/
usr
/
bin
/
/usr/bin
mkdir
upload
Name
Size
Mode
Actions
aa-enabled
18744
0755
edit
dl
rm
aa-exec
18744
0755
edit
dl
rm
aa-features-abi
18736
0755
edit
dl
rm
acpidbg
1622
0755
edit
dl
rm
acpi_listen
14920
0755
edit
dl
rm
add-apt-repository
16422
0755
edit
dl
rm
addpart
14720
0755
edit
dl
rm
apport-bug
2322
0755
edit
dl
rm
apport-cli
13625
0755
edit
dl
rm
apport-collect
2322
0755
edit
dl
rm
apport-unpack
3790
0755
edit
dl
rm
appstreamcli
141544
0755
edit
dl
rm
apropos
48416
0755
edit
dl
rm
apt
18824
0755
edit
dl
rm
apt-add-repository
16422
0755
edit
dl
rm
apt-cache
88544
0755
edit
dl
rm
apt-cdrom
27104
0755
edit
dl
rm
apt-config
31120
0755
edit
dl
rm
apt-extracttemplates
23008
0755
edit
dl
rm
apt-ftparchive
227816
0755
edit
dl
rm
apt-get
51680
0755
edit
dl
rm
apt-key
28664
0755
edit
dl
rm
apt-mark
55776
0755
edit
dl
rm
apt-sortpkgs
51608
0755
edit
dl
rm
arch
35336
0755
edit
dl
rm
automat-visualize3
984
0755
edit
dl
rm
awk
739840
0755
edit
dl
rm
b2sum
55816
0755
edit
dl
rm
base32
39432
0755
edit
dl
rm
base64
39432
0755
edit
dl
rm
basename
35336
0755
edit
dl
rm
basenc
47624
0755
edit
dl
rm
bash
1446024
0755
edit
dl
rm
bashbug
6988
0755
edit
dl
rm
bc
93000
0755
edit
dl
rm
boltctl
125792
0755
edit
dl
rm
bpftrace
2250576
0755
edit
dl
rm
bpftrace-aotrt
1009016
0755
edit
dl
rm
btrfs
1025280
0755
edit
dl
rm
btrfs-convert
590128
0755
edit
dl
rm
btrfs-find-root
532784
0755
edit
dl
rm
btrfs-image
565552
0755
edit
dl
rm
btrfs-map-logical
532784
0755
edit
dl
rm
btrfs-select-super
528688
0755
edit
dl
rm
btrfsck
1025280
0755
edit
dl
rm
btrfstune
557360
0755
edit
dl
rm
busctl
96864
0755
edit
dl
rm
busybox
2124608
0755
edit
dl
rm
byobu
8703
0755
edit
dl
rm
byobu-config
996
0755
edit
dl
rm
byobu-ctrl-a
4774
0755
edit
dl
rm
byobu-disable
1295
0755
edit
dl
rm
byobu-disable-prompt
1341
0755
edit
dl
rm
byobu-enable
1182
0755
edit
dl
rm
byobu-enable-prompt
1453
0755
edit
dl
rm
byobu-export
1421
0755
edit
dl
rm
byobu-janitor
7209
0755
edit
dl
rm
byobu-keybindings
1506
0755
edit
dl
rm
byobu-launch
3329
0755
edit
dl
rm
byobu-launcher
1910
0755
edit
dl
rm
byobu-launcher-install
2529
0755
edit
dl
rm
byobu-launcher-uninstall
1561
0755
edit
dl
rm
byobu-layout
3348
0755
edit
dl
rm
byobu-prompt
1156
0755
edit
dl
rm
byobu-quiet
1410
0755
edit
dl
rm
byobu-reconnect-sockets
3298
0755
edit
dl
rm
byobu-screen
8703
0755
edit
dl
rm
byobu-select-backend
1452
0755
edit
dl
rm
byobu-select-profile
5180
0755
edit
dl
rm
byobu-select-session
1012
0755
edit
dl
rm
byobu-shell
1697
0755
edit
dl
rm
byobu-silent
1306
0755
edit
dl
rm
byobu-status
6015
0755
edit
dl
rm
byobu-status-detail
1207
0755
edit
dl
rm
byobu-tmux
8703
0755
edit
dl
rm
byobu-ugraph
4667
0755
edit
dl
rm
byobu-ulevel
11996
0755
edit
dl
rm
captoinfo
92584
0755
edit
dl
rm
cat
39384
0755
edit
dl
rm
catman
31504
0755
edit
dl
rm
certbot
958
0755
edit
dl
rm
cftp3
224
0755
edit
dl
rm
cgi-fcgi
18584
0755
edit
dl
rm
chage
72184
2755
edit
dl
rm
chardet
221
0755
edit
dl
rm
chardetect
221
0755
edit
dl
rm
chattr
14656
0755
edit
dl
rm
chcon
59912
0755
edit
dl
rm
chfn
72792
4755
edit
dl
rm
chgrp
59912
0755
edit
dl
rm
chmod
55816
0755
edit
dl
rm
choom
22912
0755
edit
dl
rm
chown
59912
0755
edit
dl
rm
chronyc
93392
0755
edit
dl
rm
chrt
31104
0755
edit
dl
rm
chsh
44760
4755
edit
dl
rm
chvt
14712
0755
edit
dl
rm
cifsiostat
27080
0755
edit
dl
rm
ckbcomp
150674
0755
edit
dl
rm
ckeygen3
227
0755
edit
dl
rm
cksum
104984
0755
edit
dl
rm
clear
14656
0755
edit
dl
rm
clear_console
14568
0755
edit
dl
rm
cloud-id
966
0755
edit
dl
rm
cloud-init
970
0755
edit
dl
rm
cloud-init-per
2108
0755
edit
dl
rm
cmp
43408
0755
edit
dl
rm
codepage
14640
0755
edit
dl
rm
col
22920
0755
edit
dl
rm
col1
963
0755
edit
dl
rm
col2
963
0755
edit
dl
rm
col3
963
0755
edit
dl
rm
col4
963
0755
edit
dl
rm
col5
963
0755
edit
dl
rm
col6
963
0755
edit
dl
rm
col7
963
0755
edit
dl
rm
col8
963
0755
edit
dl
rm
col9
963
0755
edit
dl
rm
colcrt
14728
0755
edit
dl
rm
colrm
14728
0755
edit
dl
rm
column
39304
0755
edit
dl
rm
comm
39440
0755
edit
dl
rm
conch3
225
0755
edit
dl
rm
corelist
15375
0755
edit
dl
rm
cp
141848
0755
edit
dl
rm
cpan
8360
0755
edit
dl
rm
cpan5.38-x86_64-linux-gnu
8381
0755
edit
dl
rm
cpio
140928
0755
edit
dl
rm
cpupower
1622
0755
edit
dl
rm
crontab
39664
2755
edit
dl
rm
csplit
51720
0755
edit
dl
rm
ctail
960
0755
edit
dl
rm
ctstat
23200
0755
edit
dl
rm
curl
297288
0755
edit
dl
rm
cut
39432
0755
edit
dl
rm
cvtsudoers
328808
0755
edit
dl
rm
c_rehash
6841
0755
edit
dl
rm
dash
129784
0755
edit
dl
rm
date
109064
0755
edit
dl
rm
dbus-cleanup-sockets
14632
0755
edit
dl
rm
dbus-daemon
236176
0755
edit
dl
rm
dbus-monitor
26928
0755
edit
dl
rm
dbus-run-session
14640
0755
edit
dl
rm
dbus-send
31016
0755
edit
dl
rm
dbus-update-activation-environment
14632
0755
edit
dl
rm
dbus-uuidgen
14632
0755
edit
dl
rm
dbxtool
31024
0755
edit
dl
rm
dd
72232
0755
edit
dl
rm
deallocvt
14712
0755
edit
dl
rm
deb-systemd-helper
24358
0755
edit
dl
rm
deb-systemd-invoke
7135
0755
edit
dl
rm
debconf
2870
0755
edit
dl
rm
debconf-apt-progress
11846
0755
edit
dl
rm
debconf-communicate
623
0755
edit
dl
rm
debconf-copydb
1718
0755
edit
dl
rm
debconf-escape
668
0755
edit
dl
rm
debconf-set-selections
3216
0755
edit
dl
rm
debconf-show
1825
0755
edit
dl
rm
debian-distro-info
31696
0755
edit
dl
rm
delpart
14720
0755
edit
dl
rm
delv
46408
0755
edit
dl
rm
df
89168
0755
edit
dl
rm
dh_bash-completion
4527
0755
edit
dl
rm
dh_installxmlcatalogs
9444
0755
edit
dl
rm
diff
137776
0755
edit
dl
rm
diff3
59920
0755
edit
dl
rm
dig
154448
0755
edit
dl
rm
dir
142312
0755
edit
dl
rm
dircolors
47632
0755
edit
dl
rm
dirmngr
485136
0755
edit
dl
rm
dirmngr-client
56240
0755
edit
dl
rm
dirname
35208
0755
edit
dl
rm
distro-info
27536
0755
edit
dl
rm
dmesg
70288
0755
edit
dl
rm
dnsdomainname
22760
0755
edit
dl
rm
do-release-upgrade
10675
0755
edit
dl
rm
domainname
22760
0755
edit
dl
rm
dpkg
318176
0755
edit
dl
rm
dpkg-deb
146000
0755
edit
dl
rm
dpkg-divert
121416
0755
edit
dl
rm
dpkg-maintscript-helper
21205
0755
edit
dl
rm
dpkg-query
137792
0755
edit
dl
rm
dpkg-realpath
4185
0755
edit
dl
rm
dpkg-split
100896
0755
edit
dl
rm
dpkg-statoverride
51592
0755
edit
dl
rm
dpkg-trigger
43552
0755
edit
dl
rm
du
100872
0755
edit
dl
rm
dumpkeys
166760
0755
edit
dl
rm
eatmydata
2806
0755
edit
dl
rm
ec2metadata
8583
0755
edit
dl
rm
echo
35208
0755
edit
dl
rm
ed
59960
0755
edit
dl
rm
editor
279040
0755
edit
dl
rm
efibootdump
22840
0755
edit
dl
rm
efibootmgr
48832
0755
edit
dl
rm
egrep
41
0755
edit
dl
rm
eject
43240
0755
edit
dl
rm
enable-ec2-spot-hibernation
237
0755
edit
dl
rm
enc2xs
41947
0755
edit
dl
rm
encguess
3069
0755
edit
dl
rm
env
48072
0755
edit
dl
rm
envsubst
35200
0755
edit
dl
rm
eqn
192968
0755
edit
dl
rm
ex
4130640
0755
edit
dl
rm
expand
35360
0755
edit
dl
rm
expiry
27152
2755
edit
dl
rm
expr
43432
0755
edit
dl
rm
factor
64008
0755
edit
dl
rm
faillog
23168
0755
edit
dl
rm
fallocate
27008
0755
edit
dl
rm
false
26936
0755
edit
dl
rm
fgconsole
14712
0755
edit
dl
rm
fgrep
41
0755
edit
dl
rm
file
31336
0755
edit
dl
rm
finalrd
2112
0755
edit
dl
rm
find
204264
0755
edit
dl
rm
findmnt
69280
0755
edit
dl
rm
flock
23024
0755
edit
dl
rm
fmt
39432
0755
edit
dl
rm
fold
35336
0755
edit
dl
rm
free
27008
0755
edit
dl
rm
ftp
187288
0755
edit
dl
rm
funzip
26928
0755
edit
dl
rm
fuser
40288
0755
edit
dl
rm
fusermount
39296
4755
edit
dl
rm
fusermount3
39296
4755
edit
dl
rm
fwupdmgr
121136
0755
edit
dl
rm
fwupdtool
112944
0755
edit
dl
rm
gapplication
22920
0755
edit
dl
rm
gawk
739840
0755
edit
dl
rm
gawkbug
6903
0755
edit
dl
rm
gdbus
51592
0755
edit
dl
rm
geqn
192968
0755
edit
dl
rm
getconf
26992
0755
edit
dl
rm
getent
39648
0755
edit
dl
rm
getkeycodes
14712
0755
edit
dl
rm
getopt
22912
0755
edit
dl
rm
gettext
35200
0755
edit
dl
rm
gettext.sh
5188
0755
edit
dl
rm
ginstall-info
48376
0755
edit
dl
rm
gio
104856
0755
edit
dl
rm
gio-querymodules
18744
0755
edit
dl
rm
git
4066232
0755
edit
dl
rm
git-receive-pack
4066232
0755
edit
dl
rm
git-shell
639808
0755
edit
dl
rm
git-upload-archive
4066232
0755
edit
dl
rm
git-upload-pack
4066232
0755
edit
dl
rm
glib-compile-schemas
55608
0755
edit
dl
rm
gpasswd
76248
4755
edit
dl
rm
gpg
1147800
0755
edit
dl
rm
gpg-agent
366096
0755
edit
dl
rm
gpg-connect-agent
89400
0755
edit
dl
rm
gpg-wks-client
142712
0755
edit
dl
rm
gpgconf
118128
0755
edit
dl
rm
gpgparsemail
35200
0755
edit
dl
rm
gpgsm
513400
0755
edit
dl
rm
gpgsplit
27256
0755
edit
dl
rm
gpgtar
69456
0755
edit
dl
rm
gpgv
310416
0755
edit
dl
rm
gpic
200768
0755
edit
dl
rm
grep
186824
0755
edit
dl
rm
gresource
22840
0755
edit
dl
rm
groff
96776
0755
edit
dl
rm
grog
19195
0755
edit
dl
rm
grops
166456
0755
edit
dl
rm
grotty
121352
0755
edit
dl
rm
groups
35336
0755
edit
dl
rm
growpart
29895
0755
edit
dl
rm
grub-editenv
402600
0755
edit
dl
rm
grub-file
759688
0755
edit
dl
rm
grub-fstest
884040
0755
edit
dl
rm
grub-glue-efi
105352
0755
edit
dl
rm
grub-kbdcomp
1681
0755
edit
dl
rm
grub-menulst2cfg
85192
0755
edit
dl
rm
grub-mkfont
134600
0755
edit
dl
rm
grub-mkimage
386312
0755
edit
dl
rm
grub-mklayout
105704
0755
edit
dl
rm
grub-mknetdir
440088
0755
edit
dl
rm
grub-mkpasswd-pbkdf2
113992
0755
edit
dl
rm
grub-mkrelpath
266024
0755
edit
dl
rm
grub-mkrescue
1044312
0755
edit
dl
rm
grub-mkstandalone
522408
0755
edit
dl
rm
grub-mount
698584
0755
edit
dl
rm
grub-ntldr-img
39312
0755
edit
dl
rm
grub-render-label
768232
0755
edit
dl
rm
grub-script-check
129800
0755
edit
dl
rm
grub-syslinux2cfg
715480
0755
edit
dl
rm
gsettings
31032
0755
edit
dl
rm
gtbl
137704
0755
edit
dl
rm
gunzip
2346
0755
edit
dl
rm
gzexe
6480
0755
edit
dl
rm
gzip
93424
0755
edit
dl
rm
h2ph
29227
0755
edit
dl
rm
h2xs
60934
0755
edit
dl
rm
hardlink
47600
0755
edit
dl
rm
hd
47504
0755
edit
dl
rm
head
43528
0755
edit
dl
rm
helpztags
2514
0755
edit
dl
rm
hexdump
47504
0755
edit
dl
rm
hibagent
24473
0755
edit
dl
rm
hibinit-agent
18398
0755
edit
dl
rm
host
121672
0755
edit
dl
rm
hostid
35336
0755
edit
dl
rm
hostname
22760
0755
edit
dl
rm
hostnamectl
31184
0755
edit
dl
rm
htop
379216
0755
edit
dl
rm
hwe-support-status
11511
0755
edit
dl
rm
i386
27288
0755
edit
dl
rm
ibd2sdi
269048
0755
edit
dl
rm
iconv
68072
0755
edit
dl
rm
id
39432
0755
edit
dl
rm
inetutils-telnet
182120
0755
edit
dl
rm
info
247536
0755
edit
dl
rm
infobrowser
247536
0755
edit
dl
rm
infocmp
67968
0755
edit
dl
rm
infotocap
92584
0755
edit
dl
rm
innochecksum
175504
0755
edit
dl
rm
install
145944
0755
edit
dl
rm
install-info
48376
0755
edit
dl
rm
instmodsh
4373
0755
edit
dl
rm
ionice
18816
0755
edit
dl
rm
iostat
55744
0755
edit
dl
rm
ip
772920
0755
edit
dl
rm
ipcmk
22984
0755
edit
dl
rm
ipcrm
18816
0755
edit
dl
rm
ipcs
39296
0755
edit
dl
rm
iptables-xml
95176
0755
edit
dl
rm
ischroot
14824
0755
edit
dl
rm
iscsiadm
379320
0755
edit
dl
rm
join
51760
0755
edit
dl
rm
journalctl
80800
0755
edit
dl
rm
jq
30872
0755
edit
dl
rm
json-patch-jsondiff
1004
0755
edit
dl
rm
jsondiff
1004
0755
edit
dl
rm
jsonpatch
3859
0755
edit
dl
rm
jsonpointer
1838
0755
edit
dl
rm
jsonschema
213
0755
edit
dl
rm
json_pp
4992
0755
edit
dl
rm
kbdinfo
18808
0755
edit
dl
rm
kbd_mode
15016
0755
edit
dl
rm
kbxutil
64336
0755
edit
dl
rm
keep-one-running
3592
0755
edit
dl
rm
kernel-install
55984
0755
edit
dl
rm
kill
22912
0755
