unblob
Kaitai Struct
Our great sponsors
| unblob | Kaitai Struct | |
|---|---|---|
| 16 | 44 | |
| 2,054 | 3,830 | |
| 2.5% | 1.6% | |
| 9.5 | 7.5 | |
| about 11 hours ago | 14 days ago | |
| Python | Shell | |
| GNU General Public License v3.0 or later | GPL-3.0-or-later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
unblob
- Reverse-engineering an encrypted IoT protocol
-
How are zlib, gzip and zip related?
If you are interested in implementation details, how to unpack/decompress them, check out these Python implementations:
- https://github.com/onekey-sec/unblob/blob/main/unblob/handle...
- https://github.com/onekey-sec/unblob/blob/main/unblob/handle...
- https://github.com/onekey-sec/unblob/blob/main/unblob/handle...
- GNU poke: The extensible editor for structured binary data
- unblob: Extract files from any kind of container formats
-
FLiP Stack Weekly for 21 Jan 2023
Extract all the things https://unblob.org/
-
Show HN: Unblob – extraction suite for 30+ file formats
and the initial work they already merged: https://github.com/onekey-sec/unblob/pull/475
- Show HN: Unblob – accurate, fast, and easy-to-use extraction suite
Kaitai Struct
- Reverse-engineering an encrypted IoT protocol
-
Parsing an Undocumented File Format
- ImHex [2], which has a pattern language [3] which allows parsing, and it seems more powerful than what Kaitai offers. I stumbled upon some limitations with it but it was still useful.
[1]: https://kaitai.io/
- Kaitai Struct – a declarative language used to describe binary data structures
-
HTTPie Desktop: cross-platform API testing client for humans
Beautiful. Didn't know something like this exists. Reminds me of Katai[0]
[0]. https://kaitai.io/
-
Hacking the LG Monitor's EDID
An EDID override like this would be helpful for macOS as well, where the monitors swapping around after standby is a real annoyance [0] [1]
EDID rewrites are 99% of the time blocked by the monitor firmware: https://notes.alinpanaitiu.com/Decoding-monitor-EDID-on-macO...
By the way, one helpful tool that helped me navigate the EDID dump was Kaitai Struct [2]. It shows a side by side view with the hex view and the EDID structure, and it highlights the hex values in real time as you navigate the structure. Unfortunately [3] it doesn't support the extension blocks that the author needs.
[0] https://notes.alinpanaitiu.com/Weird-monitor-bugs
[1] https://forums.macrumors.com/threads/external-displays-swapp...
[2] https://kaitai.io/
[3] https://github.com/kaitai-io/edid.ksy
- Kaitai Struct: new way to develop parsers for binary structures
-
Fq: Jq for Binary Formats
Kaitai Struct might be a good choice for that: https://kaitai.io/
-
Ingesting, parsing and making sense of device log data
For binary log format, there's the excellent Kaitai Struct frameworks, that make it very easy to generate parsers from a declarative schema
-
What is this tool? More info in comments
kaitai
-
Visual Programming with Elixir: Learning to Write Binary Parsers (2019)
https://kaitai.io/
Worth a look if you are writing binary parsers.
What are some alternatives?
binwalk - Firmware Analysis Tool
Protobuf - Protocol Buffers - Google's data interchange format
EMBA - EMBA - The firmware security analyzer
csvkit - A suite of utilities for converting to and working with CSV, the king of tabular file formats.
dtrx - Do The Right Extraction
Camelot - A Python library to extract tabular data from PDFs
append-zip - append a file into an existing zip file, overwriting the existing file of the same name if needed
tablib - Python Module for Tabular Datasets in XLS, CSV, JSON, YAML, &c.
python-btrfs - Python Btrfs module
PDFMiner - Python PDF Parser (Not actively maintained). Check out pdfminer.six.
binspector - A binary format analysis tool
PyYAML