Date: Mon, 17 Dec 2007 20:33:59 +0000 (UTC) From: Edwin Groothuis <edwin@FreeBSD.org> To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: ports/security Makefile ports/security/xorsearch Makefile distinfo pkg-descr ports/security/xorsearch/files patch-XORSearch.c Message-ID: <200712172033.lBHKXxTb072598@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
edwin 2007-12-17 20:33:59 UTC FreeBSD ports repository Modified files: security Makefile Added files: security/xorsearch Makefile distinfo pkg-descr security/xorsearch/files patch-XORSearch.c Log: XORSearch XORSearch is a program to search for a given string in an XOR or ROL encoded binary file. An XOR encoded binary file is a file where some (or all) bytes have been XORed with a constant value (the key). A ROL (or ROR) encoded file has it bytes rotated by a certain number of bits (the key). XOR and ROL/ROR encoding is used by malware programmers to obfuscate strings like URLs. XORSearch will try all XOR keys (0 to 255) and ROL keys (1 to 7) when searching. I programmed XORSearch to include key 0, because this allows to search in an unencoded binary file (X XOR 0 equals X). If the search string is found, XORSearch will print it until the 0 (byte zero) is encountered or until 50 characters have been printed, which ever comes first. 50 is the default value, it can be changed with option -l. Unprintable characters are replaced by a dot. WWW: http://blog.didierstevens.com/programs/xorsearch/ Author: Didier Stevens Revision Changes Path 1.929 +1 -0 ports/security/Makefile 1.1 +28 -0 ports/security/xorsearch/Makefile (new) 1.1 +3 -0 ports/security/xorsearch/distinfo (new) 1.1 +10 -0 ports/security/xorsearch/files/patch-XORSearch.c (new) 1.1 +19 -0 ports/security/xorsearch/pkg-descr (new)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200712172033.lBHKXxTb072598>