edit
dl
rm
killall
32096
0755
edit
dl
rm
kmod
174328
0755
edit
dl
rm
kmodsign
18888
0755
edit
dl
rm
landscape-sysinfo
646
0755
edit
dl
rm
last
35200
0755
edit
dl
rm
lastb
35200
0755
edit
dl
rm
lastlog
28456
0755
edit
dl
rm
lcf
7784
0755
edit
dl
rm
ld.so
236616
0755
edit
dl
rm
ldd
5382
0755
edit
dl
rm
less
194952
0755
edit
dl
rm
lessecho
14656
0755
edit
dl
rm
lessfile
9047
0755
edit
dl
rm
lesskey
24272
0755
edit
dl
rm
lesspipe
9047
0755
edit
dl
rm
letsencrypt
958
0755
edit
dl
rm
lexgrog
101896
0755
edit
dl
rm
libnetcfg
15778
0755
edit
dl
rm
link
35336
0755
edit
dl
rm
linux-boot-prober
1577
0755
edit
dl
rm
linux-check-removal
4090
0755
edit
dl
rm
linux-update-symlinks
6320
0755
edit
dl
rm
linux-version
2698
0755
edit
dl
rm
linux32
27288
0755
edit
dl
rm
linux64
27288
0755
edit
dl
rm
ln
55816
0755
edit
dl
rm
lnstat
23200
0755
edit
dl
rm
loadkeys
207768
0755
edit
dl
rm
loadunimap
35288
0755
edit
dl
rm
locale
50824
0755
edit
dl
rm
locale-check
14488
0755
edit
dl
rm
localectl
27080
0755
edit
dl
rm
localedef
326752
0755
edit
dl
rm
logger
39904
0755
edit
dl
rm
login
53056
0755
edit
dl
rm
loginctl
68176
0755
edit
dl
rm
logname
35336
0755
edit
dl
rm
look
18824
0755
edit
dl
rm
lowntfs-3g
121832
0755
edit
dl
rm
ls
142312
0755
edit
dl
rm
lsattr
14656
0755
edit
dl
rm
lsblk
149896
0755
edit
dl
rm
lsb_release
2651
0755
edit
dl
rm
lscpu
113032
0755
edit
dl
rm
lshw
980168
0755
edit
dl
rm
lsinitramfs
735
0755
edit
dl
rm
lsipc
51584
0755
edit
dl
rm
lslocks
31504
0755
edit
dl
rm
lslogins
51584
0755
edit
dl
rm
lsmem
39296
0755
edit
dl
rm
lsmod
174328
0755
edit
dl
rm
lsns
43400
0755
edit
dl
rm
lsof
175784
0755
edit
dl
rm
lspci
102512
0755
edit
dl
rm
lspgpot
1081
0755
edit
dl
rm
lspower
1207
0755
edit
dl
rm
lsusb
252432
0755
edit
dl
rm
lzcat
89008
0755
edit
dl
rm
lzcmp
7422
0755
edit
dl
rm
lzdiff
7422
0755
edit
dl
rm
lzegrep
10333
0755
edit
dl
rm
lzfgrep
10333
0755
edit
dl
rm
lzgrep
10333
0755
edit
dl
rm
lzless
1813
0755
edit
dl
rm
lzma
89008
0755
edit
dl
rm
lzmainfo
14720
0755
edit
dl
rm
lzmore
2190
0755
edit
dl
rm
mailmail3
227
0755
edit
dl
rm
man
128416
0755
edit
dl
rm
man-recode
36248
0755
edit
dl
rm
mandb
147120
0755
edit
dl
rm
manifest
1942
0755
edit
dl
rm
manpath
27424
0755
edit
dl
rm
mapscrn
31192
0755
edit
dl
rm
markdown-it
220
0755
edit
dl
rm
mawk
170768
0755
edit
dl
rm
mbim-network
11342
0755
edit
dl
rm
mbimcli
221944
0755
edit
dl
rm
mcookie
27080
0755
edit
dl
rm
md5sum
39336
0755
edit
dl
rm
md5sum.textutils
39336
0755
edit
dl
rm
mdig
51608
0755
edit
dl
rm
memhog
14768
0755
edit
dl
rm
mesg
14720
0755
edit
dl
rm
migrate-pubring-from-classic-gpg
3093
0755
edit
dl
rm
migratepages
14720
0755
edit
dl
rm
migspeed
14648
0755
edit
dl
rm
mkdir
76296
0755
edit
dl
rm
mkfifo
43528
0755
edit
dl
rm
mknod
43528
0755
edit
dl
rm
mksquashfs
293832
0755
edit
dl
rm
mktemp
35336
0755
edit
dl
rm
mk_modmap
16163
0755
edit
dl
rm
mmcli
280512
0755
edit
dl
rm
mokutil
60904
0755
edit
dl
rm
more
47496
0755
edit
dl
rm
mount
51584
4755
edit
dl
rm
mountpoint
18816
0755
edit
dl
rm
mpstat
51656
0755
edit
dl
rm
mt
72432
0755
edit
dl
rm
mt-gnu
72432
0755
edit
dl
rm
mtr
78080
0755
edit
dl
rm
mtr-packet
35120
0755
edit
dl
rm
mv
137752
0755
edit
dl
rm
myisamchk
6859272
0755
edit
dl
rm
myisamlog
6677032
0755
edit
dl
rm
myisampack
6707344
0755
edit
dl
rm
myisam_ftdump
6644832
0755
edit
dl
rm
mysql
6912408
0755
edit
dl
rm
mysqladmin
6750288
0755
edit
dl
rm
mysqlanalyze
6759152
0755
edit
dl
rm
mysqlbinlog
7076064
0755
edit
dl
rm
mysqlcheck
6759152
0755
edit
dl
rm
mysqldump
6838800
0755
edit
dl
rm
mysqldumpslow
7719
0755
edit
dl
rm
mysqld_multi
27367
0755
edit
dl
rm
mysqld_safe
29137
0755
edit
dl
rm
mysqlimport
6742272
0755
edit
dl
rm
mysqloptimize
6759152
0755
edit
dl
rm
mysqlpump
7158016
0755
edit
dl
rm
mysqlrepair
6759152
0755
edit
dl
rm
mysqlreport
39016
0755
edit
dl
rm
mysqlshow
6745040
0755
edit
dl
rm
mysqlslap
6759872
0755
edit
dl
rm
mysql_config_editor
160800
0755
edit
dl
rm
mysql_migrate_keyring
6805344
0755
edit
dl
rm
mysql_secure_installation
6730272
0755
edit
dl
rm
mysql_ssl_rsa_setup
207768
0755
edit
dl
rm
mysql_tzinfo_to_sql
76712
0755
edit
dl
rm
mysql_upgrade
6817920
0755
edit
dl
rm
my_print_defaults
175352
0755
edit
dl
rm
namei
22912
0755
edit
dl
rm
nano
279040
0755
edit
dl
rm
nawk
739840
0755
edit
dl
rm
nc
39560
0755
edit
dl
rm
nc.openbsd
39560
0755
edit
dl
rm
neqn
913
0755
edit
dl
rm
netaddr
959
0755
edit
dl
rm
netcat
39560
0755
edit
dl
rm
networkctl
125520
0755
edit
dl
rm
networkd-dispatcher
20362
0755
edit
dl
rm
newgrp
40664
4755
edit
dl
rm
NF
963
0755
edit
dl
rm
ngettext
35200
0755
edit
dl
rm
nice
35336
0755
edit
dl
rm
nisdomainname
22760
0755
edit
dl
rm
nl
39528
0755
edit
dl
rm
nohup
35240
0755
edit
dl
rm
nproc
35336
0755
edit
dl
rm
nroff
5718
0755
edit
dl
rm
nsenter
31336
0755
edit
dl
rm
nslookup
125768
0755
edit
dl
rm
nstat
31104
0755
edit
dl
rm
nsupdate
76344
0755
edit
dl
rm
ntfs-3g
162824
0755
edit
dl
rm
ntfs-3g.probe
14720
0755
edit
dl
rm
ntfscat
27008
0755
edit
dl
rm
ntfscluster
39304
0755
edit
dl
rm
ntfscmp
31104
0755
edit
dl
rm
ntfsdecrypt
43400
0755
edit
dl
rm
ntfsfallocate
27016
0755
edit
dl
rm
ntfsfix
35208
0755
edit
dl
rm
ntfsinfo
55688
0755
edit
dl
rm
ntfsls
28112
0755
edit
dl
rm
ntfsmove
31112
0755
edit
dl
rm
ntfsrecover
104832
0755
edit
dl
rm
ntfssecaudit
80752
0755
edit
dl
rm
ntfstruncate
26936
0755
edit
dl
rm
ntfsusermap
18736
0755
edit
dl
rm
ntfswipe
48032
0755
edit
dl
rm
numactl
36080
0755
edit
dl
rm
numastat
36416
0755
edit
dl
rm
numfmt
59944
0755
edit
dl
rm
od
72200
0755
edit
dl
rm
oem-getlogs
8504
0755
edit
dl
rm
on_ac_power
3788
0755
edit
dl
rm
openssl
1005368
0755
edit
dl
rm
openvt
23272
0755
edit
dl
rm
os-prober
4527
0755
edit
dl
rm
pager
194952
0755
edit
dl
rm
partx
63880
0755
edit
dl
rm
passwd
64152
4755
edit
dl
rm
paste
39336
0755
edit
dl
rm
pastebinit
16706
0755
edit
dl
rm
patch
186896
0755
edit
dl
rm
pathchk
35336
0755
edit
dl
rm
pbget
2569
0755
edit
dl
rm
pbput
2569
0755
edit
dl
rm
pbputs
2569
0755
edit
dl
rm
pdb3
69459
0755
edit
dl
rm
pdb3.12
69459
0755
edit
dl
rm
peekfd
14640
0755
edit
dl
rm
perf
1622
0755
edit
dl
rm
perl
4023408
0755
edit
dl
rm
perl5.38-x86_64-linux-gnu
14648
0755
edit
dl
rm
perl5.38.2
4023408
0755
edit
dl
rm
perlbug
45593
0755
edit
dl
rm
perldoc
125
0755
edit
dl
rm
perlivp
10867
0755
edit
dl
rm
perlthanks
45593
0755
edit
dl
rm
perror
1534392
0755
edit
dl
rm
pgrep
35296
0755
edit
dl
rm
phar
14885
0755
edit
dl
rm
phar.phar
14885
0755
edit
dl
rm
phar.phar7.4
14885
0755
edit
dl
rm
phar7.4
14885
0755
edit
dl
rm
phar7.4.phar
14885
0755
edit
dl
rm
php
4813936
0755
edit
dl
rm
php7.4
4813936
0755
edit
dl
rm
pic
200768
0755
edit
dl
rm
pico
279040
0755
edit
dl
rm
piconv
8360
0755
edit
dl
rm
pidof
26856
0755
edit
dl
rm
pidstat
51656
0755
edit
dl
rm
pidwait
35296
0755
edit
dl
rm
pinentry
60056
0755
edit
dl
rm
pinentry-curses
60056
0755
edit
dl
rm
ping
89800
0755
edit
dl
rm
ping4
89800
0755
edit
dl
rm
ping6
89800
0755
edit
dl
rm
pinky
39336
0755
edit
dl
rm
pkaction
18736
0755
edit
dl
rm
pkcheck
22832
0755
edit
dl
rm
pkcon
55608
0755
edit
dl
rm
pkill
35296
0755
edit
dl
rm
pkmon
22840
0755
edit
dl
rm
pkttyagent
22832
0755
edit
dl
rm
pl2pm
4536
0755
edit
dl
rm
pldd
22976
0755
edit
dl
rm
plymouth
47408
0755
edit
dl
rm
pmap
35224
0755
edit
dl
rm
pod2html
4041
0755
edit
dl
rm
pod2man
18898
0755
edit
dl
rm
pod2text
13112
0755
edit
dl
rm
pod2usage
4107
0755
edit
dl
rm
podchecker
3658
0755
edit
dl
rm
pollinate
8744
0755
edit
dl
rm
pr
72272
0755
edit
dl
rm
preconv
59880
0755
edit
dl
rm
printenv
35208
0755
edit
dl
rm
printf
55744
0755
edit
dl
rm
prlimit
27536
0755
edit
dl
rm
pro
1003
0755
edit
dl
rm
prove
13659
0755
edit
dl
rm
prtstat
18816
0755
edit
dl
rm
ps
146424
0755
edit
dl
rm
psfaddtable
22904
0755
edit
dl
rm
psfgettable
22904
0755
edit
dl
rm
psfstriptable
22904
0755
edit
dl
rm
psfxtable
22904
0755
edit
dl
rm
pslog
14640
0755
edit
dl
rm
pstree
36168
0755
edit
dl
rm
pstree.x11
36168
0755
edit
dl
rm
ptar
3566
0755
edit
dl
rm
ptardiff
2645
0755
edit
dl
rm
ptargrep
4395
0755
edit
dl
rm
ptx
55848
0755
edit
dl
rm
purge-old-kernels
1149
0755
edit
dl
rm
pwd
35336
0755
edit
dl
rm
pwdx
14720
0755
edit
dl
rm
py3clean
7816
0755
edit
dl
rm
py3compile
13314
0755
edit
dl
rm
py3versions
12816
0755
edit
dl
rm
pybabel
956
0755
edit
dl
rm
pybabel-python3
956
0755
edit
dl
rm
pydoc3
80
0755
edit
dl
rm
pydoc3.12
80
0755
edit
dl
rm
pygettext3
24224
0755
edit
dl
rm
pygettext3.12
24224
0755
edit
dl
rm
pygmentize
215
0755
edit
dl
rm
pyhtmlizer3
222
0755
edit
dl
rm
pyserial-miniterm
975
0755
edit
dl
rm
pyserial-ports
969
0755
edit
dl
rm
python3
8020928
0755
edit
dl
rm
python3.12
8020928
0755
edit
dl
rm
pzstd
707112
0755
edit
dl
rm
qmi-firmware-update
172128
0755
edit
dl
rm
qmi-network
16428
0755
edit
dl
rm
qmicli
600928
0755
edit
dl
rm
rbash
1446024
0755
edit
dl
rm
rdma
104976
0755
edit
dl
rm
readlink
43432
0755
edit
dl
rm
realpath
43432
0755
edit
dl
rm
red
89
0755
edit
dl
rm
rename.ul
22912
0755
edit
dl
rm
renice
14720
0755
edit
dl
rm
rescan-scsi-bus.sh
38964
0755
edit
dl
rm
reset
26944
0755
edit
dl
rm
resizecons
27096
0755
edit
dl
rm
resizepart
22912
0755
edit
dl
rm
resolvectl
162480
0755
edit
dl
rm
rev
14720
0755
edit
dl
rm
rgrep
30
0755
edit
dl
rm
rm
59912
0755
edit
dl
rm
rmdir
47528
0755
edit
dl
rm
rnano
279040
0755
edit
dl
rm
routel
1658
0755
edit
dl
rm
rrsync
12639
0755
edit
dl
rm
rsync
534680
0755
edit
dl
rm
rsync-ssl
5136
0755
edit
dl
rm
rtla
1622
0755
edit
dl
rm
rtstat
23200
0755
edit
dl
rm
run-one
3592
0755
edit
dl
rm
run-one-constantly
3592
0755
edit
dl
rm
run-one-until-failure
3592
0755
edit
dl
rm
run-one-until-success
3592
0755
edit
dl
rm
run-parts
27464
0755
edit
dl
rm
run-this-one
3592
0755
edit
dl
rm
runcon
35336
0755
edit
dl
rm
rview
4130640
0755
edit
dl
rm
rvim
4130640
0755
edit
dl
rm
sadf
391488
0755
edit
dl
rm
sar
140680
0755
edit
dl
rm
sar.sysstat
140680
0755
edit
dl
rm
savelog
10487
0755
edit
dl
rm
sbattach
23080
0755
edit
dl
rm
sbkeysync
35576
0755
edit
dl
rm
sbsiglist
14952
0755
edit
dl
rm
sbsign
35536
0755
edit
dl
rm
sbvarsign
23280
0755
edit
dl
rm
sbverify
31344
0755
edit
dl
rm
scalar
684992
0755
edit
dl
rm
scandeps
6623
0755
edit
dl
rm
scp
137816
0755
edit
dl
rm
screen
489720
0755
edit
dl
rm
screendump
14640
0755
edit
dl
rm
script
55680
0755
edit
dl
rm
scriptlive
43392
0755
edit
dl
rm
scriptreplay
35200
0755
edit
dl
rm
scsi_logging_level
8585
0755
edit
dl
rm
scsi_mandat
3602
0755
edit
dl
rm
scsi_readcap
1327
0755
edit
dl
rm
scsi_ready
1121
0755
edit
dl
rm
scsi_satl
3830
0755
edit
dl
rm
scsi_start
1285
0755
edit
dl
rm
scsi_stop
1474
0755
edit
dl
rm
scsi_temperature
936
0755
edit
dl
rm
sdiff
51600
0755
edit
dl
rm
sed
113224
0755
edit
dl
rm
select-editor
2450
0755
edit
dl
rm
sensible-browser
1583
0755
edit
dl
rm
sensible-editor
1556
0755
edit
dl
rm
sensible-pager
921
0755
edit
dl
rm
sensible-terminal
1176
0755
edit
dl
rm
seq
51720
0755
edit
dl
rm
setarch
27288
0755
edit
dl
rm
setfont
55768
0755
edit
dl
rm
setkeycodes
14712
0755
edit
dl
rm
setleds
18872
0755
edit
dl
rm
setlogcons
14712
0755
edit
dl
rm
setmetamode
14752
0755
edit
dl
rm
setpci
31112
0755
edit
dl
rm
setpriv
39304
0755
edit
dl
rm
setsid
14720
0755
edit
dl
rm
setterm
35200
0755
edit
dl
rm
setupcon
41025
0755
edit
dl
