Skip to content

Instantly share code, notes, and snippets.

@Tony3-sec
Last active April 2, 2017 16:00
Show Gist options
  • Save Tony3-sec/140f0b02d9d945346c8b485752f2c5ec to your computer and use it in GitHub Desktop.
Save Tony3-sec/140f0b02d9d945346c8b485752f2c5ec to your computer and use it in GitHub Desktop.
## Starting with the .NET Framework 4.5, the DeflateStream class uses the zlib library.
https://msdn.microsoft.com/en-us/library/system.io.compression.deflatestream(v=vs.110).aspx
78 01
78 5e
78 9c
78 da
Above is the typical header for zilb compressed data but does not mean it always start with 78.
Could be start from these numbers as well.
08
18
28
38
48
58
68
78
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment