EricZimmerman / EricZimmerman/Issues

Appcompatcache parser: Issue with -c and broken shimcache

Open
#242 4 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
14
Forks
3
PR merge metrics
No merged PRs in 30d

Description

Ran into an edge case that causes appcompatcacheparser to die rather than safely error out

Had a shimcache value that was empty but had about 48 bytes of 00's. Once the tool found the key it died.

Also if you run -c with a value,X, it just attempts to look for ControlSet00X and then dies. So there's no validation that that would be a valid value and safely closing.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.