I needed to decompress the content of a Flash file (.swf). I thought of using my translate.py program with a command to inflate (zlib) the content (minus the header of 8 bytes): lambda b: zlib.decompress(b[8:])
Quite simple, but the problem is that translate.py doesn’t import zlib. I have to do that, but that can’t be done in a lambda function. So I added option -e (execute) to execute extra statements:
translate_v2_3_1.zip (https)
MD5: A3C30A3534DC96B28C1C18B425E2A82D
SHA256: BBD24406BC3038620807E8C4116B325BE6124BE92D041173A8E4BAB56D06C7E2
[…] Didier Stevens updated his Python script translate.py to version 2.3.1, which added the -e option which can be used to execute extra statements. Update: translate.py Version 2.3.1 […]
Pingback by Week 38 – 2016 – This Week In 4n6 — Monday 26 September 2016 @ 11:47
[…] Update: translate.py Version 2.3.1 […]
Pingback by Overview of Content Published In September | Didier Stevens — Monday 3 October 2016 @ 0:00
[…] to decompress the ADS with translate.py gives us JSON data {“dropbox_fileid_local”: {“machineid_attr”: […]
Pingback by Quickpost: Dropbox & Alternate Data Streams | Didier Stevens — Monday 30 January 2017 @ 0:00