08:00
-
08:25
-
08:25
Day 2
[CANCELED] Carving JSON in heap dumps
<p>There are lots of carving tools out there, but surprisingly there's no open-source one for carving JSON objects. <a href="https://www.reportersunited.gr/en/">Reporters United</a>, a network of investigative reporters in Greece, wrote <a href="https://github.com/reportersunited/json-carver"><code>json-carver</code></a> as part of our investigation into the <a href="https://www.theregister.com/2025/08/10/telemessage_archive_online/?td=readmore">Telemessage leaks</a>. <a href="https://github.com/reportersunited/json-carver"><code>json-carver</code></a> is a FOSS tool written in Rust, that can recover JSON objects from any binary stream, even partially-corrupted ones.</p>
<p>We'll discuss the role of this tool in our investigation, compare its accuracy and speed against <code>strings(1)</code>, and show how to use this tool in any of your future investigations.</p>