ch0ic3/awesome-malware-analysis
1
0
Fork 0
mirror of https://github.com/rshipp/awesome-malware-analysis.git synced 2024-12-18 18:26:09 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add more XOR tools

Browse Source
This commit is contained in:
rshipp 2015-05-14 19:53:06 -06:00
parent 592fdd5e5b
commit 99e5cc56ac
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
README.md
View File

@ -243,10 +243,16 @@ the [browser malware](#browser-malware) section.*
*Reverse XOR and other code obfuscation methods.* *Reverse XOR and other code obfuscation methods.*
* [ex_pe_xor](http://hooked-on-mnemonics.blogspot.com/2014/04/expexorpy.html)
& [iheartxor](http://hooked-on-mnemonics.blogspot.com/p/iheartxor.html) -
Two tools from Alexander Hanel for working with single-byte XOR encoded
files.
* [NoMoreXOR](https://github.com/hiddenillusion/NoMoreXOR) - Guess a 256 byte * [NoMoreXOR](https://github.com/hiddenillusion/NoMoreXOR) - Guess a 256 byte
XOR key using frequency analysis. XOR key using frequency analysis.
* [unxor](https://github.com/tomchop/unxor/) - Guess XOR keys using * [unxor](https://github.com/tomchop/unxor/) - Guess XOR keys using
known-plaintext attacks. known-plaintext attacks.
* [XORSearch & XORStrings](http://blog.didierstevens.com/programs/xorsearch/) -
A couple programs from Didier Stevens for finding XORed data.
* [xortool](https://github.com/hellman/xortool) - Guess XOR key length, as * [xortool](https://github.com/hellman/xortool) - Guess XOR key length, as
well as the key itself. well as the key itself.