RT-Extension-7zDownload - Download attachment as encrypted 7z file
Sometimes, especially when using RTIR for CSIRT work, attachments of tickets might contain malware.
It is unwise to download such files directly to the user's workstation. The usual convention is to zip the potentially malicious file into a password-protected zip / 7z file with the well-known password "infected".
Tested with RT 5.0.3.
As this extension replaces a Mason component, it is pretty version- dependent.
Check the lines after "RT-Extension-7zDownload Starts here" in html/Ticket/Elements/ShowAttachments, it should be easy to make the same changes to other versions of RT.
This module needs Archive::SevenZip and the 7z binary.
perl Makefile.PL
make
make install
May need root permissions
For RT Versions other than 5.0.3, replace the supplied ShowAttachments file with a patched version of the local RT installation.
Add this line:
Plugin('RT::Extension::7zDownload');
rm -rf /opt/rt5/var/mason_data/obj (and make sure the permissions are ok afterwards)
Otmar Lendl <lt>lendl@cert.at<gt>
Please report bugs directly to the author.
This software is Copyright (c) 2023 by CERT.at GmbH
This is free software, licensed under:
The GNU General Public License, Version 2, June 1991
To install RT::Extension::7zDownload, copy and paste the appropriate command in to your terminal.
cpanm
cpanm RT::Extension::7zDownload
CPAN shell
perl -MCPAN -e shell install RT::Extension::7zDownload
For more information on module installation, please visit the detailed CPAN module installation guide.