rm
sftp
154280
0755
edit
dl
rm
sg
40664
4755
edit
dl
rm
sginfo
77832
0755
edit
dl
rm
sgm_dd
35136
0755
edit
dl
rm
sgp_dd
47424
0755
edit
dl
rm
sg_bg_ctl
14856
0755
edit
dl
rm
sg_compare_and_write
27560
0755
edit
dl
rm
sg_copy_results
23856
0755
edit
dl
rm
sg_dd
55632
0755
edit
dl
rm
sg_decode_sense
15112
0755
edit
dl
rm
sg_emc_trespass
14648
0755
edit
dl
rm
sg_format
40296
0755
edit
dl
rm
sg_get_config
36224
0755
edit
dl
rm
sg_get_elem_status
27432
0755
edit
dl
rm
sg_get_lba_status
23496
0755
edit
dl
rm
sg_ident
14952
0755
edit
dl
rm
sg_inq
118384
0755
edit
dl
rm
sg_logs
150456
0755
edit
dl
rm
sg_luns
23336
0755
edit
dl
rm
sg_map
18744
0755
edit
dl
rm
sg_map26
27344
0755
edit
dl
rm
sg_modes
47184
0755
edit
dl
rm
sg_opcodes
35848
0755
edit
dl
rm
sg_persist
36944
0755
edit
dl
rm
sg_prevent
14856
0755
edit
dl
rm
sg_raw
27560
0755
edit
dl
rm
sg_rbuf
23272
0755
edit
dl
rm
sg_rdac
18744
0755
edit
dl
rm
sg_read
26944
0755
edit
dl
rm
sg_readcap
23336
0755
edit
dl
rm
sg_read_attr
37528
0755
edit
dl
rm
sg_read_block_limits
14888
0755
edit
dl
rm
sg_read_buffer
28224
0755
edit
dl
rm
sg_read_long
15048
0755
edit
dl
rm
sg_reassign
19112
0755
edit
dl
rm
sg_referrals
15016
0755
edit
dl
rm
sg_rep_pip
14920
0755
edit
dl
rm
sg_rep_zones
27440
0755
edit
dl
rm
sg_requests
23304
0755
edit
dl
rm
sg_reset
15016
0755
edit
dl
rm
sg_reset_wp
14952
0755
edit
dl
rm
sg_rmsn
14856
0755
edit
dl
rm
sg_rtpg
14952
0755
edit
dl
rm
sg_safte
23240
0755
edit
dl
rm
sg_sanitize
27656
0755
edit
dl
rm
sg_sat_identify
19176
0755
edit
dl
rm
sg_sat_phy_event
19464
0755
edit
dl
rm
sg_sat_read_gplog
19176
0755
edit
dl
rm
sg_sat_set_features
19144
0755
edit
dl
rm
sg_scan
18824
0755
edit
dl
rm
sg_seek
19336
0755
edit
dl
rm
sg_senddiag
27848
0755
edit
dl
rm
sg_ses
122848
0755
edit
dl
rm
sg_ses_microcode
28016
0755
edit
dl
rm
sg_start
19304
0755
edit
dl
rm
sg_stpg
23272
0755
edit
dl
rm
sg_stream_ctl
19144
0755
edit
dl
rm
sg_sync
15016
0755
edit
dl
rm
sg_test_rwbuf
19048
0755
edit
dl
rm
sg_timestamp
23376
0755
edit
dl
rm
sg_turs
27336
0755
edit
dl
rm
sg_unmap
23304
0755
edit
dl
rm
sg_verify
23464
0755
edit
dl
rm
sg_vpd
121264
0755
edit
dl
rm
sg_write_buffer
27888
0755
edit
dl
rm
sg_write_long
15112
0755
edit
dl
rm
sg_write_same
27592
0755
edit
dl
rm
sg_write_verify
27432
0755
edit
dl
rm
sg_write_x
56936
0755
edit
dl
rm
sg_wr_mode
23272
0755
edit
dl
rm
sg_xcopy
43336
0755
edit
dl
rm
sg_zone
15216
0755
edit
dl
rm
sh
129784
0755
edit
dl
rm
sha1sum
39336
0755
edit
dl
rm
sha224sum
39336
0755
edit
dl
rm
sha256sum
39336
0755
edit
dl
rm
sha384sum
39336
0755
edit
dl
rm
sha512sum
39336
0755
edit
dl
rm
shasum
9982
0755
edit
dl
rm
showconsolefont
18808
0755
edit
dl
rm
showkey
18808
0755
edit
dl
rm
shred
55816
0755
edit
dl
rm
shuf
47624
0755
edit
dl
rm
skill
27048
0755
edit
dl
rm
slabtop
22976
0755
edit
dl
rm
sleep
35336
0755
edit
dl
rm
slogin
846888
0755
edit
dl
rm
snap
22693016
0755
edit
dl
rm
snapctl
7943160
0755
edit
dl
rm
snapfuse
39144
0755
edit
dl
rm
snice
27048
0755
edit
dl
rm
soelim
35304
0755
edit
dl
rm
sort
105272
0755
edit
dl
rm
sos
612
0755
edit
dl
rm
sos-collector
1062
0755
edit
dl
rm
sosreport
1054
0755
edit
dl
rm
splain
19449
0755
edit
dl
rm
split
56256
0755
edit
dl
rm
splitfont
14640
0755
edit
dl
rm
sqfscat
151448
0755
edit
dl
rm
sqfstar
293832
0755
edit
dl
rm
ss
132168
0755
edit
dl
rm
ssh
846888
0755
edit
dl
rm
ssh-add
301488
0755
edit
dl
rm
ssh-agent
309688
2755
edit
dl
rm
ssh-argv0
1455
0755
edit
dl
rm
ssh-copy-id
13078
0755
edit
dl
rm
ssh-import-id
985
0755
edit
dl
rm
ssh-import-id-gh
785
0755
edit
dl
rm
ssh-import-id-lp
785
0755
edit
dl
rm
ssh-keygen
453056
0755
edit
dl
rm
ssh-keyscan
338368
0755
edit
dl
rm
stat
88592
0755
edit
dl
rm
static-sh
2124608
0755
edit
dl
rm
stdbuf
51720
0755
edit
dl
rm
strace
2087432
0755
edit
dl
rm
strace-log-merge
1821
0755
edit
dl
rm
streamzip
8061
0755
edit
dl
rm
stty
80408
0755
edit
dl
rm
su
55680
4755
edit
dl
rm
sudo
277936
4755
edit
dl
rm
sudoedit
277936
4755
edit
dl
rm
sudoreplay
98256
0755
edit
dl
rm
sum
35240
0755
edit
dl
rm
sync
35240
0755
edit
dl
rm
systemctl
1501304
0755
edit
dl
rm
systemd
100816
0755
edit
dl
rm
systemd-ac-power
14792
0755
edit
dl
rm
systemd-analyze
203624
0755
edit
dl
rm
systemd-ask-password
19024
0755
edit
dl
rm
systemd-cat
18896
0755
edit
dl
rm
systemd-cgls
23112
0755
edit
dl
rm
systemd-cgtop
39392
0755
edit
dl
rm
systemd-confext
55952
0755
edit
dl
rm
systemd-creds
43744
0755
edit
dl
rm
systemd-cryptenroll
72624
0755
edit
dl
rm
systemd-cryptsetup
80840
0755
edit
dl
rm
systemd-delta
27080
0755
edit
dl
rm
systemd-detect-virt
18888
0755
edit
dl
rm
systemd-escape
22984
0755
edit
dl
rm
systemd-firstboot
60232
0755
edit
dl
rm
systemd-hwdb
158456
0755
edit
dl
rm
systemd-id128
22984
0755
edit
dl
rm
systemd-inhibit
23008
0755
edit
dl
rm
systemd-machine-id-setup
19072
0755
edit
dl
rm
systemd-mount
52000
0755
edit
dl
rm
systemd-notify
27304
0755
edit
dl
rm
systemd-path
18888
0755
edit
dl
rm
systemd-repart
199912
0755
edit
dl
rm
systemd-run
68392
0755
edit
dl
rm
systemd-socket-activate
31176
0755
edit
dl
rm
systemd-stdio-bridge
22992
0755
edit
dl
rm
systemd-sysext
55952
0755
edit
dl
rm
systemd-sysusers
68224
0755
edit
dl
rm
systemd-tmpfiles
117448
0755
edit
dl
rm
systemd-tty-ask-password-agent
35272
0755
edit
dl
rm
systemd-umount
52000
0755
edit
dl
rm
tabs
18744
0755
edit
dl
rm
tac
39336
0755
edit
dl
rm
tail
64032
0755
edit
dl
rm
tapestat
27072
0755
edit
dl
rm
tar
440264
0755
edit
dl
rm
taskset
31104
0755
edit
dl
rm
tbl
137704
0755
edit
dl
rm
tclsh
14488
0755
edit
dl
rm
tclsh8.6
14488
0755
edit
dl
rm
tcpdump
1273976
0755
edit
dl
rm
tee
39432
0755
edit
dl
rm
telnet
182120
0755
edit
dl
rm
tempfile
14648
0755
edit
dl
rm
test
47552
0755
edit
dl
rm
tic
92584
0755
edit
dl
rm
time
27160
0755
edit
dl
rm
timedatectl
47560
0755
edit
dl
rm
timeout
39880
0755
edit
dl
rm
tkconch3
227
0755
edit
dl
rm
tload
22928
0755
edit
dl
rm
tmux
1102608
0755
edit
dl
rm
tnftp
187288
0755
edit
dl
rm
toe
22840
0755
edit
dl
rm
top
134864
0755
edit
dl
rm
touch
96776
0755
edit
dl
rm
tput
26968
0755
edit
dl
rm
tr
47624
0755
edit
dl
rm
trace-cmd
445856
0755
edit
dl
rm
tracepath
18584
0755
edit
dl
rm
trial3
219
0755
edit
dl
rm
troff
744056
0755
edit
dl
rm
true
26936
0755
edit
dl
rm
truncate
39432
0755
edit
dl
rm
tset
26944
0755
edit
dl
rm
tsort
47624
0755
edit
dl
rm
tty
35336
0755
edit
dl
rm
turbostat
1622
0755
edit
dl
rm
twist3
239
0755
edit
dl
rm
twistd3
220
0755
edit
dl
rm
tzselect
15378
0755
edit
dl
rm
ua
1003
0755
edit
dl
rm
ubuntu-advantage
1003
0755
edit
dl
rm
ubuntu-bug
2322
0755
edit
dl
rm
ubuntu-distro-info
27536
0755
edit
dl
rm
ubuntu-security-status
22783
0755
edit
dl
rm
ucf
41657
0755
edit
dl
rm
ucfq
19367
0755
edit
dl
rm
ucfr
11111
0755
edit
dl
rm
uclampset
31104
0755
edit
dl
rm
udevadm
1443632
0755
edit
dl
rm
udisksctl
63872
0755
edit
dl
rm
ul
22920
0755
edit
dl
rm
umount
39296
4755
edit
dl
rm
uname
35336
0755
edit
dl
rm
unattended-upgrade
99547
0755
edit
dl
rm
unattended-upgrades
99547
0755
edit
dl
rm
uncompress
2346
0755
edit
dl
rm
unexpand
39456
0755
edit
dl
rm
unicode_start
2772
0755
edit
dl
rm
unicode_stop
528
0755
edit
dl
rm
uniq
39432
0755
edit
dl
rm
unlink
35336
0755
edit
dl
rm
unlzma
89008
0755
edit
dl
rm
unmkinitramfs
3788
0755
edit
dl
rm
unshare
43624
0755
edit
dl
rm
unsquashfs
151448
0755
edit
dl
rm
unxz
89008
0755
edit
dl
rm
unzip
178608
0755
edit
dl
rm
unzipsfx
76208
0755
edit
dl
rm
unzstd
1022760
0755
edit
dl
rm
update-alternatives
59784
0755
edit
dl
rm
update-microcode-initrd
1174
0755
edit
dl
rm
update-mime-database
76112
0755
edit
dl
rm
uptime
14720
0755
edit
dl
rm
usb-devices
4944
0755
edit
dl
rm
usbhid-dump
31112
0755
edit
dl
rm
usbip
1622
0755
edit
dl
rm
usbipd
1622
0755
edit
dl
rm
usbreset
14640
0755
edit
dl
rm
users
35336
0755
edit
dl
rm
utmpdump
22912
0755
edit
dl
rm
uuidgen
18816
0755
edit
dl
rm
uuidparse
22912
0755
edit
dl
rm
varlinkctl
31176
0755
edit
dl
rm
vcs-run
6912
0755
edit
dl
rm
vdir
142312
0755
edit
dl
rm
VGAuthService
133672
0755
edit
dl
rm
vi
4130640
0755
edit
dl
rm
view
4130640
0755
edit
dl
rm
vigpg
2640
0755
edit
dl
rm
vim
4130640
0755
edit
dl
rm
vim.basic
4130640
0755
edit
dl
rm
vim.tiny
1736392
0755
edit
dl
rm
vimdiff
4130640
0755
edit
dl
rm
vimtutor
2154
0755
edit
dl
rm
vm-support
10066
0755
edit
dl
rm
vmhgfs-fuse
47848
0755
edit
dl
rm
vmstat
39712
0755
edit
dl
rm
vmtoolsd
76352
0755
edit
dl
rm
vmware-alias-import
43544
0755
edit
dl
rm
vmware-checkvm
14720
0755
edit
dl
rm
vmware-hgfsclient
14720
0755
edit
dl
rm
vmware-namespace-cmd
22840
0755
edit
dl
rm
vmware-rpctool
18744
0755
edit
dl
rm
vmware-toolbox-cmd
55904
0755
edit
dl
rm
vmware-vgauth-cmd
18744
0755
edit
dl
rm
vmware-vmblock-fuse
23328
0755
edit
dl
rm
vmware-xferlogs
33104
0755
edit
dl
rm
w
27008
0755
edit
dl
rm
wall
22912
0755
edit
dl
rm
watch
31584
0755
edit
dl
rm
watchgnupg
22840
0755
edit
dl
rm
wc
55824
0755
edit
dl
rm
wdctl
35224
0755
edit
dl
rm
wget
470032
0755
edit
dl
rm
whatis
48416
0755
edit
dl
rm
whereis
31576
0755
edit
dl
rm
which
1080
0755
edit
dl
rm
which.debianutils
1080
0755
edit
dl
rm
whiptail
30888
0755
edit
dl
rm
who
59928
0755
edit
dl
rm
whoami
35336
0755
edit
dl
rm
wifi-status
2107
0755
edit
dl
rm
write
22920
0755
edit
dl
rm
x86_64
27288
0755
edit
dl
rm
x86_energy_perf_policy
1622
0755
edit
dl
rm
xargs
63912
0755
edit
dl
rm
xauth
56280
0755
edit
dl
rm
xdg-user-dir
234
0755
edit
dl
rm
xdg-user-dirs-update
26856
0755
edit
dl
rm
xsubpp
5167
0755
edit
dl
rm
xxd
22816
0755
edit
dl
rm
xz
89008
0755
edit
dl
rm
xzcat
89008
0755
edit
dl
rm
xzcmp
7422
0755
edit
dl
rm
xzdiff
7422
0755
edit
dl
rm
xzegrep
10333
0755
edit
dl
rm
xzfgrep
10333
0755
edit
dl
rm
xzgrep
10333
0755
edit
dl
rm
xzless
1813
0755
edit
dl
rm
xzmore
2190
0755
edit
dl
rm
yes
35208
0755
edit
dl
rm
ypdomainname
22760
0755
edit
dl
rm
zcat
1984
0755
edit
dl
rm
zcmp
1678
0755
edit
dl
rm
zdiff
6447
0755
edit
dl
rm
zdump
31008
0755
edit
dl
rm
zegrep
29
0755
edit
dl
rm
zfgrep
29
0755
edit
dl
rm
zforce
2081
0755
edit
dl
rm
zgrep
8103
0755
edit
dl
rm
zipdetails
70193
0755
edit
dl
rm
zipgrep
2959
0755
edit
dl
rm
zipinfo
178608
0755
edit
dl
rm
zless
2206
0755
edit
dl
rm
zmore
1842
0755
edit
dl
rm
znew
4577
0755
edit
dl
rm
zstd
1022760
0755
edit
dl
rm
zstdcat
1022760
0755
edit
dl
rm
zstdgrep
3869
0755
edit
dl
rm
zstdless
197
0755
edit
dl
rm
zstdmt
1022760
0755
edit
dl
rm
[
55744
0755
edit
dl
rm
Edit:
/usr/bin/zipdetails
(70193B)
