XORSearch-1.6.0-alt1.qa1.i586.rpm


Advertisement

Description

XORSearch - Search for a given string in an XOR, ROL or ROT encoded binary file

Property Value
Distribution ALT Linux Sisyphus
Repository Classic i586
Package name XORSearch
Package version 1.6.0
Package release alt1.qa1
Package architecture i586
Package type rpm
Installed size 13.46 KB
Download size 13.46 KB
Official Mirror ftp.altlinux.org
XORSearch is a program to search for a given string in an XOR, ROL or ROT  encoded binary file. An XOR encoded binary file is a file where some (or all) bytes have been XORed with a constant value (the key). A ROL (or ROR) encoded file has its bytes rotated by a certain number of bits (the key). A ROT encoded file has its alphabetic characters (A-Z and a-z) rotated by a certain number of positions. XOR and ROL/ROR encoding is used by malware programmers to obfuscate strings like URLs.
XORSearch will try all XOR keys (0 to 255),  ROL keys (1 to 7) and ROT keys (1 to 25) when searching. I programmed XORSearch to include key 0, because this allows to search in an unencoded binary file (X XOR 0 equals X).
If the search string is found, XORSearch will print it until the 0 (byte zero) is encountered or until 50 characters have been printed, which ever comes first. 50 is the default value, it can be changed with option -l. Unprintable characters are replaced by a dot.

Alternatives

Package Version Architecture Repository
XORSearch-1.6.0-alt1.qa1.x86_64.rpm 1.6.0 x86_64 Classic
XORSearch - - -

Requires

Name Value
/lib/ld-linux.so.2 -
libc.so.6(GLIBC_2.0) -
libc.so.6(GLIBC_2.1) -
libc.so.6(GLIBC_2.3) -
libc.so.6(GLIBC_2.4) -
rpmlib(PayloadIsLzma) -
rtld(GNU_HASH) -

Provides

Name Value
XORSearch = 1.6.0-alt1.qa1

Download

Type URL
Binary Package XORSearch-1.6.0-alt1.qa1.i586.rpm
Source Package XORSearch-1.6.0-alt1.qa1.src.rpm

Install Howto

  1. Add the following line to /etc/apt/sources.list:
    
    rpm [Sisyphus] http://ftp.altlinux.org/pub/distributions/ALTLinux/Sisyphus i586 classic
    rpm [Sisyphus] http://ftp.altlinux.org/pub/distributions/ALTLinux/Sisyphus noarch classic
    
  2. Update the package index:
    # sudo apt-get update
  3. Install XORSearch rpm package:
    # sudo apt-get install XORSearch

Files

Path
/usr/bin/XORSearch

Changelog

2013-04-15 - Dmitry V. Levin (QA) <qa_ldv@altlinux.org> 1.6.0-alt1.qa1
- NMU: rebuilt for debuginfo.
2010-07-13 - Fr. Br. George <george@altlinux.ru> 1.6.0-alt1
- Initial build for ALT

See Also

Package Description
Xdialog-2.3.1-alt1.i586.rpm Xdialog in replacement for the cdialog program
a2ps-4.14-alt2.i586.rpm Any to PostScript filter
a52dec-0.7.4-alt9.i586.rpm Library for decoding ATSC A/52 streams
aMule-2.3.2-alt3.1.i586.rpm aMule - eMule client
aalib-1.4-alt8rc5.i586.rpm AA (Ascii Art) library
aalib-devel-1.4-alt8rc5.i586.rpm Header files for developing apps which will use aalib
aalib-utils-1.4-alt8rc5.i586.rpm AA-lib tools
abby-0.4.8-alt3.i586.rpm Front-end for cclive and clive
abcm2ps-7.8.14-alt1.i586.rpm a program to typeset abc tunes into Postscript
abe-1.1-alt5_33.i586.rpm Scrolling, platform-jumping, ancient pyramid exploring game
abigail-tools-1.2-alt1.i586.rpm ABI Generic Analysis and Instrumentation Library tools
abinit-8.10.2-alt1.i586.rpm Computational Chemistry DFT program
abiword-3.0.2-alt4.i586.rpm Lean and fast full-featured word processor
abiword-devel-3.0.2-alt4.i586.rpm Headers for Abiword plugins
abiword-gir-3.0.2-alt4.i586.rpm GObject introspection data for the abiword
Advertisement
Advertisement