Feature request: Decode CaRT Files
- Dominant language
- JavaScript
- Stars
- 35.8k
- Forks
- 4.1k
- Avg merge
- 2d 26m
- Merged PRs (30d)
- 33
Description
There is not an easy way to view CaRT files in CyberChef, if at all.
It would be nice if a CaRT file could be extracted, which would show the CaRT metadata and provide access to the contained files. This works a bit, but only with manual modification.
```
Drop_bytes(0,60,false)
Take_bytes(0,6000,false)
RC4({'option':'Hex','string':'03 01 04 01 05 09 02 06 03 01 04 01 05 09 02 06 '},'Latin1','Latin1')
Zlib_Inflate(0,0,'Adaptive',false,false)
```
Of course, this can already be done with Python. https://pypi.org/project/cart/
Contributor guide
Research direction
Start with the manual Drop_bytes, Take_bytes, RC4 and Zlib_Inflate recipe in the issue, then compare its behavior with the linked Python cart package. Trace how CyberChef exposes file-parsing operations and add coverage for CaRT metadata and access to contained files; done means CaRT files can be decoded without manual modification.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, python
- Domain
- data
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100