trailofbits/polyfile

View on GitHub

A pure Python cleanroom implementation of libmagic, with instrumented parsing from Kaitai struct and an interactive hex viewer

Stars: 390
Forks: 31
Open beginner issues: 0
Indexed issues: 14
Avg merge: 7h 52m
Merged PRs (30d): 72

Dominant language: Python
License: Apache-2.0
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 19, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

14 open issues indexed

A level 0 message reached through use or indirect gets a space where libmagic emits a separator Open

bug

trailofbits/polyfile#3603 · 1 comment · 1 assignee · Opened Sep 18, 2026
A w or W string match reports an extent that runs past the end of the file Open

bug

trailofbits/polyfile#3600 · 1 assignee · Opened Sep 18, 2026
The patched gentoo definition cannot be loaded by libmagic, so magic_defs is no longer a valid magic source Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

trailofbits/polyfile#3586 · Opened Sep 12, 2026
Analyzer.sbud() returns a truncated tree unless the caller materializes the matches first Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 74/100

trailofbits/polyfile#3584 · Opened Sep 12, 2026
Settle and document the public Python API before 1.0 Open

documentation

Difficulty 5/5 Over a week Newbie friendliness 35/100

trailofbits/polyfile#3577 · Opened Sep 12, 2026
Catalogue: libmagic flag and parser divergences with no shipped-definition exposure Open

bug

Difficulty 5/5 Over a week Newbie friendliness 25/100

trailofbits/polyfile#3576 · Opened Sep 12, 2026
CSV verdicts name the dialect instead of the encoding, and only ASCII and UTF-8 CSV is recognized Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 68/100

trailofbits/polyfile#3554 · Opened Sep 11, 2026
Text tests run against the file's bytes for every non-UCS encoding, where libmagic uses its decoded buffer Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 48/100

trailofbits/polyfile#3551 · 1 comment · Opened Sep 11, 2026
Regex tests run on a backtracking engine, so a safe libmagic definition can hang PolyFile Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

trailofbits/polyfile#3547 · Opened Sep 11, 2026
No equivalent of libmagic's readcdf, so an HWP 5.0 document keeps the OLE 2 prefix Open

claude-code-assisted enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

trailofbits/polyfile#3535 · Opened Sep 11, 2026
Cut the v0.6.0 release Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

trailofbits/polyfile#3533 · 2 comments · Opened Sep 11, 2026
Implement all-offsets scanning for embedded file detection Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

trailofbits/polyfile#3532 · Opened Sep 11, 2026
Feature request: improved search w/ stream support Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

trailofbits/polyfile#3363 · Opened Dec 2, 2021
Low, low priority: Consider alternate handling for encrypted Zip streams Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

trailofbits/polyfile#11 · Opened Nov 6, 2019

trailofbits/polyfile

Get new issues in your inbox