Abstract
To unpack firmware files, disk images, raw flash dumps, file systems or other archives various tools are available, that examine the contents of the file, find offsets of archives, compressed files, media files and so on, carve these from a larger file, decompress the carved files, and make the unpacked data available for recursive unpacking. Currently available tools treat all found files of a certain type the same (all PNG files are treated the same, all ZIP files are treated the same and so on), without taking the context in which they were found into account, which actually could matter depending on the situation. This document describes possible approaches to this problem, where contextual information from unpacking is made available to allow for more accurate unpacking and labeling of files.
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Recommended Citation
Hemel, Armijn, "Better unpacking binary files using contextual information", Technical Disclosure Commons, (January 29, 2019)
https://www.tdcommons.org/dpubs_series/1919