ClamAV antivirus scanner, can read files via error message leakage with custom YARA rules.
clamscan --no-summary -d x.yara -f {input} 📎 input clamscan --no-summary -d x.yara -f {input}Sandbox: execFile · Timeout: 30s
system.file.read | Name | Type | Required | Default | Description | Aliases |
|---|---|---|---|---|---|
input | file | No | - | File to read | - |
Inputs
system.file.path Path to input file
Outputs
process.output File content in error messages
process_spawn Produces
process.outputConsumes
system.file.path| Resource | Value |
|---|---|
| CPU | low |
| Memory | 32 MB |
| Network | none |
| Disk I/O | low |
Read a file via clamscan error message leakage
touch x.yara
clamscan --no-summary -d x.yara -f /path/to/input-file 2>&1 | sed -nE 's/^(.*): No such file or directory$/\1/p'