Skip to content

Instantly share code, notes, and snippets.

@dat-boris

dat-boris/savscan_fix_eml.sh

Created December 21, 2016 15:49
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save dat-boris/0a3ac47e454b86ed8f54b9188a706776 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save dat-boris/0a3ac47e454b86ed8f54b9188a706776 to your computer and use it in GitHub Desktop.
Download ZIP
`savscan` is broken on scanning .eml with attachment
Raw
savscan_fix_eml.sh
# see https://www.virustotal.com/en/file/d6d29b4e39029b50d3c0f9ab43cb6886ada09cb7eb295bdedc0396d8c80fe2d6/analysis/
# ripmime to avoid failure to handle .eml
find $1 -type f | xargs -n1 ripmime -d $1 -i > /dev/null
savscan -rec -archive -all -mime -f -suspicious -ss -sc $1
# ensure we do not block setup
true
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment