The next issue is the Ignored Paths.
Currently there is no UI where users can see the ignored paths and edit them.
See [Work in progress] Exclude specific drives/folders from scan

In that topic a guy called @Tom wrote at 31 Jan 2019, 17:57:

And in the long run, this will be done via the UI. Only technically savvy users should play with this in the registry or on the command line.

Hey, that was 3 Years, 9 Months and 12 Days ago.
And we still have no UI, where users can enter the ignored paths.
I think it does not make any sense to code this in the Toolbox, right?

So, what is your feedback @Tom and @GregAlexandre
You both seem to be the only active users (together with me) of the toolbox.

@Tom I have a new idea:
What about a web-dialog, where users drag an exe file to and the dialog performs the same things, as the toolbox (extracts the version info and also the icon)?

Luckily, I discussed this with a developer earlier today, and it seems that we can keep the --immediate though technically it will work quite differently.

Instead of running an inspection, it will signal the service and ask it to run the inspection.

Only caveat is that it most likely will require Admin privileges to send this signal.

And then the process will exit immediately, while the service runs in the background.

The other options will still vanish because they will be incompatible with the new changes.

Well, breaking for the Toolbox, but not for anything else, as far as we can tell.

With the upcoming major release of the agent, it will no longer be possible to run the --immediate in the same as way as before.

The reason is simple: It doesn't make sense, because the inspection data returned by the agent are wrong, because the agent runs in the wrong context.

Instead, the --immediate will be changed to send a request for a new inspection task to the backend. Within 1 minute, the agent (the service) should pick up the task and inspect.

This also means that the following options will be removed from the agent:

--no-filesystem
--no-registry
--no-system
--no-msi
--no-winupdate
--ignore
--path

The "ignore" and "path" can still be controlled via the registry:
https://vulndetect.org/topic/2388/

I don't know how many users use the Toolbox, we use it, because it is a nice way to extract data for new detections, which in turn is posted to some internal sub-categories for documentation purposes.

But the functionality to inspect is not used by anyone at SecTeer.

• you can get needed keys at Cacert if you are assured by some assurers. Only recognize if you trust Cacert root but free and better than nothing.

@OLLI_S : It seems that you did not updated the site with your latest toolbox?
Still in beta?
Will you sign your .exe ?

It is still in Beta because I need to implement some features (smaller changes).

And I am waiting for a new version of Quick Any2Ico that detects the original size of the icon in the EXE file (contacted the developer but no reply yet).

I have no idea what is needed to sign an application (stopped programming 10 years ago and started it again for the Toolbox).

Yes, a way to extract the icon from an exe file. Even if you redirect to another tool.

I already posted this topic many months ago:
https://vulndetect.org/topic/155/please-read-before-posting-new-detection-issues

Does this help you?

Can you please add the way to report icons? In the toolbox or a link.

Can you please specify what exactly you need?
A way to extract the icon from an exe file?

Thanks a lot for this toolbox.

Can you please add the way to report icons? In the toolbox or a link.

Thanks and regards.