strontic / xcyclopedia Goto Github PK

Hi there! When you want to work with this json with python, ValueError: No JSON object could be decoded appears. This happens because the json is not valid.

dos2unix strontic-xcyclopedia.json
dos2unix: Binary symbol 0x1B found at line 22163
dos2unix: Skipping binary file strontic-xcyclopedia.json

Hi @strontic,

Thanks a lot for your project, very useful for security investigation! ❤️

Is it possible to search file with filename or filehash, directly through the URL?
Something like:

• https://strontic.github.io/xcyclopedia/search.html?q=[filename.extension]
• https://strontic.github.io/xcyclopedia/search.html?q=[filehash]

The idea is to take advantage of the functionality 'Custom search engine' on Firefox and Google Chrome, and finally add your project into https://github.com/wikijm/Awesome-Custom-Search-Engines

Regards,
WikiJM

Thanks for the initiative. It's great.

It seems that the JSON produced cannot be parsed with jq which is standard JSON parser.

cat strontic-xcyclopedia.json | jq .
parse error: Invalid string: control characters from U+0000 through U+001F must be escaped at line 22163, column 3776

Hi - I am curious how you just arbitrarily run EXE's on a machine. Do you use a VM? Windows Docker containers dont support GUI apps, so there is definitely a limitation there.

https://github.com/strontic/xcyclopedia#how-is-this-done

A given executable file will typically exists in many flavours, mainly for

• each supported architecture x86, x86-64/x64/amd64, IA64, arm, ...
• each build number of the OS (in relationship with the dev lifecycle phase : alpha, beta, rtm, post-rtm)
• type of build free/checked
• each SKU

The SKU would be related to:

• editions of the OS
• supported languages
• each licensing mode (VL, retail, ....)
• timebomb or not
• eval or not
• each market channel : oem, volume licensing, msdn, ...
• each installation modes (upgrade only, or full packaged product)

Creating such index will be very useful for security analysis and investigations.
For there a smart UI and API could be developed to leverage the database model.