#!/usr/bin/perl eval 'exec /usr/bin/perl -S $0 ${1+"$@"}' if 0; # ^ Run only under a shell #!/usr/bin/perl # zipdetails # # Display info on the contents of a Zip file # use 5.010; # for unpack "Q<" BEGIN { # Check for a 32-bit Perl if (!eval { pack "Q", 1 }) { warn "zipdetails requires 64 bit integers, ", "this Perl has 32 bit integers.\n"; exit(1); } } BEGIN { pop @INC if $INC[-1] eq '.' } use strict; use warnings ; no warnings 'portable'; # for unpacking > 2^32 use feature 'state'; use IO::File; use Encode; use Getopt::Long; my $VERSION = "2.104" ; use constant MAX32 => 0xFFFFFFFF ; # Compression types use constant ZIP_CM_STORE => 0 ; use constant ZIP_CM_IMPLODE => 6 ; use constant ZIP_CM_DEFLATE => 8 ; use constant ZIP_CM_BZIP2 => 12 ; use constant ZIP_CM_LZMA => 14 ; use constant ZIP_CM_PPMD => 98 ; # General Purpose Flag use constant ZIP_GP_FLAG_ENCRYPTED_MASK => (1 << 0) ; use constant ZIP_GP_FLAG_STREAMING_MASK => (1 << 3) ; use constant ZIP_GP_FLAG_PATCHED_MASK => (1 << 5) ; use constant ZIP_GP_FLAG_STRONG_ENCRYPTED_MASK => (1 << 6) ; use constant ZIP_GP_FLAG_LZMA_EOS_PRESENT => (1 << 1) ; use constant ZIP_GP_FLAG_LANGUAGE_ENCODING => (1 << 11) ; # Internal File Attributes use constant ZIP_IFA_TEXT_MASK => 1; # Signatures for each of the headers use constant ZIP_LOCAL_HDR_SIG => 0x04034b50; use constant ZIP_DATA_HDR_SIG => 0x08074b50; use constant ZIP_CENTRAL_HDR_SIG => 0x02014b50; use constant ZIP_END_CENTRAL_HDR_SIG => 0x06054b50; use constant ZIP64_END_CENTRAL_REC_HDR_SIG => 0x06064b50; use constant ZIP64_END_CENTRAL_LOC_HDR_SIG => 0x07064b50; use constant ZIP_ARCHIVE_EXTRA_DATA_SIG => 0x08064b50; use constant ZIP_DIGITAL_SIGNATURE_SIG => 0x05054b50; use constant ZIP_ARCHIVE_EXTRA_DATA_RECORD_SIG => 0x08064b50; # Extra sizes use constant ZIP_EXTRA_HEADER_SIZE => 2 ; use constant ZIP_EXTRA_MAX_SIZE => 0xFFFF ; use constant ZIP_EXTRA_SUBFIELD_ID_SIZE => 2 ; use constant ZIP_EXTRA_SUBFIELD_LEN_SIZE => 2 ; use constant ZIP_EXTRA_SUBFIELD_HEADER_SIZE => ZIP_EXTRA_SUBFIELD_ID_SIZE + ZIP_EXTRA_SUBFIELD_LEN_SIZE; use constant ZIP_EXTRA_SUBFIELD_MAX_SIZE => ZIP_EXTRA_MAX_SIZE - ZIP_EXTRA_SUBFIELD_HEADER_SIZE; my %ZIP_CompressionMethods = ( 0 => 'Stored', 1 => 'Shrunk', 2 => 'Reduced compression factor 1', 3 => 'Reduced compression factor 2', 4 => 'Reduced compression factor 3', 5 => 'Reduced compression factor 4', 6 => 'Imploded', 7 => 'Reserved for Tokenizing compression algorithm', 8 => 'Deflated', 9 => 'Enhanced Deflating using Deflate64(tm)', 10 => 'PKWARE Data Compression Library Imploding', 11 => 'Reserved by PKWARE', 12 => 'BZIP2', 13 => 'Reserved by PKWARE', 14 => 'LZMA', 15 => 'Reserved by PKWARE', 16 => 'IBM z/OS CMPSC Compression', 17 => 'Reserved by PKWARE', 18 => 'File is compressed using IBM TERSE (new)', 19 => 'IBM LZ77 z Architecture (PFS)', 93 => 'Zstandard', 94 => 'MP3', 95 => 'XZ', 96 => 'WinZip JPEG Compression', 97 => 'WavPack compressed data', 98 => 'PPMd version I, Rev 1', 99 => 'AES Encryption', ); my %OS_Lookup = ( 0 => "MS-DOS", 1 => "Amiga", 2 => "OpenVMS", 3 => "Unix", 4 => "VM/CMS", 5 => "Atari ST", 6 => "HPFS (OS/2, NT 3.x)", 7 => "Macintosh", 8 => "Z-System", 9 => "CP/M", 10 => "Windows NTFS or TOPS-20", 11 => "MVS or NTFS", 12 => "VSE or SMS/QDOS", 13 => "Acorn RISC OS", 14 => "VFAT", 15 => "alternate MVS", 16 => "BeOS", 17 => "Tandem", 18 => "OS/400", 19 => "OS/X (Darwin)", 30 => "AtheOS/Syllable", ); my %Lookup = ( ZIP_LOCAL_HDR_SIG, \&LocalHeader, ZIP_DATA_HDR_SIG, \&DataHeader, ZIP_CENTRAL_HDR_SIG, \&CentralHeader, ZIP_END_CENTRAL_HDR_SIG, \&EndCentralHeader, ZIP64_END_CENTRAL_REC_HDR_SIG, \&Zip64EndCentralHeader, ZIP64_END_CENTRAL_LOC_HDR_SIG, \&Zip64EndCentralLocator, # TODO - Archive Encryption Headers & digital signature #ZIP_ARCHIVE_EXTRA_DATA_RECORD_SIG #ZIP_DIGITAL_SIGNATURE_SIG #ZIP_ARCHIVE_EXTRA_DATA_SIG ); my %Extras = ( 0x0001, ['ZIP64', \&decode_Zip64], 0x0007, ['AV Info', undef], 0x0008, ['Extended Language Encoding', undef], 0x0009, ['OS/2 extended attributes', undef], 0x000a, ['NTFS FileTimes', \&decode_NTFS_Filetimes], 0x000c, ['OpenVMS', undef], 0x000d, ['Unix', undef], 0x000e, ['Stream & Fork Descriptors', undef], 0x000f, ['Patch Descriptor', undef], 0x0014, ['PKCS#7 Store for X.509 Certificates', undef], 0x0015, ['X.509 Certificate ID and Signature for individual file', undef], 0x0016, ['X.509 Certificate ID for Central Directory', undef], 0x0017, ['Strong Encryption Header', undef], 0x0018, ['Record Management Controls', undef], 0x0019, ['PKCS#7 Encryption Recipient Certificate List', undef], 0x0020, ['Reserved for Timestamp record', undef], 0x0021, ['Policy Decryption Key Record', undef], 0x0022, ['Smartcrypt Key Provider Record', undef], 0x0023, ['Smartcrypt Policy Key Data Record', undef], # The Header ID mappings defined by Info-ZIP and third parties are: 0x0065, ['IBM S/390 attributes - uncompressed', \&decodeMVS], 0x0066, ['IBM S/390 attributes - compressed', undef], 0x07c8, ['Info-ZIP Macintosh (old, J. Lee)', undef], 0x2605, ['ZipIt Macintosh (first version)', undef], 0x2705, ['ZipIt Macintosh v 1.3.5 and newer (w/o full filename)', undef], 0x2805, ['ZipIt Macintosh v 1.3.5 and newer', undef], 0x334d, ["Info-ZIP Macintosh (new, D. Haase's 'Mac3' field)", undef], 0x4154, ['Tandem NSK', undef], 0x4341, ['Acorn/SparkFS (David Pilling)', undef], 0x4453, ['Windows NT security descriptor', \&decode_NT_security], 0x4690, ['POSZIP 4690', undef], 0x4704, ['VM/CMS', undef], 0x470f, ['MVS', undef], 0x4854, ['Theos, old inofficial port', undef], 0x4b46, ['FWKCS MD5 (see below)', undef], 0x4c41, ['OS/2 access control list (text ACL)', undef], 0x4d49, ['Info-ZIP OpenVMS (obsolete)', undef], 0x4d63, ['Macintosh SmartZIP, by Macro Bambini', undef], 0x4f4c, ['Xceed original location extra field', undef], 0x5356, ['AOS/VS (binary ACL)', undef], 0x5455, ['Extended Timestamp', \&decode_UT], 0x554e, ['Xceed unicode extra field', \&decode_Xceed_unicode], 0x5855, ['Info-ZIP Unix (original; also OS/2, NT, etc.)', \&decode_UX], 0x5a4c, ['ZipArchive Unicode Filename', undef], 0x5a4d, ['ZipArchive Offsets Array', undef], 0x6375, ['Info-ZIP Unicode Comment', \&decode_up ], 0x6542, ['BeOS (BeBox, PowerMac, etc.)', undef], 0x6854, ['Theos', undef], 0x7075, ['Info-ZIP Unicode Path', \&decode_up ], 0x756e, ['ASi Unix', undef], 0x7441, ['AtheOS (AtheOS/Syllable attributes)', undef], 0x7855, ['Unix Extra type 2', \&decode_Ux], 0x7875, ['Unix Extra Type 3', \&decode_ux], 0x9901, ['AES Encryption', \&decode_AES], 0xa11e, ['Data Stream Alignment', \&decode_DataStreamAlignment], 0xA220, ['Open Packaging Growth Hint', \&decode_GrowthHint ], 0xCAFE, ['Java Executable', \&decode_Java_exe], 0xfb4a, ['SMS/QDOS', undef], ); my $FH; my $ZIP64 = 0 ; my $NIBBLES = 8; my $LocalHeaderCount = 0; my $CentralHeaderCount = 0; my $START; my $OFFSET = 0 ; my $TRAILING = 0 ; my $PAYLOADLIMIT = 256; my $ZERO = 0 ; my $APK = 0 ; my $START_APK = 0; my $APK_LEN = 0; my $SEEN = Seen->new(); sub prOff { my $offset = shift; my $s = offset($OFFSET); $OFFSET += $offset; return $s; } sub offset { my $v = shift ; sprintf("%0${NIBBLES}X", $v); } my ($OFF, $LENGTH, $CONTENT, $TEXT, $VALUE) ; my $FMT1 ; my $FMT2 ; sub setupFormat { my $wantVerbose = shift ; my $nibbles = shift; my $width = '@' . ('>' x ($nibbles -1)); my $space = " " x length($width); my $fmt ; if ($wantVerbose) { $FMT1 = " format STDOUT = $width $width ^<<<<<<<<<<<^<<<<<<<<<<<<<<<<<<<< ^<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< \$OFF, \$LENGTH, \$CONTENT, \$TEXT, \$VALUE $space $space ^<<<<<<<<<<<^<<<<<<<<<<<<<<<<<<<< ^<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<~~ \$CONTENT, \$TEXT, \$VALUE . "; $FMT2 = " format STDOUT = $width $width ^<<<<<<<<<<< ^<<<<<<<<<<<<<<<<<< ^<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< \$OFF, \$LENGTH, \$CONTENT, \$TEXT, \$VALUE $space $space ^<<<<<<<<<<< ^<<<<<<<<<<<<<<<<<< ^<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<~~ \$CONTENT, \$TEXT, \$VALUE . " ; } else { $FMT1 = " format STDOUT = $width ^<<<<<<<<<<<<<<<<<<<< ^<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< \$OFF, \$TEXT, \$VALUE $space ^<<<<<<<<<<<<<<<<<<<< ^<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<~~ \$TEXT, \$VALUE . "; $FMT2 = " format STDOUT = $width ^<<<<<<<<<<<<<<<<<< ^<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< \$OFF, \$TEXT, \$VALUE $space ^<<<<<<<<<<<<<<<<<< ^<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<~~ \$TEXT, \$VALUE . " ; } eval "$FMT1"; $| = 1; } sub mySpr { my $format = shift ; return "" if ! defined $format; return $format unless @_ ; return sprintf $format, @_ ; } sub out0 { my $size = shift; my $text = shift; my $format = shift; $OFF = prOff($size); $LENGTH = offset($size) ; $CONTENT = '...'; $TEXT = $text; $VALUE = mySpr $format, @_; write; skip($FH, $size); } sub xDump { my $input = shift; $input =~ tr/\0-\37\177-\377/./; return $input; } sub hexDump { my $input = shift; my $out = unpack('H*', $input) ; $out =~ s#(..)# $1#g ; $out =~ s/^ //; $out = uc $out; return $out; } sub hexValue { return sprintf("%X", $_[0]); } sub out { my $data = shift; my $text = shift; my $format = shift; my $size = length($data) ; $OFF = prOff($size); $LENGTH = offset($size) ; $CONTENT = hexDump($data); $TEXT = $text; $VALUE = mySpr $format, @_; no warnings; write; } sub out1 { my $text = shift; my $format = shift; $OFF = ''; $LENGTH = '' ; $CONTENT = ''; $TEXT = $text; $VALUE = mySpr $format, @_; write; } sub out2 { my $data = shift ; my $text = shift ; my $format = shift; my $size = length($data) ; $OFF = prOff($size); $LENGTH = offset($size); $CONTENT = hexDump($data); $TEXT = $text; $VALUE = mySpr $format, @_; no warnings; eval "$FMT2"; write ; eval "$FMT1"; } sub Value { my $letter = shift; my @value = @_; if ($letter eq 'C') { return Value_C(@value) } elsif ($letter eq 'v') { return Value_v(@value) } elsif ($letter eq 'V') { return Value_V(@value) } elsif ($letter eq 'Q<') { return Value_Q(@value) } else { die "here letter $letter"} } sub outer { my $name = shift ; my $unpack = shift ; my $size = shift ; my $cb1 = shift ; my $cb2 = shift ; myRead(my $buff, $size); my (@value) = unpack $unpack, $buff; my $hex = Value($unpack, @value); if (defined $cb1) { my $v ; if (ref $cb1 eq 'CODE') { $v = $cb1->(@value) ; } else { $v = $cb1 ; } $v = "'" . $v unless $v =~ /^'/; $v .= "'" unless $v =~ /'$/; $hex .= " $v" ; } out $buff, $name, $hex ; $cb2->(@value) if defined $cb2 ; return $value[0]; } sub out_C { my $name = shift ; my $cb1 = shift ; my $cb2 = shift ; outer($name, 'C', 1, $cb1, $cb2); } sub out_v { my $name = shift ; my $cb1 = shift ; my $cb2 = shift ; outer($name, 'v', 2, $cb1, $cb2); } sub out_V { my $name = shift ; my $cb1 = shift ; my $cb2 = shift ; outer($name, 'V', 4, $cb1, $cb2); } sub out_Q { my $name = shift ; my $cb1 = shift ; my $cb2 = shift ; outer($name, 'Q<', 8, $cb1, $cb2); } sub outSomeData { my $size = shift; my $message = shift; my $redact = shift ; if ($size > 0) { if ($size > $PAYLOADLIMIT) { my $before = $FH->tell(); out0 $size, $message; } else { myRead(my $buffer, $size ); $buffer = "X" x $size if $redact; out $buffer, $message, xDump $buffer ; } } } sub unpackValue_C { Value_v(unpack "C", $_[0]); } sub Value_C { sprintf "%02X", $_[0]; } sub unpackValue_v { Value_v(unpack "v", $_[0]); } sub Value_v { sprintf "%04X", $_[0]; } sub unpackValue_V { Value_V(unpack "V", $_[0]); } sub Value_V { my $v = defined $_[0] ? $_[0] : 0; sprintf "%08X", $v; } sub unpackValue_Q { my $v = unpack ("Q<", $_[0]); Value_Q($v); } sub Value_Q { my $v = shift ; sprintf "%016X", $v; } sub read_Q { my $b ; myRead($b, 8); return ($b, unpack ("Q<" , $b)); } sub read_V { my $b ; myRead($b, 4); return ($b, unpack ("V", $b)); } sub read_v { my $b ; myRead($b, 2); return ($b, unpack "v", $b); } sub read_C { my $b ; myRead($b, 1); return ($b, unpack "C", $b); } sub seekTo { my $offset = shift ; my $loc = shift ; $loc = SEEK_SET if ! defined $loc ; $FH->seek($offset, $loc); $OFFSET = $FH->tell(); } sub scanForSignature { my %sigs = map { $_ => 1 } map { substr $_, 2, 2 } # don't want the initial "PK" map { pack "V", $_ } ( ZIP_LOCAL_HDR_SIG , ZIP_DATA_HDR_SIG , ZIP_CENTRAL_HDR_SIG , ZIP_END_CENTRAL_HDR_SIG , ZIP64_END_CENTRAL_REC_HDR_SIG , ZIP64_END_CENTRAL_LOC_HDR_SIG , # ZIP_ARCHIVE_EXTRA_DATA_SIG , # ZIP_DIGITAL_SIGNATURE_SIG , # ZIP_ARCHIVE_EXTRA_DATA_RECORD_SIG , ); my $start = $FH->tell(); my $last = ''; my $offset = 0; my $buffer ; BUFFER: while ($FH->read($buffer, 1024 * 1000)) { my $combine = $last . $buffer ; my $ix = 0; while (1) { $ix = index($combine, "PK", $ix) ; if ($ix == -1) { $last = ''; next BUFFER; } my $rest = substr($combine, $ix + 2, 2); if (! $sigs{$rest}) { $ix += 2; next; } # possible match my $here = $FH->tell(); seekTo($here - length($combine) + $ix); return 1; } $last = substr($combine, $ix+4); } return 0; } my $is64In32 = 0; my $opt_verbose = 0; my $opt_scan = 0; my $opt_Redact = 0; my $opt_utc = 0; $Getopt::Long::bundling = 1 ; GetOptions("h" => \&Usage, "v" => \$opt_verbose, "scan" => \$opt_scan, "redact" => \$opt_Redact, "utc" => \$opt_utc, "version" => sub { print "$VERSION\n"; exit }, ) or Usage("Invalid command line option\n"); Usage("No zipfile") unless @ARGV == 1; my $filename = shift @ARGV; die "$filename does not exist\n" unless -e $filename ; die "$filename not a standard file\n" unless -f $filename ; $FH = IO::File->new( "<$filename" ) or die "Cannot open $filename: $!