-
Notifications
You must be signed in to change notification settings - Fork 48
/
Copy pathdumpnpk.py
executable file
·143 lines (131 loc) · 4.81 KB
/
dumpnpk.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
#!/usr/bin/env python
# npk format
# ---
# 0-4 : '\x1e\xf1\xd0\xba'
# 4-8 : len(data - 8) ===> The size of the package
# 8-14 : '\x01\x00 \x00\x00\x00'
# 14-30: description ===> 16 chars to put a short name
# 30-34: ?? | ==> version #1 - used in this header again (revision, 'f' (102), minor, major)
# 34-38: ?? | ==> version #2 - used in the data part (epoch time of package build)
# | Actualy seems like header[30:42] == each_data_header[12:24]...
# | Both appear as integers in /var/pdb/.../version
# 38-42: 0
# 42-46: 0
# 46-48: 16
# 48-50: 4 |
# 50-52: 0 | ==> Maybe int size of the architecture identifier that follows
# 52-56: "i386"
# 56-58: 2
# 58-62: long description size ===> how many chars follow
# 62-x : long description text
# +24: '\x03\x00"\x00\x00\x00\x01\x00system\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
# +8 : '2f\t\x02\x00\x00\x00\x00' |
# +8 : '2f\t\x02\x00\x00\x00\x00' | ==> two same headers (separators?)
# first 4 like header[30:34]
# last 4 always 0
#
# what follows are headers of 1 short (type) and 1 int (size):
# type 7, 8: some kind of script
# type 4: data
#
# the content is directly after the header
#
# in case of data it is commpressed with zlib
#
# uncompressed data has 30 byte headers:
#
# 0-1 : permissions: 237 is executable (755), 164 is non executable (644) |
# 1-2 : file type: 65 dir, 129 file | ==> ST_MODE from stat()
# 2-4 : 0 - could be user/group
# 4-8 : 0 - could be user/group
# 8-12 : last modification time (ST_MTIME) as reported by stat()
# 12-24: version stuff and a 0 (see above...)
# 24-28: data size
# 28-30: file name size
#
# then comes the file name and after that the data
import sys
import zlib
from struct import pack, unpack
from time import ctime
def parse_npk(filename):
f = open(filename, "r")
data = f.read()
f.close()
header = data[:62]
dsize = unpack("I", header[58:62])[0] # Description size
header += data[62:62+dsize+40]
print repr(header[38:58])
print "Magic:", repr(header[0:4]), "should be:", repr('\x1e\xf1\xd0\xba')
print "Size after this:", unpack("I", header[4:8])[0], "Header size:", len(header), "Data size:", len(data)
print "Unknown stuff:", repr(header[8:14]), "should be:", repr('\x01\x00 \x00\x00\x00')
print "Short description:", header[14:30]
print "Revision, unknown, Minor, Major:", repr(header[30:34]), unpack("BBBB", header[30:34])
print "Build time:", repr(header[34:38]), ctime(unpack("I", header[34:38])[0])
print "Some other numbers:", unpack("IIHHH", header[38:52]), "should be: (0, 0, 16, 4, 0)"
print "Architecture:", header[52:56]
print "Another number:", unpack("H", header[56:58]), "should be: (2,)"
print "Long description:", repr(header[62:62+dsize])
print "Next 24 chars:", repr(header[62+dsize:62+dsize+24])
print " should be:", repr('\x03\x00"\x00\x00\x00\x01\x00system\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
print "Separators:", repr(header[62+dsize+24:62+dsize+32]), repr(header[62+dsize+32:62+dsize+40])
print " first 4:", unpack("BBBB",header[62+dsize+24:62+dsize+28]), unpack("BBBB",header[62+dsize+32:62+dsize+36])
print ""
data = data[62+dsize:]
res=[]
while len(data)>6:
type = unpack("H", data[:2])[0]
size = unpack("I", data[2:6])[0]
print "Found data of type:", type, "size:", size
contents = data[6:6+size]
if type == 4:
contents = zlib.decompress(contents)
print " Uncompressing data..."
if type == 7:
print " Contents (oninstall):", repr(contents)
if type == 8:
print " Contents (onuninstall):", repr(contents)
res.append({"type": type, "size": size, "contents": contents})
data = data[6+size:]
print ""
print "Returning the raw header and the rest of the file (each part in a list)"
print ""
return header, res
def parse_data(data):
res = []
while len(data)>30:
header = data[:30]
dsize = unpack("I", header[24:28])[0]
fsize = unpack("H", header[28:30])[0]
if len(data) - 30 - fsize - dsize < 0:
dsize = len(data) - 30 - fsize
fstuff = data[30:30+fsize]
dstuff = data[30+fsize:30+fsize+dsize]
res.append({"header": header, "file": fstuff, "data": dstuff})
data = data[30+fsize+dsize:]
return res
if __name__ == "__main__":
if len(sys.argv) > 1:
for i in sys.argv[1:]:
header, res = parse_npk(i)
for j in res:
if j["type"] == 4:
print "Files in package:"
data = parse_data(j["contents"])
for k in data:
add = ''
perm, type, z1, z2, tim = unpack("BBHII", k["header"][:12])
if perm == 255:
perm = "al"
if perm == 237:
perm = "ex"
if perm == 164:
perm = "nx"
if type == 65:
type = "dir"
if type == 129:
type = "fil"
if type == 161:
type = "sym"
add='=> '+k["data"]
print type, perm, k["file"], add, tim