abrignoni / abrignoni/iLEAPP

telegramMessages Artifact Error

Đang mở
#1,145 2 bình luận 0 reaction 0 người được giao Xem trên GitHub
User Support
Ngôn ngữ chính
Python
Star
1.2k
Fork
303
Merge trung bình
4 giờ 32 phút
Pull request đã merge (30 ngày)
216

Mô tả

Recive the following error when trying to parse the telegram artifacts:

telegramMessages [telegramMesssages] artifact started
Reading telegramMessages artifact had errors!
Error was unpack requires a buffer of 4 bytes
Exception Traceback: Traceback (most recent call last): File "C:\Program Files\iLEAPP-main\ileapp.py", line 427, in crunch_artifacts artifact_data = plugin.method(files_found, category_folder, seeker, wrap_text, time_offset) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Program Files\iLEAPP-main\scripts\ilapfuncs.py", line 334, in wrapper data_headers, data_list, source_path = func(files_found, report_folder, seeker, wrap_text, timezone_offset) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Program Files\iLEAPP-main\scripts\artifacts\telegramMesssages.py", line 816, in telegramMessages print_message(idx, msg) File "C:\Program Files\iLEAPP-main\scripts\artifacts\telegramMesssages.py", line 324, in print_message m = get_ref_media(*mref) ^^^^^^^^^^^^^^^^^^^^ File "C:\Program Files\iLEAPP-main\scripts\artifacts\telegramMesssages.py", line 190, in get_ref_media data = read_media_entry(key, bio) ^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Program Files\iLEAPP-main\scripts\artifacts\telegramMesssages.py", line 240, in read_media_entry data = PostboxDecoder(data).decodeRootObject() ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Program Files\iLEAPP-main\scripts\artifacts\telegramMesssages.py", line 516, in decodeRootObject return self.decodeObjectForKey('_') ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Program Files\iLEAPP-main\scripts\artifacts\telegramMesssages.py", line 519, in decodeObjectForKey t, v = self.get(self.ValueType.Object, key) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Program Files\iLEAPP-main\scripts\artifacts\telegramMesssages.py", line 524, in get for k, t, v in self._iter_kv(decodeObjects=decodeObjects): File "C:\Program Files\iLEAPP-main\scripts\artifacts\telegramMesssages.py", line 543, in _iter_kv valueType, value = self.readValue(decodeObjects=decodeObjects, registry=registry) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Program Files\iLEAPP-main\scripts\artifacts\telegramMesssages.py", line 586, in readValue value = self._readObject(**objectArgs) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Program Files\iLEAPP-main\scripts\artifacts\telegramMesssages.py", line 560, in _readObject value = self.registry[typeHash](decoder) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Program Files\iLEAPP-main\scripts\artifacts\telegramMesssages.py", line 717, in __init__ super().__init__(dec) File "C:\Program Files\iLEAPP-main\scripts\artifacts\telegramMesssages.py", line 635, in __init__ _, val = dec.get(typ, key) ^^^^^^^^^^^^^^^^^ File "C:\Program Files\iLEAPP-main\scripts\artifacts\telegramMesssages.py", line 524, in get for k, t, v in self._iter_kv(decodeObjects=decodeObjects): File "C:\Program Files\iLEAPP-main\scripts\artifacts\telegramMesssages.py", line 543, in _iter_kv valueType, value = self.readValue(decodeObjects=decodeObjects, registry=registry) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Program Files\iLEAPP-main\scripts\artifacts\telegramMesssages.py", line 601, in readValue value[i] = self._readObject(**objectArgs) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Program Files\iLEAPP-main\scripts\artifacts\telegramMesssages.py", line 560, in _readObject value = self.registry[typeHash](decoder) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Program Files\iLEAPP-main\scripts\artifacts\telegramMesssages.py", line 719, in __init__ self.fileId = (bio.read_int32(), bio.read_int64()) ^^^^^^^^^^^^^^^^ File "C:\Program Files\iLEAPP-main\scripts\artifacts\telegramMesssages.py", line 66, in read_int32 return self.read_fmt('i') ^^^^^^^^^^^^^^^^^^ File "C:\Program Files\iLEAPP-main\scripts\artifacts\telegramMesssages.py", line 58, in read_fmt return struct.unpack(fmt, data)[0] ^^^^^^^^^^^^^^^^^^^^^^^^ struct.error: unpack requires a buffer of 4 bytes

TIA for the help.

Hướng dẫn đóng góp

Chưa lập chỉ mục được hướng dẫn đóng góp cho kho mã nguồn này

Đánh giá

Issue này chưa được đánh giá.

Nhận issue mới trong hộp thư của bạn

Bản tóm tắt ngắn những issue GitHub phù hợp với người mới.