Hashlookup-Forensic-Analyser

  • This is an interesting project. It looks like a wrapper around an API allows you to send a (md5/sha1) hash and it'll return information that it has about the file, including sources that have that file.

    I've run in to a similar thing before, and had hit something interesting with empty files, so I thought it'd be interesting to test -

      $ curl "https://hashlookup.circl.lu/lookup/md5/$(md5 -q -s '')" | jq .FileName
      "./usr/lib/debug/usr/sbin/make_reiser4-1.2.1-1.mga7.i386.debug"