Originally Posted by DNSB
I used a utility called XORSearch. Basically, feed it a file and a search string and it will list out all the locations that string is found in the file along with the XOR used to obfuscate the string. I run it from a batch file that passed the search string from the command line and pauses at the end of the search to give a chance to see the results.
For 3.1.1, running xorsearch.exe libnickel.so.1.0.0 ReadingFooter
If I know the XOR key, I can also use another little program called XOR which reads in the first file, XORs it with the key and writes the result out.
I originally wrote a program similar to what ShellShock suggested but it was a pain searching through 256 files looking for a string manually and they took up a mass of disk space.
Regards,
David
|