AgentD / squashfs-tools-ng

A new set of tools and libraries for working with SquashFS images
Other
194 stars 30 forks source link

Forensic Tools #55

Closed AgentD closed 5 months ago

AgentD commented 4 years ago

A number of companies, particularly plastic home router vendors, thought it was a great idea to modify SquashFS just enough to make it incompatible, probably to satisfy their NIH syndrome.

A patch set for squashfs-tools, called sasquatch, already exists for the expressed purpose of liberating the data stored in vendor modifed SquashFS images.

It might be viable to investigate the changes made by sasquatch and add a dedicated forensics tool to squashfs-tools-ng that can pry the data out of slightly mangled images.