\n"; my $FILELEN = -s $filename ; $TRAILING = -s $filename ; $NIBBLES = nibbles(-s $filename) ; die "$filename too short to be a zip file\n" if $FILELEN < 22 ; setupFormat($opt_verbose, $NIBBLES); if(0) { # Sanity check that this is a Zip file my ($buffer, $signature) = read_V(); warn "$filename doesn't look like a zip file\n" if $signature != ZIP_LOCAL_HDR_SIG ; $FH->seek(0, SEEK_SET) ; } my @Messages = (); if ($opt_scan) { my $foundCentralHeader = 0; my $lastEndsAt = 0; while(scanForSignature()) { my $here = $FH->tell(); my ($buffer, $signature) = read_V(); # check for an APK header directly before the first central header if ($signature == ZIP_CENTRAL_HDR_SIG && $foundCentralHeader == 0) { $foundCentralHeader = 1; ($START_APK, $APK, $APK_LEN) = chckForAPKSigningBlock($FH, $here) ; if ($START_APK) { seekTo($lastEndsAt+4); scanApkBlock(); seekTo($here); next; } seekTo($here + 4); } my $handler = $Lookup{$signature}; $handler->($signature, $buffer); $lastEndsAt = $FH->tell(); seekTo($here + 4) ; } dislayMessages(); exit; } our ($CdExists, $CdOffset, @CentralDirectory) = scanCentralDirectory($FH); die "No Central Directory records found\n" if ! $CdExists ; $OFFSET = 0 ; $FH->seek(0, SEEK_SET) ; outSomeData($START, "PREFIX DATA") if defined $START && $START > 0 ; my $skippedFrom = 0 ; my $skippedContent = 0 ; while (1) { last if $FH->eof(); my $here = $FH->tell(); if ($here >= $TRAILING) { print "\n" ; outSomeData($FILELEN - $TRAILING, "TRAILING DATA"); last; } my ($buffer, $signature) = read_V(); my $handler = $Lookup{$signature}; if (!defined $handler) { if (@CentralDirectory) { # Should be at offset that central directory says my $locOffset = $CentralDirectory[0][0]; my $delta = $locOffset - $here ; if ($here + 4 == $locOffset ) { for (0 .. 3) { $FH->ungetc(ord(substr($buffer, $_, 1))) } outSomeData($delta, "UNEXPECTED PADDING"); next; } } if ($here < $CdOffset) { if ($APK) { scanApkBlock(); next; } # next # if scanForSignature() ; $skippedFrom = $FH->tell() ; $skippedContent = $CdOffset - $skippedFrom ; printf "\nWARNING!\nZip local header not found at offset 0x%X\n", $skippedFrom; printf "Skipping 0x%x bytes to Central Directory...\n", $skippedContent; push @Messages, sprintf("Expected Zip header not found at offset 0x%X, ", $skippedFrom) . sprintf("skipped 0x%X bytes\n", $skippedContent); seekTo($CdOffset); next; } else { printf "\n\nUnexpected END at offset %08X, value %s\n", $here, Value_V($signature); last; } } $ZIP64 = 0 if $signature != ZIP_DATA_HDR_SIG ; $handler->($signature, $buffer); } dislayMessages(); exit ; sub dislayMessages { $SEEN->short_summary(); $SEEN->summary(); if (@Messages) { my $count = scalar @Messages ; print "\nWARNINGS\n\n"; print "* $_\n" for @Messages ; } print "Done\n"; } sub compressionMethod { my $id = shift ; Value_v($id) . " '" . ($ZIP_CompressionMethods{$id} || "Unknown Method") . "'" ; } sub LocalHeader { my $signature = shift ; my $data = shift ; my $from_offset = $FH->tell() - 4; print "\n"; ++ $LocalHeaderCount; my $hexHdrCount = sprintf("%X", $LocalHeaderCount) ; out $data, "LOCAL HEADER #$hexHdrCount" , Value_V($signature); my $buffer; my ($loc, $CDcompressedLength, $cdZip64, $zip64Sizes, $cdIndex, $cdEntryOffset) ; if (! $opt_scan) { ($loc, $CDcompressedLength, $cdZip64, $zip64Sizes, $cdIndex, $cdEntryOffset) = @{ shift @CentralDirectory } ; # my $cdi = sprintf("%X", $cdIndex) ; # out1 "CENTRAL HEADER #$cdi", sprintf "Offset %s\n", Value_Q($cdEntryOffset); } out_C "Extract Zip Spec", \&decodeZipVer; out_C "Extract OS", \&decodeOS; my ($bgp, $gpFlag) = read_v(); my ($bcm, $compressedMethod) = read_v(); out $bgp, "General Purpose Flag", Value_v($gpFlag) ; GeneralPurposeBits($compressedMethod, $gpFlag); out $bcm, "Compression Method", compressionMethod($compressedMethod) ; out_V "Last Mod Time", sub { getTime(_dosToUnixTime($_[0])) }; my $crc = out_V "CRC"; my $compressedLength = out_V "Compressed Length"; my $uncompressedLength = out_V "Uncompressed Length"; my $filenameLength = out_v "Filename Length"; my $extraLength = out_v "Extra Length"; my $filename ; myRead($filename, $filenameLength); outputFilename($filename); my $cl64 = $compressedLength; my %ExtraContext = (); if ($extraLength) { my @z64 = ($uncompressedLength, $compressedLength, 1, 1); $ExtraContext{Zip64} = \@z64 ; $ExtraContext{InCentralDir} = 0; walkExtra($extraLength, \%ExtraContext); } my @msg ; # if ($cdZip64 && ! $ZIP64) # { # # Central directory said this was Zip64 # # some zip files don't have the Zip64 field in the local header # # seems to be a streaming issue. # push @msg, "Missing Zip64 extra field in Local Header #$hexHdrCount\n"; # if (! $zip64Sizes) # { # # Central has a ZIP64 entry that doesn't have sizes # # Local doesn't have a Zip 64 at all # push @msg, "Unzip may complain about 'overlapped components' #$hexHdrCount\n"; # } # else # { # $ZIP64 = 1 # } # } my $size = 0; $size = printAes(\%ExtraContext) if $compressedMethod == 99 ; $size += printLzmaProperties() if $compressedMethod == ZIP_CM_LZMA ; $CDcompressedLength = $compressedLength if $opt_scan ; $CDcompressedLength -= $size; if ($CDcompressedLength) { outSomeData($CDcompressedLength, "PAYLOAD", $opt_Redact) ; } if ($compressedMethod == 99) { my $auth ; myRead($auth, 10); out $auth, "AES Auth", hexDump($auth); } print "WARNING: $_" for @msg; push @Messages, @msg ; # $SEEN->save("LOCAL HEADER #" . sprintf("%X", $LocalHeaderCount), $filename, $from_offset, $from_offset + $CDcompressedLength); } sub redactFilename { my $filename = shift; # Redact everything apart from directory seperators $filename =~ s([^/])(X)g if $opt_Redact; return $filename; } sub outputFilename { my $filename = shift; $filename = redactFilename($filename) ; if (length $filename > 256) { my $f = substr($filename, 0, 256) ; out $f, "Filename", "'". $f . "' ..."; } else { out $filename, "Filename", "'". $filename . "'"; } } sub CentralHeader { my $signature = shift ; my $data = shift ; my $from_offset = $FH->tell() - 4; ++ $CentralHeaderCount; print "\n"; out $data, "CENTRAL HEADER #" . sprintf("%X", $CentralHeaderCount) . "", Value_V($signature); my $buffer; out_C "Created Zip Spec", \&decodeZipVer; out_C "Created OS", \&decodeOS; out_C "Extract Zip Spec", \&decodeZipVer; out_C "Extract OS", \&decodeOS; my ($bgp, $gpFlag) = read_v(); my ($bcm, $compressedMethod) = read_v(); out $bgp, "General Purpose Flag", Value_v($gpFlag) ; GeneralPurposeBits($compressedMethod, $gpFlag); out $bcm, "Compression Method", compressionMethod($compressedMethod) ; out_V "Last Mod Time", sub { getTime(_dosToUnixTime($_[0])) }; my $crc = out_V "CRC"; my $compressedLength = out_V "Compressed Length"; my $uncompressedLength = out_V "Uncompressed Length"; my $filenameLength = out_v "Filename Length"; my $extraLength = out_v "Extra Length"; my $comment_length = out_v "Comment Length"; my $disk_start = out_v "Disk Start"; my $int_file_attrib = out_v "Int File Attributes"; out1 "[Bit 0]", $int_file_attrib & 1 ? "1 Text Data" : "0 'Binary Data'"; my $ext_file_attrib = out_V "Ext File Attributes"; out1 "[Bit 0]", "Read-Only" if $ext_file_attrib & 0x01 ; out1 "[Bit 1]", "Hidden" if $ext_file_attrib & 0x02 ; out1 "[Bit 2]", "System" if $ext_file_attrib & 0x04 ; out1 "[Bit 3]", "Label" if $ext_file_attrib & 0x08 ; out1 "[Bit 4]", "Directory" if $ext_file_attrib & 0x10 ; out1 "[Bit 5]", "Archive" if $ext_file_attrib & 0x20 ; my $lcl_hdr_offset = out_V "Local Header Offset"; my $filename ; myRead($filename, $filenameLength); outputFilename($filename); my %ExtraContext = ( CRC => $crc, LocalHdrOffset => $lcl_hdr_offset, CompressedLength => $compressedLength); if ($extraLength) { my @z64 = ($uncompressedLength, $compressedLength, $lcl_hdr_offset, $disk_start); $ExtraContext{Zip64} = \@z64 ; $ExtraContext{InCentralDir} = 1; walkExtra($extraLength, \%ExtraContext); } if ($comment_length) { my $comment ; myRead($comment, $comment_length); out $comment, "Comment", "'". $comment . "'"; } $SEEN->save("CENTRAL HEADER ref Local #" . sprintf("%X", $CentralHeaderCount), $filename, \%ExtraContext) ; } sub decodeZipVer { my $ver = shift ; my $sHi = int($ver /10) ; my $sLo = $ver % 10 ; #out1 "Zip Spec", "$sHi.$sLo"; "$sHi.