Skip to content

Added Speedtest artifact extractor#582

Merged
stark4n6 merged 5 commits into
abrignoni:mainfrom
its5Q:speedtest
Aug 15, 2025
Merged

Added Speedtest artifact extractor#582
stark4n6 merged 5 commits into
abrignoni:mainfrom
its5Q:speedtest

Conversation

@its5Q
Copy link
Copy Markdown
Contributor

@its5Q its5Q commented Jul 27, 2025

This PR implements a plugin to extract artifacts from the Speedtest app, which contain a lot of useful data such as location data and network names. Inspired by the recently finished Belkasoft CTF :)

Test data from the CTF image: org.zwanoo.android.speedtest.zip

Resulting report:
chrome_cVDfOxhYH6
image

@stark4n6
Copy link
Copy Markdown
Collaborator

stark4n6 commented Aug 4, 2025

@its5Q Extended results for Speed Test isn't LAVA compliant currently, can you look at making that work? Overall HTML looks fine but the TSV output appears to be JSON formatted.

@its5Q
Copy link
Copy Markdown
Contributor Author

its5Q commented Aug 4, 2025

Oops, forgot about the TSV and Timeline output for that, will fix that in a moment

@its5Q
Copy link
Copy Markdown
Contributor Author

its5Q commented Aug 4, 2025

Looks good now
EmEditor_y6Z4Bnu24J
EmEditor_GmksgmVLvm

@stark4n6
Copy link
Copy Markdown
Collaborator

stark4n6 commented Aug 4, 2025

@its5Q
Copy link
Copy Markdown
Contributor Author

its5Q commented Aug 4, 2025

Hm, yeah, sure. I just went with the manual report generation because I wanted to merge two tables into one HTML report, but I guess it's fine to split that up and switch to automatic report generation for this module as well. I'll get on that probably tomorrow.

@abrignoni
Copy link
Copy Markdown
Owner

abrignoni commented Aug 5, 2025 via email

@its5Q
Copy link
Copy Markdown
Contributor Author

its5Q commented Aug 15, 2025

@abrignoni I've switched to artifact_processor and renamed some headers so the KML generation works for location data. Also, I've made a tiny change in the OS version module to strip the newline, before that, a trailing newline would end up in the "Build version" field:
EmEditor_3Asa3tqllk

@stark4n6
Copy link
Copy Markdown
Collaborator

stark4n6 commented Aug 15, 2025

@its5Q I don't believe you need the "function" in the header now if you're using the artifact_processor, just make sure the name of the function in "def" is the same as right above the name

@its5Q
Copy link
Copy Markdown
Contributor Author

its5Q commented Aug 15, 2025

Yeah, that works. Also made some changes to output all timestamps in UTC.

@stark4n6 stark4n6 merged commit e5581ff into abrignoni:main Aug 15, 2025
@its5Q its5Q deleted the speedtest branch August 15, 2025 13:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants