[Boards: 3 / a / aco / adv / an / asp / b / biz / c / cgl / ck / cm / co / d / diy / e / fa / fit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mu / n / news / o / out / p / po / pol / qa / r / r9k / s / s4s / sci / soc / sp / t / tg / toy / trash / trv / tv / u / v / vg / vp / vr / w / wg / wsg / wsr / x / y ] [Home]
4chanarchives logo
Trying to find the content of this file: u.pomf.is/dwsart.db
Images are sometimes not shown due to bandwidth/network limitations. Refreshing the page usually helps.

You are currently reading a thread in /g/ - Technology
Thread replies: 18
Thread images: 5
Anonymous
2016-03-16 13:35:40 Post No. 53519230
[Report] Image search: [Google]
File: lena_large__.jpg (130 KB, 512x512) Image search: [Google]
lena_large__.jpg
130 KB, 512x512
Anonymous 2016-03-16 13:35:40 Post No. 53519230 [Report]
Trying to find the content of this file: u.pomf.is/dwsart.db

What I've gotten so far:
1. It's a SQLite3 db file
2. The main data is is stored in a BLOB type field in binary. My guess is it's compressed.

I've tried to decompress it with gzip and a few other popular utilities but none worked. Also tried to check the first bytes for info but those gave me nothing.

pic unrelated
>>
Anonymous 2016-03-16 13:38:07 Post No.53519253
[Report]
Anonymous 2016-03-16 13:38:07 Post No.53519253 [Report]
Upload binary data somewhere?
>>
Anonymous 2016-03-16 13:43:09 Post No.53519308
[Report] Image search: [Google]
Anonymous 2016-03-16 13:43:09 Post No.53519308 [Report]
>>53519230
is this not the data?
>>
Anonymous 2016-03-16 13:44:13 Post No.53519317
[Report] Image search: [Google]
Anonymous 2016-03-16 13:44:13 Post No.53519317 [Report]
>>53519308
o_o
>>
Anonymous 2016-03-16 13:47:26 Post No.53519340
[Report] Image search: [Google]
Anonymous 2016-03-16 13:47:26 Post No.53519340 [Report]
File: ok.png (68 KB, 603x757) Image search: [Google]
ok.png
68 KB, 603x757
>>53519308
If you check out the content of the DATA column you'll find pic related.
>>
Anonymous 2016-03-16 13:49:30 Post No.53519366
[Report]
Anonymous 2016-03-16 13:49:30 Post No.53519366 [Report]
>>53519340
I have to mention that I'm really new/shit at stuff like this so I might be missing something very obvious here.
>>
Anonymous 2016-03-16 13:51:33 Post No.53519392
[Report]
Anonymous 2016-03-16 13:51:33 Post No.53519392 [Report]
>>53519340
Run binwalk on it.
>>
Anonymous 2016-03-16 13:52:01 Post No.53519396
[Report]
Anonymous 2016-03-16 13:52:01 Post No.53519396 [Report]
>>53519340
oh I see

yea
>>
Anonymous 2016-03-16 14:00:23 Post No.53519459
[Report]
Anonymous 2016-03-16 14:00:23 Post No.53519459 [Report]
>>53519392
I ran file -d on a query of "select DATA from cache limit 1"

file is a command that tells you what type of data is in your file.

keep in mind this is a single row of the data, and that's maybe 1/10th of the total output, so run the command yourself.
>>
Anonymous 2016-03-16 14:01:32 Post No.53519464
[Report] Image search: [Google]
Anonymous 2016-03-16 14:01:32 Post No.53519464 [Report]
>>53519459
kek forgot pic

about to go to bed..

that "cracklib password index, big endian (64 bit) idk what that means
>>
Anonymous 2016-03-16 14:06:03 Post No.53519500
[Report]
Anonymous 2016-03-16 14:06:03 Post No.53519500 [Report]
>>53519464
ah that's cool. How did you run the command against a single query output? I'm currently checking row per row with a Python script.
>>
Anonymous 2016-03-16 14:10:02 Post No.53519525
[Report]
Anonymous 2016-03-16 14:10:02 Post No.53519525 [Report]
>>53519253
>u.pomf.is/dwsart.db
>>
Anonymous 2016-03-16 14:13:03 Post No.53519546
[Report]
Anonymous 2016-03-16 14:13:03 Post No.53519546 [Report]
>>53519500
sqlite3 dwsart.db "SELECT DATA FROM cache limit 1" | xxd -g1


that gives hex

sqlite3 dwsart.db "SELECT DATA FROM cache limit 1" > file.txt

I guess
>>
Anonymous 2016-03-16 14:18:48 Post No.53519603
[Report]
Anonymous 2016-03-16 14:18:48 Post No.53519603 [Report]
>>53519546
then
"file -r -d file.txt"


70: > 4 belong&,=16,"GLS_BINARY_MSB_FIRST"]
mget(type=1, flag=20, offset=0, o=0, nbytes=3)
mget/64 @0: \001^\n\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000

15: > 0 byte&,=-128,"8086 relocatable (Microsoft)"]
1 == 18446744073709551488 = 0
mget(type=20, flag=20, offset=0, o=0, nbytes=3)
mget/64 @0: \001^\n\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000

13: > 0 search/1,=\000\000\000\000pwV1,"Cracklib password index, big endian ("64-bit")"]
mget(type=20, flag=60, offset=0, o=0, nbytes=3)
mget/64 @0: \001^\n\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000

82: > 0 search/wtb/1,=<?xml,"XML document text"]
mget(type=10, flag=20, offset=1040, o=0, nbytes=3)
mget/64 @1040: \000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000


idk how to find out what the exact data is, if we could do that then it'd be easy I guess
>>
Anonymous 2016-03-16 14:38:48 Post No.53519789
[Report]
Anonymous 2016-03-16 14:38:48 Post No.53519789 [Report]
>>53519603
Those are all false positives.
>>
Anonymous 2016-03-16 14:49:33 Post No.53519888
[Report]
Anonymous 2016-03-16 14:49:33 Post No.53519888 [Report]
>>53519789
elaborate?
>>
Anonymous 2016-03-16 14:54:44 Post No.53519945
[Report]
Anonymous 2016-03-16 14:54:44 Post No.53519945 [Report]
>>53519888
>I found the byte sequence "pwV1", therefore its cracklib
>I found the byte sequence "?>", therefore it's XML
It's just shitting out everything it can match, that output is worthless.
>>
Anonymous 2016-03-16 15:48:04 Post No.53520572
[Report]
Anonymous 2016-03-16 15:48:04 Post No.53520572 [Report]
Just ran the output through gzip, zlib and lzma and got nothing.
Thread replies: 18
Thread images: 5
banner
banner
[Boards: 3 / a / aco / adv / an / asp / b / biz / c / cgl / ck / cm / co / d / diy / e / fa / fit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mu / n / news / o / out / p / po / pol / qa / r / r9k / s / s4s / sci / soc / sp / t / tg / toy / trash / trv / tv / u / v / vg / vp / vr / w / wg / wsg / wsr / x / y] [Home]
All trademarks and copyrights on this page are owned by their respective parties. Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.
If a post contains personal/copyrighted/illegal content you can contact me at [email protected] with that post and thread number and it will be removed as soon as possible.
DMCA Content Takedown via dmca.com
All images are hosted on imgur.com, send takedown notices to them.
This is a 4chan archive - all of the content originated from them. If you need IP information for a Poster - you need to contact them. This website shows only archived content.