Sander
Sander
Logging is now INFO: `2022-08-16 18:43:46,223::INFO::[postproc:925] Download Helemaal1 contains a fully encrypted & obfuscated rar-file /home/sander/Downloads/incomplete/Helemaal1/7fafcaa1-a0f4-4330-a889-06a6aa742485. SABnzbd cannot deobfuscate those rar-files` Result in History is `Completed`, which seems to be...
> * disable the download backup if no sab auth is set / only accessing outside private ip space... I thought of this too, but an outside attacker with access...
And how about this: hard-encode to pure ASCII? ``` >>> ud.normalize('NFKD', str1u).encode('ascii','ignore') b'french_german_demo' >>> ud.normalize('NFKD', str2u).encode('ascii','ignore') b'french_german_demo' >>> ud.normalize('NFKD', str1u).encode('ascii','ignore') == ud.normalize('NFKD', str2u).encode('ascii','ignore') True >>> ud.normalize('NFC', str1u).encode('ascii','ignore') == ud.normalize('NFC', str2u).encode('ascii','ignore')...
That NZB is not retrievable for me: When I click on it in the github gui, I get an empty page When i get it with wget, it's javascript stuff...
Ouch, what an ugly NZB. Where did you get it from? SAB's deobfuscate does that not help. And I think the par2 files are renaming the already ugly named rar...
> Can we maybe fix the volume-number detection? > > EDIT: or is this not possible due to the password-protection? ... bingo: ``` sander@stream13:~/git/sabnzbd$ python3 Python 3.8.10 (default, Mar 15...
But there is hope: if you provide the password, and you use unrar (so not pure python code), ``` sander@stream13:~/post_this$ cp withpass.part4.rar unclear_which_part sander@stream13:~/post_this$ unrar l -pgeheim unclear_which_part UNRAR 5.61...
I can change sabnzbd.utils.rarvolinfo in two ways so that rarvolinfo also works on fully-encrypted rar files: 1. on fully-encrypted rar files: fallback to os.system("unrar -p..."), and get the volume number...
@Safihre what do you think about the above? So: if SAB sees a rar files that is fully encrypted, then use os.system("unrar ") with the password in the NZB (and...
... or for now only build in detection and logging of fully-encrypted rars. No performance hit, the user gets informed, and we get statistics how often this occurs: N=1, or...