XORSearch Search for a given string in an XOR, ROL or ROT encoded binary file
Download

XORSearch Ranking & Summary

XORSearch Tags

search searcher Search String search binary sequence String Search xor algorithm Rot-13 addin rot-13 XOR encryption Search Binary Data xor reverse binary search binary string creator binary string encoded string to binary XOR Search ROL Search ROT Search XOR compile Ioncube encoded file definable search string binary to string Convert Binary String XOR data XOR block chiper XOR calculator binary file search replace

XORSearch Description

The XORSearch application was designed to be a small program to search for a given string in an XOR, ROL or ROT encoded binary file. An XOR encoded binary file is a file where some (or all) bytes have been XORed with a constant value (the key). A ROL (or ROR) encoded file has its bytes rotated by a certain number of bits (the key). A ROT encoded file has its alphabetic characters (A-Z and a-z) rotated by a certain number of positions. XOR and ROL/ROR encoding is used by malware programmers to obfuscate strings like URLs. XORSearch will try all XOR keys (0 to 255), ROL keys (1 to 7) and ROT keys (1 to 25) when searching. I programmed XORSearch to include key 0, because this allows to search in an unencoded binary file (X XOR 0 equals X). If the search string is found, XORSearch will print it until the 0 (byte zero) is encountered or until 50 characters have been printed, which ever comes first. 50 is the default value, it can be changed with option -l. Unprintable characters are replaced by a dot. Usage: XORSearch file string XORSearch V1.4, search for a XOR, ROL or ROT encoded string in a file Use -s to save the XOR or ROL encoded file containing the string Use -l length to limit the number of printed characters (50 by default) Use -i to ignore the case when searching Use -f to provide a file with search strings

XORSearch Related Software