microsoft / microsoft/AttackSurfaceAnalyzer
Flag Zip files that are also jpegs
Open
Nobody has claimed this yet.
filters
- Dominant language
- C#
- Stars
- 3k
- Forks
- 294
- PR merge metrics
- No merged PRs in 30d
Description
What does this rule detect?
It is possible to concatenation a zip on the end of a jpeg. It will still open and parse as a jpeg and it will also be able to be unzipped. This seems like an unusual thing that might be worth reporting on.
https://ostechnix.com/hide-files-inside-images-linux/
Why should this rule be added?
Does this require the addition of a new operation to the parser?
No.
Rule Json (optional)
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.