$sLo"; } sub decodeOS { my $ver = shift ; $OS_Lookup{$ver} || "Unknown" ; } sub Zip64EndCentralHeader { my $signature = shift ; my $data = shift ; print "\n"; out $data, "ZIP64 END CENTRAL DIR RECORD", Value_V($signature); my $buff; myRead($buff, 8); out $buff, "Size of record", unpackValue_Q($buff); my $size = unpack "Q<", $buff; out_C "Created Zip Spec", \&decodeZipVer; out_C "Created OS", \&decodeOS; out_C "Extract Zip Spec", \&decodeZipVer; out_C "Extract OS", \&decodeOS; out_V "Number of this disk"; out_V "Central Dir Disk no"; out_Q "Entries in this disk"; out_Q "Total Entries"; out_Q "Size of Central Dir"; out_Q "Offset to Central dir"; # TODO - if ($size != 44) { push @Messages, "Unsupported Size field in Zip64EndCentralHeader: should be 44, got $size\n" } } sub Zip64EndCentralLocator { my $signature = shift ; my $data = shift ; print "\n"; out $data, "ZIP64 END CENTRAL DIR LOCATOR", Value_V($signature); out_V "Central Dir Disk no"; out_Q "Offset to Central dir"; out_V "Total no of Disks"; } sub EndCentralHeader { my $signature = shift ; my $data = shift ; print "\n"; out $data, "END CENTRAL HEADER", Value_V($signature); out_v "Number of this disk"; out_v "Central Dir Disk no"; out_v "Entries in this disk"; out_v "Total Entries"; out_V "Size of Central Dir"; out_V "Offset to Central Dir"; my $comment_length = out_v "Comment Length"; if ($comment_length) { my $comment ; myRead($comment, $comment_length); out $comment, "Comment", "'$comment'"; } } sub DataHeader { my $signature = shift ; my $data = shift ; print "\n"; out $data, "STREAMING DATA HEADER", Value_V($signature); out_V "CRC"; if ($ZIP64) { out_Q "Compressed Length" ; out_Q "Uncompressed Length" ; } else { out_V "Compressed Length" ; out_V "Uncompressed Length" ; } } sub GeneralPurposeBits { my $method = shift; my $gp = shift; out1 "[Bit 0]", "1 'Encryption'" if $gp & ZIP_GP_FLAG_ENCRYPTED_MASK; my %lookup = ( 0 => "Normal Compression", 1 => "Maximum Compression", 2 => "Fast Compression", 3 => "Super Fast Compression"); if ($method == ZIP_CM_DEFLATE) { my $mid = ($gp >> 1) & 0x03 ; out1 "[Bits 1-2]", "$mid '$lookup{$mid}'"; } if ($method == ZIP_CM_LZMA) { if ($gp & ZIP_GP_FLAG_LZMA_EOS_PRESENT) { out1 "[Bit 1]", "1 'LZMA EOS Marker Present'" ; } else { out1 "[Bit 1]", "0 'LZMA EOS Marker Not Present'" ; } } if ($method == ZIP_CM_IMPLODE) # Imploding { out1 "[Bit 1]", ($gp & (1 << 1) ? "1 '8k" : "0 '4k") . " Sliding Dictionary'" ; out1 "[Bit 2]", ($gp & (2 << 1) ? "1 '3" : "0 '2" ) . " Shannon-Fano Trees'" ; } out1 "[Bit 3]", "1 'Streamed'" if $gp & ZIP_GP_FLAG_STREAMING_MASK; out1 "[Bit 4]", "1 'Enhanced Deflating'" if $gp & 1 << 4; out1 "[Bit 5]", "1 'Compressed Patched'" if $gp & 1 << 5 ; out1 "[Bit 6]", "1 'Strong Encryption'" if $gp & ZIP_GP_FLAG_STRONG_ENCRYPTED_MASK; out1 "[Bit 11]", "1 'Language Encoding'" if $gp & ZIP_GP_FLAG_LANGUAGE_ENCODING; out1 "[Bit 12]", "1 'Pkware Enhanced Compression'" if $gp & 1 <<12 ; out1 "[Bit 13]", "1 'Encrypted Central Dir'" if $gp & 1 <<13 ; return (); } sub seekSet { my $fh = $_[0] ; my $size = $_[1]; use Fcntl qw(SEEK_SET); seek($fh, $size, SEEK_SET); } sub skip { my $fh = $_[0] ; my $size = $_[1]; use Fcntl qw(SEEK_CUR); seek($fh, $size, SEEK_CUR); } sub myRead { my $got = \$_[0] ; my $size = $_[1]; my $wantSize = $size; $$got = ''; if ($size == 0) { return ; } if ($size > 0) { my $buff ; my $status = $FH->read($buff, $size); return $status if $status < 0; $$got .= $buff ; } my $len = length $$got; die "Truncated file (got $len, wanted $wantSize): $!\n" if length $$got != $wantSize; } sub walkExtra { my $XLEN = shift; my $context = shift; my $buff ; my $offset = 0 ; my $id; my $subLen; my $payload ; my $count = 0 ; while ($offset < $XLEN) { ++ $count; # Detect if there is not enough data for an extra ID and length. # Android zipalign and zipflinger are prime candidates for these # non-standard extra sub-fields. my $remaining = $XLEN - $offset; if ($remaining < ZIP_EXTRA_SUBFIELD_HEADER_SIZE) { # There is not enough left. # Consume whatever is there and return so parsing # can continue. myRead($payload, $remaining); my $data = hexDump($payload); if ($payload =~ /^\x00+$/) { out $payload, "Null Padding in Extra"; } else { out $payload, "Malformed Extra Data", $data; } return undef; } myRead($id, ZIP_EXTRA_SUBFIELD_ID_SIZE); $offset += ZIP_EXTRA_SUBFIELD_ID_SIZE; my $lookID = unpack "v", $id ; if ($lookID == 0) { # check for null padding at end of extra my $here = $FH->tell(); my $rest; myRead($rest, $XLEN - $offset); if ($rest =~ /^\x00+$/) { out $id . $rest, "Null Padding in Extra"; return undef; } seekTo($here); } my ($who, $decoder) = @{ $Extras{$lookID} // ['', undef ] }; $who = "$id: $who" if $id =~ /\w\w/ ; $who = "'$who'"; out $id, "Extra ID #" . Value_v($count), unpackValue_v($id) . " $who" ; myRead($buff, ZIP_EXTRA_SUBFIELD_LEN_SIZE); $offset += ZIP_EXTRA_SUBFIELD_LEN_SIZE; $subLen = unpack("v", $buff); out2 $buff, "Length", Value_v($subLen) ; return undef if $offset + $subLen > $XLEN ; if (! defined $decoder) { if ($subLen) { myRead($payload, $subLen); my $data = hexDump($payload); out2 $payload, "Extra Payload", $data; } } else { $decoder->($subLen, $context) ; } $offset += $subLen ; } return undef ; } sub full32 { return $_[0] == MAX32 ; } sub decode_Zip64 { my $len = shift; my $context = shift; my $z64Data = $context->{Zip64}; my $inCentralHdr = $context->{InCentralDir} ; my $inLocalHdr = ! $inCentralHdr ; $ZIP64 = 1; if ($inLocalHdr || full32 $z64Data->[0]) { out_Q " Uncompressed Size"; } if ($inLocalHdr || full32 $z64Data->[1]) { $context->{CompressedLength} = out_Q " Compressed Size"; } if (full32 $z64Data->[2] ) { $context->{LocalHdrOffset} = out_Q " Offset to Local Dir"; } if ($z64Data->[3] == 0xFFFF ) { out_V " Disk Number"; } } sub Ntfs2Unix { my $m = shift; my $v = shift; # NTFS offset is 19DB1DED53E8000 my $hex = Value_Q($v) ; $v -= 0x19DB1DED53E8000 ; my $ns = ($v % 10000000) * 100; my $elapse = int ($v/10000000); return "$hex '" . getT($elapse) . " " . sprintf("%0dns'", $ns); } sub decode_NTFS_Filetimes { my $len = shift; my $context = shift; out_V " Reserved"; out_v " Tag1"; out_v " Size1" ; my ($m, $s1) = read_Q; out $m, " Mtime", Ntfs2Unix($m, $s1); my ($a, $s3) = read_Q; out $m, " Atime", Ntfs2Unix($m, $s3); my ($c, $s2) = read_Q; out $c, " Ctime", Ntfs2Unix($m, $s2); } sub getT { my $time = shift ; if ($opt_utc) { return scalar gmtime($time) } else { return scalar localtime($time) } } sub getTime { my $time = shift ; return "'" . getT($time) . "'"; } sub decode_UT { my $len = shift; my $context = shift; my ($data, $flags) = read_C(); my $f = Value_C $flags; $f .= " mod" if $flags & 1; $f .= " access" if $flags & 2; $f .= " change" if $flags & 4; out $data, " Flags", "'$f'"; -- $len; if ($flags & 1) { my ($data, $time) = read_V(); out2 $data, "Mod Time", Value_V($time) . " " . getTime($time) ; $len -= 4 ; } if ($flags & 2 && $len > 0 ) { my ($data, $time) = read_V(); out2 $data, "Access Time", Value_V($time) . " " . getTime($time) ; $len -= 4 ; } if ($flags & 4 && $len > 0) { my ($data, $time) = read_V(); out2 $data, "Change Time", Value_V($time) . " " . getTime($time) ; } } sub decode_AES { # ref https://www.winzip.com/win/es/aes_info.html my $len = shift; my $context = shift; return if $len == 0 ; my %lookup = ( 1 => "AE-1", 2 => "AE-2"); out_v " Vendor Version", sub { $lookup{$_[0]} || "Unknown" } ; my $id ; myRead($id, 2); out $id, " Vendor ID", unpackValue_v($id) . " '$id'"; my %strengths = (1 => "128-bit encryption key", 2 => "192-bit encryption key", 3 => "256-bit encryption key", ); my $strength = out_C " Encryption Strength", sub {$strengths{$_[0]} || "Unknown" } ; my ($bmethod, $method) = read_v(); out $bmethod, " Compression Method", compressionMethod($method) ; $context->{AesStrength} = $strength ; } sub decode_GrowthHint { my $len = shift; my $context = shift; my $inCentralHdr = $context->{InCentralDir} ; return if $len == 0 ; out_v " Signature" ; out_v " Initial Value"; my $padding; myRead($padding, $len - 4); my $data = hexDump($padding); out2 $padding, "Padding", $data; } sub decode_DataStreamAlignment { my $len = shift; my $context = shift; my $inCentralHdr = $context->{InCentralDir} ; return if $len == 0 ; my ($data, $alignment) = read_v(); out $data, " Alignment", Value_v($alignment) ; my $recompress_value = $alignment & 0x8000 ? 1 : 0; my $recompressing = $recompress_value ? "True" : "False"; $alignment &= 0x7FFF ; my $hexAl = sprintf("%X", $alignment); out1 " [Bit 15]", "$recompress_value 'Recompress $recompressing'"; out1 " [Bits 0-14]", "$hexAl 'Minimal Alignment $alignment'"; if (! $inCentralHdr && $len - 2 > 0) { my $padding; myRead($padding, $len - 2); out2 $padding, "Padding", hexDump($padding); } } sub decode_UX { my $len = shift; my $context = shift; my $inCentralHdr = $context->{InCentralDir} ; return if $len == 0 ; my ($data, $time) = read_V(); out2 $data, "Access Time", Value_V($time) . " " . getTime($time) ; ($data, $time) = read_V(); out2 $data, "Mod Time", Value_V($time) . " " . getTime($time) ; if (! $inCentralHdr ) { out_v " UID" ; out_v " GID"; } } sub decode_Ux { my $len = shift; my $context = shift; return if $len == 0 ; out_v " UID" ; out_v " GID"; } sub decodeLitteEndian { my $value = shift ; if (length $value == 4) { return Value_V unpack ("V", $value) } else { # TODO - fix this die "unsupported\n"; } my $got = 0 ; my $shift = 0; #hexDump #reverse #my @a =unpack "C*", $value; #@a = reverse @a; #hexDump(@a); for (reverse unpack "C*", $value) { $got = ($got << 8) + $_ ; } return $got ; } sub decode_ux { my $len = shift; my $context = shift; return if $len == 0 ; out_C " Version" ; my $uidSize = out_C " UID Size"; myRead(my $data, $uidSize); out2 $data, "UID", decodeLitteEndian($data); my $gidSize = out_C " GID Size"; myRead($data, $gidSize); out2 $data, "GID", decodeLitteEndian($data); } sub decode_Java_exe { my $len = shift; my $context = shift; } sub decode_up { my $len = shift; my $context = shift; out_C " Version"; out_V " NameCRC32"; myRead(my $data, $len - 5); out $data, " UnicodeName", $data; } sub decode_Xceed_unicode { my $len = shift; my $context = shift; my $data ; # No public definition available, so guess the fields used for this one # Data analysis based on output from Fiddler (https://www.telerik.com/fiddler), # which uses this field # First 4 bytes appear to be "NUCX" all the time myRead($data, 4); out $data, " ID", $data; # Next 2 bytes contains a count of the remaining bytes/2 # Probably the number of UTF-16 characters, including the # optional NULL prefix out_v " Length"; # next is a UTF16 encode filename # sometimes preceeded by a two Null bytes myRead($data, $len - 6); my $prefix = substr($data, 0, 2); if ($prefix eq "\x00\x00") { # Found the Null prefix out $prefix, " Null", '0000'; substr($data, 0, 2) = ''; } out $data, " UTF16LE Name", decode("UTF16LE", $data); } sub decode_NT_security { my $len = shift; my $context = shift; my $inCentralHdr = $context->{InCentralDir} ; out_V " Uncompressed Size" ; if (! $inCentralHdr) { out_C " Version" ; out_v " Type"; out_V " NameCRC32" ; my $plen = $len - 4 - 1 - 2 - 4; myRead(my $payload, $plen); out $plen, " Extra Payload", hexDump($payload); } } sub decodeMVS { my $len = shift; my $context = shift; # data in Big-Endian myRead(my $data, $len); my $ID = unpack("N", $data); if ($ID == 0xE9F3F9F0) { out($data, " ID", "'Z390'"); substr($data, 0, 4) = ''; } out($data, " Extra Payload", hexDump($data)); } sub printAes { # ref https://www.winzip.com/win/es/aes_info.html my $context = shift ; my %saltSize = ( 1 => 8, 2 => 12, 3 => 16, ); myRead(my $salt, $saltSize{$context->{AesStrength} }); out $salt, "AES Salt", hexDump($salt); myRead(my $pwv, 2); out $pwv, "AES Pwd Ver", hexDump($pwv); return $saltSize{$context->{AesStrength}} + 2 + 10; } sub printLzmaProperties { my $len = 0; my $b1; my $b2; my $buffer; myRead($b1, 2); my ($verHi, $verLow) = unpack ("CC", $b1); out $b1, "LZMA Version", sprintf("%02X%02X", $verHi, $verLow) . " '$verHi.