Hopefully added the last screenshots and some fixes

This commit is contained in:
Patrick Neumann 2020-12-03 22:39:16 +01:00
parent 992f1da53c
commit 7704660286
7 changed files with 31 additions and 25 deletions

View File

@ -103,14 +103,16 @@ check_dep "${MMLS_BIN}" "sleuthkit"
check_dep "${OPENSSL_BIN}" "openssl"
check_dep "${SED_BIN}" "sed"
check_ext "${SOURCE}" "[eE]01|dd|DD|raw|RAW|img|IMG"
check_ext "${SOURCE}" "[eE]01"
check_tmp
#-------------------------------------------------------------------------------
# A little bit of configuration before the magic.
#-------------------------------------------------------------------------------
readonly OFFSET="$( choose_partition "${SOURCE}" | ${AWK_BIN} -F "_" '{ print $3; }' )"
readonly TIMEZONE="${DIRNAME}/timezone.txt"
readonly TIMEZONE="${TMP}/${OFFSET}-timezone.txt"
#-------------------------------------------------------------------------------
# A wonder maybe takes "a little bit" longer... :-/
@ -122,35 +124,38 @@ if ${FSSTAT_BIN} -o "${OFFSET}" "${SOURCE}" > /dev/null 2>&1 ; then
| ${AWK_BIN} '$3=='"${OFFSET}"' { print $0; }' \
>> "${TIMEZONE}"
localtime="$( ${IFIND_BIN} -o "${OFFSET}" \
lt_inode="$( ${IFIND_BIN} -o "${OFFSET}" \
-n "/etc/localtime" \
"${SOURCE}" )"
if [ "${localtime}" != "File not found" ] ; then
symlink="$( ${ISTAT_BIN} -o "${OFFSET}" "${SOURCE}" "${localtime}" \
| ${AWK_BIN} -F ":" '/Symbolic link to/ { sub( /.*\/usr\/share\/zoneinfo\//, "", $2 ); print $2 }' )"
if [ "${lt_inode}" != "File not found" ] ; then
symlink="$( ${ISTAT_BIN} -o "${OFFSET}" "${SOURCE}" "${lt_inode}" \
| ${AWK_BIN} -F ":" '/symbolic link to/ { sub( /.*\/usr\/share\/zoneinfo\//, "", $2 ); print $2 }' )"
echo -e -n " Information from \"/etc/localtime\":\n " >> "${TIMEZONE}"
if [ -n "${symlink}" ] ; then
echo "${symlink}" >> "${TIMEZONE}"
else
md5="$( ${ICAT_BIN} -o "${OFFSET}" "${SOURCE}" "${localtime}" \
| ${OPENSSL_BIN} md5 \
lt_md5="$( ${ICAT_BIN} -o "${OFFSET}" \
"${SOURCE}" \
"${lt_inode}" \
| ${OPENSSL_BIN} dgst -md5 \
| ${AWK_BIN} '{ print $NF; }' )"
usz="$( ${IFIND_BIN} -o "${OFFSET}" -n "/usr/share/zoneinfo" "${SOURCE}" )"
OLDIFS=$IFS ; IFS=$'\n'
for zoneinfo in $( ${FLS_BIN} -r -p -o "${OFFSET}" "${SOURCE}" "${usz}" ) ; do
inode="$( echo "${zoneinfo}" \
| ${SED_BIN} -r 's/(.*[[:space:]])([[:digit:]]+)(:[[:space:]].*)/\2/' )"
if ${ICAT_BIN} -o "${OFFSET}" "${SOURCE}" "${inode}" \
| ${OPENSSL_BIN} md5 \
| ${GREP_BIN} --fixed-strings "${md5}" > /dev/null 2>&1 ; then
echo "${zoneinfo}" | ${AWK_BIN} '{ print $NF; }' >> "${TIMEZONE}"
fi
done
IFS=$OLDIFS
zi_inode="$( ${IFIND_BIN} -o "${OFFSET}" \
-n "/usr/share/zoneinfo" \
"${SOURCE}" )"
zoneinfo="$( ${FLS_BIN} -o "${OFFSET}" \
-m "/usr/share/zoneinfo" \
-h \
-r \
"${SOURCE}" \
"${zi_inode}" \
| ${GREP_BIN} --invert-match --fixed-strings "deleted" \
| ${AWK_BIN} --field-separator "|" \
'/'"${lt_md5}"'/ { sub( /.*\/usr\/share\/zoneinfo\//, "", $2 ); print $2; }' )"
echo "${zoneinfo}" >> "${TIMEZONE}"
fi
echo >> "${TIMEZONE}"
else
echo -e " Symbolic link \"/private/etc/localtime\" not found.\n"
echo -e " \"/etc/localtime\" not found.\n"
fi
timezone="$( ${IFIND_BIN} -o "${OFFSET}" -n "/etc/timezone" "${SOURCE}" )"

View File

@ -114,7 +114,8 @@ readonly HASHCAT="${DIRNAME}/$( ${BASENAME_BIN} "${SOURCE}" )-hashcat-dictionary
# We need force if we use an intel GPU with "broken" OpenCL!
# (need years!!!)
#
# Actually not working with nVidia (OpenCL and/or Cuda)!
# Actually not working with nVidia (OpenCL and/or Cuda):
# https://www.archlinux.org/news/nvidia-45528-is-incompatible-with-linux-59/
#-------------------------------------------------------------------------------
if [ ! -f "${HASHCAT}" ] ; then
${GTERMINAL_BIN} --hide-menubar -- \

Binary file not shown.

After

Width:  |  Height:  |  Size: 147 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 144 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 140 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 122 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 142 KiB