mandiant / VM-Packages

Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
Apache License 2.0
144 stars 65 forks source link

Package proposal update: 7zip v15 to 7-zip v23.01 #658

Open SebastienLavaux84302 opened 1 year ago

SebastienLavaux84302 commented 1 year ago

Package Name

7-zip

Tool Name

7-zip

Package type

SINGLE_EXE

Is the tool a console application?

true

Tool's version number

23.01

Category

Utilities

Tool's authors

Igor Pavlov

Tool's description

A free file archiver for extremely high compression

Download URL

https://sourceforge.net/projects/sevenzip/files/7-Zip/23.01/

Download SHA256 Hash

26CB6E9F56333682122FAFE79DBCDFD51E9F47CC7217DCCD29AC6FC33B5598CD

Why is this tool a good addition?

Upgrading 7-Zip from version 15 to version 23.01 would be an excellent addition to the FLARE VM project for several reasons: Improved security: Newer versions of the software include fixes for known vulnerabilities, offering better protection against malware exploits and potential attacks. Improved performance: Updates typically include performance enhancements, saving security professionals time when decompressing and analyzing files, speeding up incident response and malware analysis workflows.

mr-tz commented 1 year ago

See #473 and #87. What are your thoughts based on those discussions?

emtuls commented 8 months ago

@mr-tz @Ana06 Have we considered this option? https://github.com/myfreeer/7z-build-nsis

It looks like the developers of 7zip introduced a change to remove the NSIS decompilation component in official builds, but left the code in. It mostly just requires defining NSIS_SCRIPT in a header file and possibly a couple of other changes as seen in https://github.com/myfreeer/7z-build-nsis/blob/master/7-zip-patch.sh and discussed here: https://sourceforge.net/p/sevenzip/discussion/45797/thread/5d10a376/#6e1d/3fa3/6840/fe9c

Building 7zip myself did not end up going well, but the linked tool on github (7z-build-nsis) seems to have done it and releases a package for it too! 😊