gchq / gchq/CyberChef

Feature request: Decode CaRT Files

Open
#1,097 0 comments 2 reactions 0 assignees View on GitHub
feature
Dominant language
JavaScript
Stars
35.8k
Forks
4.1k
Avg merge
2d 26m
Merged PRs (30d)
33

Description

There is not an easy way to view CaRT files in CyberChef, if at all.

It would be nice if a CaRT file could be extracted, which would show the CaRT metadata and provide access to the contained files. This works a bit, but only with manual modification.
```
Drop_bytes(0,60,false)
Take_bytes(0,6000,false)
RC4({'option':'Hex','string':'03 01 04 01 05 09 02 06 03 01 04 01 05 09 02 06 '},'Latin1','Latin1')
Zlib_Inflate(0,0,'Adaptive',false,false)
```

Of course, this can already be done with Python. https://pypi.org/project/cart/

Contributor guide

Open the contributing guide

Research direction

Start with the manual Drop_bytes, Take_bytes, RC4 and Zlib_Inflate recipe in the issue, then compare its behavior with the linked Python cart package. Trace how CyberChef exposes file-parsing operations and add coverage for CaRT metadata and access to contained files; done means CaRT files can be decoded without manual modification.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript, python
Domain
data
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.