Feb-26-2017, 09:05 PM
(Feb-26-2017, 08:54 PM)ichabod801 Wrote: Perhaps a good way to get started is with a clearer definition of the problem. Planning a largely underestimated skill in programming. What is a "good hash"? What sort of comparison are you trying to do?
Sorry I should have expanded:
This is in relation to Digital Forensics, the exported list as mentioned in the OP contains hashes for all files in any given/specified directory and subdirectories. What I need to do is compare this list of hashes with a list of known good hashes i.e. perform an md5checksum or equivalent check on sha256 this will (at the end of the program) output three files containing known good hashes, known bad hashes and a list that requires further investigation
A list of known good hashes can be found at https://www.owasp.org/index.php/OWASP_Fi...Repository, the questions I have is how do I start coding python to read in the hashes and compare them to the above database (as an example) and flag up if it's good or not?
Hope that makes sense.