search

fkie-cad / FACT_core

Firmware Analysis and Comparison Tool
https://fkie-cad.github.io/FACT_core
GNU General Public License v3.0
1.23k stars 224 forks source link

How to find extractor file in docker or my host #1172

Open yujack008 opened 11 months ago

yujack008 commented 11 months ago

The FACT version you are using

No response

Your question

the unpacker module i can see 

patool: Extracting /tmp/extractor/input/f620f62db123b3e26a302b84001c9f02f802ae2a3007b04e3924009cc740b3b1_201609133 ...
patool: running /usr/local/bin/7z e -o/tmp/fact_unpack_bn4gerf6 -- /tmp/extractor/input/f620f62db123b3e26a302b84001c9f02f802ae2a3007b04e3924009cc740b3b1_201609133
patool: ... /tmp/extractor/input/f620f62db123b3e26a302b84001c9f02f802ae2a3007b04e3924009cc740b3b1_201609133 extracted to `/tmp/fact_unpack_bn4gerf6'.

but how can find /tmp/fact_unpack_bn4gerf6 . i want to see the extractor file

jstucke commented 11 months ago

The path /tmp/extractor/input/f620f62db123b3e26a302b84001c9f02f802ae2a3007b04e3924009cc740b3b1_201609133 exists only inside the extractor container. What is more, it is mounted from a temporary folder which gets deleted after the extraction is finished. So /tmp/fact_unpack_bn4gerf6 could be the correct folder but it gets deleted directly after the extraction.

You can also use the extractor container directly (without FACT). See the readme for reference.

jstucke commented 11 months ago

Why do you need to find the folder, though? You can also download all files (the file that gets extracted as well as all extracted files) from FACT's web interface.