You could use Bingrep for binary audit purposes as well.
How to use it
You just have to provide the path where to look for the expression, and the text file containing the expression to be find:The text file with the expression to be find must look like:
61 6E 64 6F
Using one space to separate each hexa expression.
Here an output sample:
As you can see, bingrep returns the offset where the expression was found.
Download
Linux:Bingrep: bingrep-0.2.07.tar.gz (Normally this is what you want)
Bingrep library: libbingrep-0.2.05.tar.gz
Instructions: Build libbingrep and copy the resulting dynamic library to the lib directory in the bingrep folder. Add this lib folder to the LD_LIBRARY_PATH environment variable.
No comments:
Post a Comment