zsniff deflate sniffer/extractor
C++
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
LICENSE
Makefile
README.md
zdata.cpp
zsniff.cpp
zsniff.h

README.md

zsniff

zsniff deflate sniffer/extractor

zsniff 0.2 by Candice Quates, Vassil Roussev 07/2013

Usage: ./zsniff [--extract] [--block 65536] filename(s)

Build using a c++11 capable compiler.

Pass small files or fragments as arguments.

Files may be broken into blocks if desired using [--block bytes],however DEFLATE reconstruction may be affected by cut-off structures.

Decoded data will be extracted if found using [--extract].

More information in the proceedings of DFRWS '13:

Paper: http://dfrws.org/2013/proceedings/DFRWS2013-8.pdf

Presentation: http://dfrws.org/2013/proceedings/DFRWS2013-p8.pdf