Skip to content

Commit

Permalink
v1.0.2: fix documentation bugs
Browse files Browse the repository at this point in the history
  • Loading branch information
makesourcenotcode committed Dec 1, 2023
1 parent 7c68ae2 commit b3ef16e
Showing 1 changed file with 3 additions and 6 deletions.
9 changes: 3 additions & 6 deletions README.txt
Original file line number Diff line number Diff line change
Expand Up @@ -76,7 +76,7 @@ That story is Thoroughly Entertaining. But for those short on time pages 67-75
contain the critical details you need to try that approach as well. Page 80 of
the slides is the approach I believe in retrospect would have been best.

Namely find all offsets for the '----BEGIN PGP PRIVATE KEY BLOCK-----' bytes in
Namely find all offsets for the '-----BEGIN PGP PRIVATE KEY BLOCK-----' bytes in
the image, read some chunk of data from each such offset storing it in a
temporary file, try importing that temporary file with GnuPG which shouldn't be
bothered by any junk bytes at the end. Or worst case scenario GnuPG should
Expand Down Expand Up @@ -118,12 +118,9 @@ scenarios.

Scalpel: https://github.com/sleuthkit/scalpel

It doesn't seem to have any kin of support for OpenPGP data formats. However it
It doesn't seem to have any kind of support for OpenPGP data formats. However it
may be possible to feed a line to scalpel.conf approximately like:
NONE y 65536 "----BEGIN PGP PRIVATE KEY BLOCK-----" "-----END PGP PRIVATE KEY BLOCK-----" REVERSE

You may need to hex encode the header and footer bits above as it's unclear from
my cursory inspection how the config file parser handles spaces in each column.
asc y 65536 -----BEGIN\sPGP\sPRIVATE\sKEY\sBLOCK----- -----END\sPGP\sPRIVATE\sKEY\sBLOCK-----

2:

Expand Down

0 comments on commit b3ef16e

Please sign in to comment.