with 58 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/core/lib/FileSignatures.mjs
View File

@@ -3348,11 +3348,11 @@ export function extractEVTX(bytes, offset) {
while (stream.hasMore()) {
// Loop through ELFCHNKs.
if (stream.getBytes(7).join("") === [0x45, 0x6c, 0x66, 0x43, 0x68, 0x6e, 0x6b].join(""))
stream.moveForwardsBy(0xfff9);
else
break;
if (stream.getBytes(7).join("") !== [0x45, 0x6c, 0x66, 0x43, 0x68, 0x6e, 0x6b].join(""))
break;
stream.moveForwardsBy(0xfff9);
}
stream.consumeWhile(0x00);
return stream.carve();
}