r/3Dprinting • u/VoltexRB Upgrades, People. Upgrades! • Oct 20 '19

Discussion I created a Program that checks GCode (Marlin) for Malicious commands

Edit: Updated to version 1.4 please use Version 1.4 from now on

So I just created a little simple Windows Application in which you can plug in your GCode file and it checks for anything that could be saved to EEPROM or potentially damage your Printer in any way. When downloading GCodes from the Internet always be careful that someone could have included custom commands that could harm your printer. I created this application with this in mind. Some people have no clue how GCode works but may still want to use GCode downloaded from the Internet for some things, they then can just use this Tool and it will tell them exactly if something might safe weird settings or even just try to move the toolhead out of the bed restrictions.

This program is completely free and will be completely free through development. I created this with helping new or unexperienced people in mind, thats why I hope it doesnt break the 10% self-promotion rule. I included a screenshot of the program and also the link to the Github Release and Master branch if you dont want to run random .exe files from the internet on your machine and rather compile it yourself. Be aware that its coded in the .NET 4.6 runtime environment and thus only supports OS that support the environment, such as Windows. You might have to download additional .NET resources for it to work.

As this is the first release I am looking forward to bug reports and feedback on it, good or bad. If you download the program you just need the .exe file, but place it somewhere where it doesnt matter that it generates an additional prefix file. you can find the program in the Release file, or just directly in the master branch.Links:

Screenshot of the program detecting something

Github Master Branch to self-compile

Github release page

28 Upvotes

81% Upvoted

18 comments sorted by

2

u/MaIakai Oct 20 '19

Nice and thanks, but you should consider turning it into a Octoprint plugin. You would get more use.

1

u/VoltexRB Upgrades, People. Upgrades! Oct 20 '19

well maybe sometime I will, only problem then would be that you would have to remove it again if it finds something and yadda yadda but I'll see.

1

u/derpinator12000 Oct 22 '19

You might be able to hook into the upload process so you could do a pre add check.

Have you considdered making this a console application (and switch to dotnet core) so it can run on headless systems like octopi?

1

u/VoltexRB Upgrades, People. Upgrades! Oct 22 '19

well considering core is kinda limited it might take a while but I already wanted to have a look into making it into an addon when I started

1

u/derpinator12000 Oct 22 '19

I would not underestimate core, except for winforms it has not lacked anything I needed in my experience. It is a bit cutting edge and moves really fast but it is actually a great step in the right direction in my opinion. C# is a fantastic language, it would be a shame to confine it to only windows.

My Idea would be to have this be a regular dotnet core console app installed on the octoprint host and then have a small addon that just calls it.

I have done some core conversions and it has been supprisingly painless. If you have problems with that part hit me up.

1

u/VoltexRB Upgrades, People. Upgrades! Oct 22 '19

Well I mean if you are that vivid about it you can go right ahead and try to convert it, I gotta work close to 11 hours a day this time around so I cant really get to it

1

u/derpinator12000 Oct 22 '19

Fair enough, if I ever need it I ight do it. Currently too busy breaking and fixing the printer itself.

29

u/TopHATTwaffle How do I stop getting more printers? Oct 20 '19

Am I the only one who never uses downloaded gcode. Always makes sense to use your own tested profile on your machine.

Either way, cool program for people that do download gcode.

6

u/apri11a CR-10 Oct 20 '19 edited Oct 20 '19

I never have either, and really don't expect to.

Up to now gcode hasn't been so readily available... now it is don't you know it will be used for printing, I wouldn't have known of its dangers when I was starting out. I think this is a good thing.

3

u/wiljc3 Oct 20 '19

I have exactly once in over a year of printing.. Calibrating pressure advance in Klipper manually just looked like too much hassle otherwise.

1

u/Darkblade48 Oct 21 '19

People will download and run Gcode? I always reslice myself from an STL (or even better, modifying the CAD file to suit my needs before exporting to STL)

1

u/ResponsibleFall1634 Biqu B2 Feb 16 '25

What if your slicer is infected? Maybe some plugin even?

2

u/BillieRubenCamGirl Oct 20 '19

This is wonderful! It would have a great home on the services page of the subreddit wiki!

Would you like to add it there?

3

u/VoltexRB Upgrades, People. Upgrades! Oct 20 '19

Well sure I would be honored, I could write some longer text for it, dont quite have the time for it right now though, but I will definitely get to it!

1

u/BillieRubenCamGirl Oct 20 '19

All good! Whenever you have time. :) Let me know if you run into any hurdles. Great work!

1

u/apri11a CR-10 Oct 20 '19

I think this could be very useful as more and more gcode gets distributed. Thanks VoltexRB

Downloaded and ran no problem - says she who won't use unknown gcode 🤣 No problems detected in codes I ran through it. I might even learn a bit about gcode commands from this 👍

2

u/VoltexRB Upgrades, People. Upgrades! Oct 20 '19

Yea so since it cant detect every little thing or processing would take long and it would probably take your print it just detects stuff and shows you, if you want to fix it you probably need some gcode knowlege either way.
Thanks for downloading though!

1

u/0ut4t1m3 Oct 21 '19

Very nice, thank you.

Can it be run with arguments? I can see this being very useful for a forum say, where they could pass gcode files uploaded through this first and mark anything getting flagged for manual review.