$verLow'"; my $LzmaPropertiesSize = out_v "LZMA Properties Size"; $len += 4; my $LzmaInfo = out_C "LZMA Info", sub { $_[0] == 93 ? "(Default)" : ""}; my $PosStateBits = 0; my $LiteralPosStateBits = 0; my $LiteralContextBits = 0; $PosStateBits = int($LzmaInfo / (9 * 5)); $LzmaInfo -= $PosStateBits * 9 * 5; $LiteralPosStateBits = int($LzmaInfo / 9); $LiteralContextBits = $LzmaInfo - $LiteralPosStateBits * 9; out1 " PosStateBits", $PosStateBits; out1 " LiteralPosStateBits", $LiteralPosStateBits; out1 " LiteralContextBits", $LiteralContextBits; out_V "LZMA Dictionary Size"; # TODO - assumption that this is 5 $len += $LzmaPropertiesSize; skip($FH, $LzmaPropertiesSize - 5) if $LzmaPropertiesSize != 5 ; return $len; } sub readFromOffset { # my $fh = shift; my $offset = shift; my $len = shift; seekTo($offset) ; my $buffer; myRead($buffer, $len); # $fh->read($buffer, $len) == $len length $buffer == $len or return ''; return $buffer; } sub chckForAPKSigningBlock { my $fh = shift; my $cdOffset = shift; # APK Signing Block comes directy before the Central directory # If offset less than # # len1 8 # id 4 # kv with zero len 8 # len1 8 # magic 16 # ---------- # 44 return (0, 0, '') if $cdOffset < 44; # Step 1 - 16 bytes before CD is literal string "APK Sig Block 42" my $magicOffset = $cdOffset - 16; my $buffer = readFromOffset($magicOffset, 16); return (0, 0, '') if $buffer ne "APK Sig Block 42" ; # Step 2 - read the two length fields # and check they are identical $buffer = readFromOffset($cdOffset - 16 - 8, 8); my $len2 = unpack("Q<", $buffer); return (0, 0, '') if $len2 == 0 ; my $startApkOffset = $cdOffset - 8 - $len2 ; $buffer = readFromOffset($startApkOffset, 8); my $len1 = unpack("Q<", $buffer); return (0, 0, '') if $len1 != $len2; return ($startApkOffset, $cdOffset - 16 - 8, $buffer); } sub scanApkBlock { state $IDs = { 0x7109871a => "APK Signature v2", 0xf05368c0 => "APK Signature v3", 0x42726577 => "Verity Padding Block", # from https://android.googlesource.com/platform/tools/apksig/+/master/src/main/java/com/android/apksig/internal/apk/ApkSigningBlockUtils.java 0x6dff800d => "Source Stamp", 0x504b4453 => "Dependency Info", 0x71777777 => "APK Channel Block", 0xff3b5998 => "Zero Block", 0x2146444e => "Play Metadata", } ; seekTo($FH->tell() - 4) ; print "\nAPK SIGNING BLOCK\n"; scanApkPadding(''); out_Q "Block Length Copy #1"; my $ix = 1; while ($FH->tell() < $APK - 8) { my ($bytes, $id, $len); ($bytes, $len) = read_Q ; out $bytes, "ID/Value Length #" . sprintf("%X", $ix), Value_Q($len); ($bytes, $id) = read_V; out $bytes, " ID", Value_V($id) . " '" . ($IDs->{$id} // 'Unknown ID') . "'"; outSomeData($len-4, " Value"); ++ $ix; } out_Q "Block Length Copy #2"; my $magic ; myRead($magic, 16); out $magic, "Magic", qq['$magic']; } sub scanApkPadding { my $bytes = shift ; # padding my $here = $FH->tell(); my $got; myRead($got, $APK - $here); $got = $bytes . $got; if ($got =~ /^(\x00+)($APK_LEN)?/) { my $len = length $1 ; seekTo($here - length($bytes)); outSomeData($len, "Null Padding"); } else { seekTo($here); } } sub scanCentralDirectory { my $fh = shift; my $here = $fh->tell(); # Use cases # 1 32-bit CD # 2 64-bit CD my @CD = (); my $offset = findCentralDirectoryOffset($fh); return () if ! defined $offset; $fh->seek($offset, SEEK_SET) ; # Now walk the Central Directory Records my $buffer ; my $cdIndex = 0; while ($fh->read($buffer, 46) == 46 && unpack("V", $buffer) == ZIP_CENTRAL_HDR_SIG) { my $cdEntryOffset = $fh->tell() - 46; ++ $cdIndex ; my $compressedLength = unpack("V", substr($buffer, 20, 4)); my $uncompressedLength = unpack("V", substr($buffer, 24, 4)); my $filename_length = unpack("v", substr($buffer, 28, 2)); my $extra_length = unpack("v", substr($buffer, 30, 2)); my $comment_length = unpack("v", substr($buffer, 32, 2)); my $locHeaderOffset = unpack("V", substr($buffer, 42, 4)); my $cdZip64 = 0; my $zip64Sizes = 0; skip($fh, $filename_length ) ; if ($extra_length) { $fh->read(my $extraField, $extra_length) ; # $self->smartReadExact(\$extraField, $extra_length); # Check for Zip64 # my SizesExtended = findID("\x01\x00", $extraField); my $zip64Extended = findID(0x0001, $extraField); if ($zip64Extended) { $cdZip64 = 1; if ($uncompressedLength == MAX32) { $uncompressedLength = unpack "Q<", substr($zip64Extended, 0, 8, ""); $zip64Sizes = 1; } if ($compressedLength == MAX32) { $compressedLength = unpack "Q<", substr($zip64Extended, 0, 8, ""); $zip64Sizes = 1; } if ($locHeaderOffset == MAX32) { $locHeaderOffset = unpack "Q<", substr($zip64Extended, 0, 8, ""); } } } my $got = [$locHeaderOffset, $compressedLength, $cdZip64, $zip64Sizes, $cdIndex, $cdEntryOffset] ; skip($fh, $comment_length ) ; push @CD, $got ; } $fh->seek($here, SEEK_SET) ; # @CD = sort { $a->[0]->cmp($b->[0]) } @CD ; @CD = sort { $a->[0] <=> $b->[0] } @CD ; # Set the first Local File Header offset. $START = $CD[0]->[0] if @CD ; return (1, $offset, @CD); } sub offsetFromZip64 { my $fh = shift ; my $here = shift; $fh->seek($here - 20, SEEK_SET) # TODO - fix this or die "xx $!" ; my $buffer; my $got = 0; ($got = $fh->read($buffer, 20)) == 20 # TODO - fix this or die "xxx $here $got $!" ; if ( unpack("V", $buffer) == ZIP64_END_CENTRAL_LOC_HDR_SIG ) { my $cd64 = unpack "Q<", substr($buffer, 8, 8); $fh->seek($cd64, SEEK_SET) ; $fh->read($buffer, 4) == 4 # TODO - fix this or die "xxx" ; if ( unpack("V", $buffer) == ZIP64_END_CENTRAL_REC_HDR_SIG ) { $fh->read($buffer, 8) == 8 # TODO - fix this or die "xxx" ; my $size = unpack "Q<", $buffer; $fh->read($buffer, $size) == $size # TODO - fix this or die "xxx" ; my $cd64 = unpack "Q<", substr($buffer, 36, 8); return $cd64 ; } die "Cannot find 'Zip64 end of central directory record': 0x06054b50\nTry running with --scan option.\n" ; } die "Cannot find signature for 'Zip64 end of central directory locator': 0x07064b50 \nTry running with --scan option.\n" ; } use constant Pack_ZIP_END_CENTRAL_HDR_SIG => pack("V", ZIP_END_CENTRAL_HDR_SIG); sub findCentralDirectoryOffset { my $fh = shift ; # Most common use-case is where there is no comment, so # know exactly where the end of central directory record # should be. $fh->seek(-22, SEEK_END) ; my $here = $fh->tell(); my $is64bit = $here > MAX32; my $over64bit = $here & (~ MAX32); my $buffer; $fh->read($buffer, 22) == 22 # TODO - fix this or die "xxx" ; my $zip64 = 0; my $centralDirOffset ; if ( unpack("V", $buffer) == ZIP_END_CENTRAL_HDR_SIG ) { $centralDirOffset = unpack("V", substr($buffer, 16, 4)); } else { $fh->seek(0, SEEK_END) ; my $fileLen = $fh->tell(); my $want = 0 ; while(1) { $want += 1024 * 32; my $seekTo = $fileLen - $want; if ($seekTo < 0 ) { $seekTo = 0; $want = $fileLen ; } $fh->seek( $seekTo, SEEK_SET) # TODO - fix this or die "xxx $!" ; my $got; ($got = $fh->read($buffer, $want)) == $want # TODO - fix this or die "xxx $got $!" ; my $pos = rindex( $buffer, Pack_ZIP_END_CENTRAL_HDR_SIG); if ($pos >= 0 && $want - $pos > 22) { $here = $seekTo + $pos ; $centralDirOffset = unpack("V", substr($buffer, $pos + 16, 4)); my $commentLength = unpack("V", substr($buffer, $pos + 20, 2)); $commentLength = 0 if ! defined $commentLength ; my $expectedEof = $fileLen - $want + $pos + 22 + $commentLength ; # check for trailing data after end of zip if ($expectedEof < $fileLen ) { $TRAILING = $expectedEof ; } last ; } return undef if $want == $fileLen; } } if (full32 $centralDirOffset) { $centralDirOffset = offsetFromZip64($fh, $here) } elsif ($is64bit) { # use-case is where a 64-bit zip file doesn't use the 64-bit # extensions. print "EOCD not 64-bit $centralDirOffset ($here)\n" ; push @Messages, sprintf "Zip file > 4Gig. Expected 'Offset to Central Dir' to be 0xFFFFFFFF, got 0x%X\n", $centralDirOffset; $centralDirOffset += $over64bit; $is64In32 = 1; } ($START_APK, $APK, $APK_LEN) = chckForAPKSigningBlock($fh, $centralDirOffset); return $centralDirOffset ; } sub findID { my $id_want = shift ; my $data = shift; my $XLEN = length $data ; my $offset = 0 ; while ($offset < $XLEN) { return undef if $offset + ZIP_EXTRA_SUBFIELD_HEADER_SIZE > $XLEN ; my $id = substr($data, $offset, ZIP_EXTRA_SUBFIELD_ID_SIZE); $id = unpack("v", $id); $offset += ZIP_EXTRA_SUBFIELD_ID_SIZE; my $subLen = unpack("v", substr($data, $offset, ZIP_EXTRA_SUBFIELD_LEN_SIZE)); $offset += ZIP_EXTRA_SUBFIELD_LEN_SIZE ; return undef if $offset + $subLen > $XLEN ; return substr($data, $offset, $subLen) if $id eq $id_want ; $offset += $subLen ; } return undef ; } sub _dosToUnixTime { my $dt = shift; my $year = ( ( $dt >> 25 ) & 0x7f ) + 80; my $mon = ( ( $dt >> 21 ) & 0x0f ) - 1; my $mday = ( ( $dt >> 16 ) & 0x1f ); my $hour = ( ( $dt >> 11 ) & 0x1f ); my $min = ( ( $dt >> 5 ) & 0x3f ); my $sec = ( ( $dt << 1 ) & 0x3e ); use POSIX 'mktime'; # Force mktime to return a UTC time local $ENV{TZ} = "UTC"; my $time_t = mktime( $sec, $min, $hour, $mday, $mon, $year, 0, 0, -1 ); return 0 if ! defined $time_t; return $time_t; } sub nibbles { my @nibbles = ( [ 16 => 0x1000000000000000 ], [ 15 => 0x100000000000000 ], [ 14 => 0x10000000000000 ], [ 13 => 0x1000000000000 ], [ 12 => 0x100000000000 ], [ 11 => 0x10000000000 ], [ 10 => 0x1000000000 ], [ 9 => 0x100000000 ], [ 8 => 0x10000000 ], [ 7 => 0x1000000 ], [ 6 => 0x100000 ], [ 5 => 0x10000 ], [ 4 => 0x1000 ], [ 4 => 0x100 ], [ 4 => 0x10 ], [ 4 => 0x1 ], ); my $value = shift ; for my $pair (@nibbles) { my ($count, $limit) = @{ $pair }; return $count if $value >= $limit ; } } { package Seen; sub new { my $class = shift ; my %object = ( overlaps => [], duplicates => [], detail => [], duplicate_count => 0, overlap_count => 0, ) ; bless \%object, $class; } sub save { my $self = shift ; my $hdrId = shift; my $name = shift; my $extras = shift; my $from_offset = $extras->{LocalHdrOffset}; my $to_offset = $from_offset ; $to_offset += $extras->{CompressedLength} - 1 ; my $crc = $extras->{CRC}; $name = ::redactFilename($name) ; for my $entry ( @{ $self->{detail} } ) { if ( $from_offset == $entry->{from} && $to_offset == $entry->{to} && $crc == $entry->{crc}) { $self->{duplicate_count} ++; print "$hdrId: '$name' matches with $entry->{str}\n" } elsif ( ($from_offset >= $entry->{from} && $from_offset <= $entry->{to} ) || ($to_offset >= $entry->{from} && $to_offset <= $entry->{to} ) ) { # die "overlap!" # push @{ $self->{overlap} }, $self->{overlap_count} ++; print "$hdrId: '$name' overlaps with $entry->{str}\n"; } } # warn "ADD $from_offset $to_offset $hdrId: $name\n"; push @{ $self->{detail} }, { from => $from_offset, to => $to_offset, length => $extras->{CompressedLength}, id => $hdrId, crc => $crc, name => $name, str => "$hdrId: '$name'", } ; } sub short_summary { my $self = shift; my $duplicates = $self->{duplicate_count}; push @Messages, "$duplicates duplicate entries" if $duplicates; my $overlaps = $self->{overlap_count}; push @Messages, "$overlaps overlap entries" if $overlaps; } sub summary { my $self = shift ; # disable for now return; print "\n"; for my $entry ( sort { $a->{from}->cmp($b->{from}) } @{ $self->{detail} } ) { my $from_offset = $entry->{from}; my $to_offset = $entry->{to}; my $hdrId = $entry->{id}; my $name = $entry->{name}; print "$hdrId\t" . $entry->{from} . "\n"; } } } sub Usage { if (@_) { warn "$_\n" for @_ ; warn "\n"; } die <<EOM; zipdetails [OPTIONS] file Display details about the internal structure of a Zip file. This is zipdetails version $VERSION OPTIONS -h display help --redact Hide filenames in the output --scan enable scannng mode. Blindly scan the file looking for zip headers Expect false-positives. --utc Display date/time fields in UTC -v Verbose - output more stuff --version Print version number Copyright (c) 2011-2022 Paul Marquess. All rights reserved. