diff options
author | Edwin Groothuis <edwin@FreeBSD.org> | 2007-12-17 20:33:59 +0000 |
---|---|---|
committer | Edwin Groothuis <edwin@FreeBSD.org> | 2007-12-17 20:33:59 +0000 |
commit | 4ed8e97ed0e48bb0e3c284b978aa662b93d5256d (patch) | |
tree | 419e330871e966731ddd5363a8fb03eb09ee9d60 /security/Makefile | |
parent | 5c3719104a87c89af6e430424ac176db190bfe90 (diff) | |
download | ports-4ed8e97ed0e48bb0e3c284b978aa662b93d5256d.tar.gz ports-4ed8e97ed0e48bb0e3c284b978aa662b93d5256d.zip |
XORSearch
XORSearch is a program to search for a given string in an XOR or
ROL encoded binary file. An XOR encoded binary file is a file where
some (or all) bytes have been XORed with a constant value (the key).
A ROL (or ROR) encoded file has it bytes rotated by a certain number
of bits (the key). XOR and ROL/ROR encoding is used by malware
programmers to obfuscate strings like URLs.
XORSearch will try all XOR keys (0 to 255) and ROL keys (1 to 7)
when searching. I programmed XORSearch to include key 0, because
this allows to search in an unencoded binary file (X XOR 0 equals
X).
If the search string is found, XORSearch will print it until the 0
(byte zero) is encountered or until 50 characters have been printed,
which ever comes first. 50 is the default value, it can be changed
with option -l. Unprintable characters are replaced by a dot.
WWW: http://blog.didierstevens.com/programs/xorsearch/
Author: Didier Stevens
Notes
Notes:
svn path=/head/; revision=203947
Diffstat (limited to 'security/Makefile')
-rw-r--r-- | security/Makefile | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/security/Makefile b/security/Makefile index 19ecfdc2db80..890e0bc92929 100644 --- a/security/Makefile +++ b/security/Makefile @@ -771,6 +771,7 @@ SUBDIR += xinetd SUBDIR += xmlsec SUBDIR += xmlsec1 + SUBDIR += xorsearch SUBDIR += xspy SUBDIR += xyssl SUBDIR += yafic |