From: Pedro David Marco <[email protected]> Reply-To: Pedro David Marco <[email protected]> Date: Wednesday, 16 August 2017 at 22:32 To: David Niklas <[email protected]>, "[email protected]" <[email protected]> Subject: Re: Attachments with no Content-Type mime header
Hi David... I agree with you... but some functions like find_parts() do not work if there are not Content-Type Headers... making impossible the analysis of some attachments... i am writing a plugin to detect suspicious PDFs... Maybe there's a better way to analyze attachments that using find_parts().... Thanks! ------ PedroD The magic number or file signature can be helpful in determining the filetype: https://en.wikipedia.org/wiki/List_of_file_signatures I make use of this in the OLEMacro plugin: https://github.com/fmbla/spamassassin-olemacro/ -- Paul Stead Systems Engineer Zen Internet
