show encrypted / successeful pwd / attempted passwords

Author: ayoubfaouzi

cmd/view.go

@@ -90,6 +90,22 @@ func printFileReport(file entity.File, webSvc webapi.Service) {
 	if file.IsArchive {
 		printKV("Archive", fmt.Sprintf("yes (%d files)", len(file.DerivedFiles)))
 	}
+	if file.Encrypted {
+		printKV("Encrypted", "yes")
+		if file.DecryptionSuccess != nil {
+			if *file.DecryptionSuccess {
+				printKV("Decryption", cleanStyle.Render("successful"))
+				if file.SuccessfulPassword != "" {
+					printKV("Password", file.SuccessfulPassword)
+				}
+			} else {
+				printKV("Decryption", detectStyle.Render("failed"))
+				if len(file.AttemptedPasswords) > 0 {
+					printKV("Attempted", strings.Join(file.AttemptedPasswords, ", "))
+				}
+			}
+		}
+	}
 	if file.ParentSHA256 != "" {
 		printKV("Parent", file.ParentSHA256)
 	}

internal/entity/file.go

@@ -34,9 +34,13 @@ type File struct {
 	BehaviorReportID string            `json:"behavior_report_id,omitempty"`
 	Status           int               `json:"status,omitempty"`
 	Classification   string            `json:"classification,omitempty"`
-	IsArchive    bool          `json:"is_archive,omitempty"`
-	DerivedFiles []DerivedFile `json:"derived_files,omitempty"`
-	ParentSHA256 string        `json:"parent_sha256,omitempty"`
+	IsArchive          bool          `json:"is_archive,omitempty"`
+	DerivedFiles       []DerivedFile `json:"derived_files,omitempty"`
+	ParentSHA256       string        `json:"parent_sha256,omitempty"`
+	Encrypted          bool          `json:"encrypted"`
+	DecryptionSuccess  *bool         `json:"decryption_success,omitempty"`
+	SuccessfulPassword string        `json:"successful_password,omitempty"`
+	AttemptedPasswords []string      `json:"attempted_passwords,omitempty"`
 }
 
 // DerivedFile is a child file produced during analysis of a parent — either a