Malware extraction from HTTP Streams in Go

Pablo Ramos
A bit off
Published in
7 min readSep 4, 2022

--

How to extract binary files from network captures in Go.

An image generated with Dall-E by the author

Building custom Network Parser is handy, I’ve said that before. To do this in Go, first it’s needed to rebuild TCP streams. After that you can parse HTTP Streams and extract files into a directory, database or any other location.

As I am learning Go, I migrated something previously implemented in Python

--

--

Pablo Ramos
A bit off

Infosec Researcher, traveller, kitesurfing enthusiast. I just like to think outloud