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. EOM } __END__ =head1 NAME zipdetails - display the internal structure of zip files =head1 SYNOPSIS zipdetails [-v][--scan][--redact][--utc] zipfile.zip zipdetails -h zipdetails --version =head1 DESCRIPTION This program creates a detailed report on the internal structure of zip files. For each item of metadata within a zip file the program will output =over 5 =item the offset into the zip file where the item is located. =item a textual representation for the item. =item an optional hex dump of the item. =back The program assumes a prior understanding of the internal structure of Zip files. You should have a copy of the Zip L<APPNOTE.TXT|http://www.pkware.com/documents/casestudies/APPNOTE.TXT> file at hand to help understand the output from this program. =head2 Default Behaviour By default the program expects to be given a well-formed zip file. It will navigate the Zip file by first parsing the zip central directory at the end of the file. If that is found, it will then walk through the zip records starting at the beginning of the file. Any badly formed zip data structures encountered are likely to terminate the program. If the program finds any structural problems with the zip file it will print a summary at the end of the output report. The set of error cases reported is very much a work in progress, so don't rely on this feature to find all the possible errors in a zip file. If you have suggestions for use-cases where this could be enhanced please consider creating an enhancement request (see L<"SUPPORT">). Date/time fields are found in zip files are displayed in local time. Use the C<--utc> option to display these fields in Coordinated Universal Time (UTC). =head2 Scan-Mode If you do have a potentially corrupt zip file, particulatly where the central directory at the end of the file is absent/incomplete, you can try usng the C<--scan> option to search for zip records that are still present. When Scan-mode is enabled, the program will walk the zip file from the start, blindly looking for the 4-byte signatures that preceed each of the zip data structures. If it finds any of the recognised signatures it will attempt to dump the associated zip record. For very large zip files, this operation can take a long time to run. Note that the 4-byte signatures used in zip files can sometimes match with random data stored in the zip file, so care is needed interpreting the results. =head2 OPTIONS =over 5 =item -h Display help =item --redact Obscure filenames in the output. Handy for the use case where the zip files contains sensitive data that cannot be shared. =item --scan Walk the zip file loking for possible zip records. Can be error-prone. See L<"Scan-Mode"> =item --utc By default, date/time fields are displayed in local time. Use this option to display them in in Coordinated Universal Time (UTC). =item -v Enable Verbose mode. See L<"Verbose Output">. =item --version Display version number of the program and exit. =back =head2 Default Output By default zipdetails will output the details of the zip file in three columns. =over 5 =item Column 1 This contains the offset from the start of the file in hex. =item Column 2 This contains a textual description of the field. =item Column 3 If the field contains a numeric value it will be displayed in hex. Zip stores most numbers in little-endian format - the value displayed will have the little-endian encoding removed. Next, is an optional description of what the value means. =back For example, assuming you have a zip file with two entries, like this $ unzip -l test.zip Archive: setup/test.zip Length Date Time Name --------- ---------- ----- ---- 6 2021-03-23 18:52 latters.txt 6 2021-03-23 18:52 numbers.txt --------- ------- 12 2 files Running C<zipdetails> will gives this output $ zipdetails test.zip 0000 LOCAL HEADER #1 04034B50 0004 Extract Zip Spec 0A '1.0' 0005 Extract OS 00 'MS-DOS' 0006 General Purpose Flag 0000 0008 Compression Method 0000 'Stored' 000A Last Mod Time 5277983D 'Tue Mar 23 19:01:58 2021' 000E CRC 0F8A149C 0012 Compressed Length 00000006 0016 Uncompressed Length 00000006 001A Filename Length 000B 001C Extra Length 0000 001E Filename 'letters.txt' 0029 PAYLOAD abcde. 002F LOCAL HEADER #2 04034B50 0033 Extract Zip Spec 0A '1.0' 0034 Extract OS 00 'MS-DOS' 0035 General Purpose Flag 0000 0037 Compression Method 0000 'Stored' 0039 Last Mod Time 5277983D 'Tue Mar 23 19:01:58 2021' 003D CRC 261DAFE6 0041 Compressed Length 00000006 0045 Uncompressed Length 00000006 0049 Filename Length 000B 004B Extra Length 0000 004D Filename 'numbers.txt' 0058 PAYLOAD 12345. 005E CENTRAL HEADER #1 02014B50 0062 Created Zip Spec 1E '3.0' 0063 Created OS 03 'Unix' 0064 Extract Zip Spec 0A '1.0' 0065 Extract OS 00 'MS-DOS' 0066 General Purpose Flag 0000 0068 Compression Method 0000 'Stored' 006A Last Mod Time 5277983D 'Tue Mar 23 19:01:58 2021' 006E CRC 0F8A149C 0072 Compressed Length 00000006 0076 Uncompressed Length 00000006 007A Filename Length 000B 007C Extra Length 0000 007E Comment Length 0000 0080 Disk Start 0000 0082 Int File Attributes 0001 [Bit 0] 1 Text Data 0084 Ext File Attributes 81B40000 0088 Local Header Offset 00000000 008C Filename 'letters.txt' 0097 CENTRAL HEADER #2 02014B50 009B Created Zip Spec 1E '3.0' 009C Created OS 03 'Unix' 009D Extract Zip Spec 0A '1.0' 009E Extract OS 00 'MS-DOS' 009F General Purpose Flag 0000 00A1 Compression Method 0000 'Stored' 00A3 Last Mod Time 5277983D 'Tue Mar 23 19:01:58 2021' 00A7 CRC 261DAFE6 00AB Compressed Length 00000006 00AF Uncompressed Length 00000006 00B3 Filename Length 000B 00B5 Extra Length 0000 00B7 Comment Length 0000 00B9 Disk Start 0000 00BB Int File Attributes 0001 [Bit 0] 1 Text Data 00BD Ext File Attributes 81B40000 00C1 Local Header Offset 0000002F 00C5 Filename 'numbers.txt' 00D0 END CENTRAL HEADER 06054B50 00D4 Number of this disk 0000 00D6 Central Dir Disk no 0000 00D8 Entries in this disk 0002 00DA Total Entries 0002 00DC Size of Central Dir 00000072 00E0 Offset to Central Dir 0000005E 00E4 Comment Length 0000 Done =head2 Verbose Output If the C<-v> option is present, column 1 is expanded to include =over 5 =item * The offset from the start of the file in hex. =item * The length of the field in hex. =item * A hex dump of the bytes in field in the order they are stored in the zip file. =back Here is the same zip file dumped using the C<zipdetails> C<-v> option: $ zipdetails -v test.zip 0000 0004 50 4B 03 04 LOCAL HEADER #1 04034B50 0004 0001 0A Extract Zip Spec 0A '1.0' 0005 0001 00 Extract OS 00 'MS-DOS' 0006 0002 00 00 General Purpose Flag 0000 0008 0002 00 00 Compression Method 0000 'Stored' 000A 0004 3D 98 77 52 Last Mod Time 5277983D 'Tue Mar 23 19:01:58 2021' 000E 0004 9C 14 8A 0F CRC 0F8A149C 0012 0004 06 00 00 00 Compressed Length 00000006 0016 0004 06 00 00 00 Uncompressed Length 00000006 001A 0002 0B 00 Filename Length 000B 001C 0002 00 00 Extra Length 0000 001E 000B 6C 65 74 74 Filename 'letters.txt' 65 72 73 2E 74 78 74 0029 0006 61 62 63 64 PAYLOAD abcde. 65 0A 002F 0004 50 4B 03 04 LOCAL HEADER #2 04034B50 0033 0001 0A Extract Zip Spec 0A '1.0' 0034 0001 00 Extract OS 00 'MS-DOS' 0035 0002 00 00 General Purpose Flag 0000 0037 0002 00 00 Compression Method 0000 'Stored' 0039 0004 3D 98 77 52 Last Mod Time 5277983D 'Tue Mar 23 19:01:58 2021' 003D 0004 E6 AF 1D 26 CRC 261DAFE6 0041 0004 06 00 00 00 Compressed Length 00000006 0045 0004 06 00 00 00 Uncompressed Length 00000006 0049 0002 0B 00 Filename Length 000B 004B 0002 00 00 Extra Length 0000 004D 000B 6E 75 6D 62 Filename 'numbers.txt' 65 72 73 2E 74 78 74 0058 0006 31 32 33 34 PAYLOAD 12345. 35 0A 005E 0004 50 4B 01 02 CENTRAL HEADER #1 02014B50 0062 0001 1E Created Zip Spec 1E '3.0' 0063 0001 03 Created OS 03 'Unix' 0064 0001 0A Extract Zip Spec 0A '1.0' 0065 0001 00 Extract OS 00 'MS-DOS' 0066 0002 00 00 General Purpose Flag 0000 0068 0002 00 00 Compression Method 0000 'Stored' 006A 0004 3D 98 77 52 Last Mod Time 5277983D 'Tue Mar 23 19:01:58 2021' 006E 0004 9C 14 8A 0F CRC 0F8A149C 0072 0004 06 00 00 00 Compressed Length 00000006 0076 0004 06 00 00 00 Uncompressed Length 00000006 007A 0002 0B 00 Filename Length 000B 007C 0002 00 00 Extra Length 0000 007E 0002 00 00 Comment Length 0000 0080 0002 00 00 Disk Start 0000 0082 0002 01 00 Int File Attributes 0001 [Bit 0] 1 Text Data 0084 0004 00 00 B4 81 Ext File Attributes 81B40000 0088 0004 00 00 00 00 Local Header Offset 00000000 008C 000B 6C 65 74 74 Filename 'letters.txt' 65 72 73 2E 74 78 74 0097 0004 50 4B 01 02 CENTRAL HEADER #2 02014B50 009B 0001 1E Created Zip Spec 1E '3.0' 009C 0001 03 Created OS 03 'Unix' 009D 0001 0A Extract Zip Spec 0A '1.0' 009E 0001 00 Extract OS 00 'MS-DOS' 009F 0002 00 00 General Purpose Flag 0000 00A1 0002 00 00 Compression Method 0000 'Stored' 00A3 0004 3D 98 77 52 Last Mod Time 5277983D 'Tue Mar 23 19:01:58 2021' 00A7 0004 E6 AF 1D 26 CRC 261DAFE6 00AB 0004 06 00 00 00 Compressed Length 00000006 00AF 0004 06 00 00 00 Uncompressed Length 00000006 00B3 0002 0B 00 Filename Length 000B 00B5 0002 00 00 Extra Length 0000 00B7 0002 00 00 Comment Length 0000 00B9 0002 00 00 Disk Start 0000 00BB 0002 01 00 Int File Attributes 0001 [Bit 0] 1 Text Data 00BD 0004 00 00 B4 81 Ext File Attributes 81B40000 00C1 0004 2F 00 00 00 Local Header Offset 0000002F 00C5 000B 6E 75 6D 62 Filename 'numbers.txt' 65 72 73 2E 74 78 74 00D0 0004 50 4B 05 06 END CENTRAL HEADER 06054B50 00D4 0002 00 00 Number of this disk 0000 00D6 0002 00 00 Central Dir Disk no 0000 00D8 0002 02 00 Entries in this disk 0002 00DA 0002 02 00 Total Entries 0002 00DC 0004 72 00 00 00 Size of Central Dir 00000072 00E0 0004 5E 00 00 00 Offset to Central Dir 0000005E 00E4 0002 00 00 Comment Length 0000 Done =head1 LIMITATIONS The following zip file features are not supported by this program: =over 5 =item * Multi-part archives. =item * The strong encryption features defined in the L<APPNOTE.TXT|http://www.pkware.com/documents/casestudies/APPNOTE.TXT> document. =back =head1 TODO Error handling is a work in progress. If the program encounters a problem reading a zip file it is likely to terminate with an unhelpful error message. =head1 SUPPORT General feedback/questions/bug reports should be sent to L<https://github.com/pmqs/zipdetails/issues>. =head1 SEE ALSO The primary reference for Zip files is L<APPNOTE.TXT|http://www.pkware.com/documents/casestudies/APPNOTE.TXT>. An alternative reference is the Info-Zip appnote. This is available from L<ftp://ftp.info-zip.org/pub/infozip/doc/> For details of WinZip AES encryption see L<AES Encryption Information: Encryption Specification AE-1 and AE-2|https://www.winzip.com/win/es/aes_info.html>. The C<zipinfo> program that comes with the info-zip distribution (L<http://www.info-zip.org/>) can also display details of the structure of a zip file. =head1 AUTHOR Paul Marquess F<pmqs@cpan.org>. =head1 COPYRIGHT Copyright (c) 2011-2022 Paul Marquess. All rights reserved. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself.
Save
cmd:
run