| Port details |
- xorsearch Search for a given string in an XOR or ROL encoded binary file
- 1.11.1 security
 =3      1.11.1Version of this port present on the latest quarterly branch. - Maintainer: anastasios@mageirias.com
- Port Added: 2007-12-17 20:34:20
- Last Update: 2022-09-07 21:58:51
- Commit Hash: fb16dfe
- People watching this port, also watch:: statsvn, p5-Parallel-Iterator, monit, nagios-check_hdd_health, ap24-mod_mono
- Also Listed In: textproc
- License: PD
- WWW:
- https://blog.didierstevens.com/programs/xorsearch/
- Description:
- XORSearch is a program to search for a given string in an XOR or
ROL encoded binary file. An XOR encoded binary file is a file where
some (or all) bytes have been XORed with a constant value (the key).
A ROL (or ROR) encoded file has it bytes rotated by a certain number
of bits (the key). XOR and ROL/ROR encoding is used by malware
programmers to obfuscate strings like URLs.
XORSearch will try all XOR keys (0 to 255) and ROL keys (1 to 7)
when searching. I programmed XORSearch to include key 0, because
this allows to search in an unencoded binary file (X XOR 0 equals
X).
If the search string is found, XORSearch will print it until the 0
(byte zero) is encountered or until 50 characters have been printed,
which ever comes first. 50 is the default value, it can be changed
with option -l. Unprintable characters are replaced by a dot.
  ¦  ¦  ¦  ¦ 
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- xorsearch>0:security/xorsearch
- To install the port:
- cd /usr/ports/security/xorsearch/ && make install clean
- To add the package, run one of these commands:
- pkg install security/xorsearch
- pkg install xorsearch
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: xorsearch
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1482003350
SHA256 (XORSearch_V1_11_1.zip) = 15e9aae87e7f25cf7966cdf0f8dfcb2648099585d08ead522737e72c5faca50a
SIZE (XORSearch_V1_11_1.zip) = 84878
Packages (timestamps in pop-ups are UTC):
- This port has no dependencies.
- There are no ports dependent upon this port
Configuration Options:- No options to configure
- Options name:
- security_xorsearch
- USES:
- dos2unix zip
- FreshPorts was unable to extract/find any pkg message
- Master Sites:
|
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
|---|
07 Sep 2022 21:58:51
 |
Stefan Eßer (se) |
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner) |
1.11.1
07 Sep 2022 21:10:59
|
Stefan Eßer (se) |
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above  ) |
1.11.1
20 Jul 2022 14:22:56
|
Tobias C. Berner (tcberner) |
security: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net>
* Aaron Dalton <aaron@FreeBSD.org>
* Adam Weinberger <adamw@FreeBSD.org>
* Ade Lovett <ade@FreeBSD.org>
* Aldis Berjoza <aldis@bsdroot.lv>
* Alex Dupre <ale@FreeBSD.org>
* Alex Kapranoff <kappa@rambler-co.ru>
* Alex Samorukov <samm@freebsd.org>
* Alexander Botero-Lowry <alex@foxybanana.com>
* Alexander Kriventsov <avk@vl.ru>
* Alexander Leidinger <netchild@FreeBSD.org> (Only the first 15 lines of the commit message are shown above ) |
1.11.1
06 Apr 2021 14:31:07
|
Mathieu Arnold (mat) |
Remove # $FreeBSD$ from Makefiles. |
1.11.1
27 Sep 2019 09:38:27
 |
amdmi3 |
- Update WWW
Approved by: portmgr blanket |
1.11.1
24 Dec 2016 16:38:49
|
amdmi3 |
- Update to 1.11.1
- Pass maintainership to submitter
PR: 215102
Submitted by: anastasios@mageirias.com |
1.2.0_1
23 Nov 2016 15:04:41
|
amdmi3 |
- Add LICENSE
- Respect CFLAGS/LDFLAGS
- Regenerate patches |
1.2.0
16 Nov 2016 22:55:39
|
rene |
Reset edwin's ports, he has handed in his commit bit.
With hat: portmgr-secretary |
1.2.0
20 Jun 2016 16:23:29
|
mat |
With the power of USES=dos2unix, get rid of most patches and files
with CRLF.
While there, run make makepatch, rename patches to use the new scheme,
and various fixes.
With hat: portmgr
Sponsored by: Absolight |
1.2.0
02 Mar 2015 23:47:18
|
bapt |
Remove Author from pkg-descr and white space fixes |
1.2.0
10 Mar 2014 17:01:37
|
bapt |
Convert s* to USES=zip |
1.2.0
27 Feb 2014 09:14:38
|
ehaupt |
Support staging |
1.2.0
20 Sep 2013 22:55:26
|
bapt |
Add NO_STAGE all over the place in preparation for the staging support (cat:
security) |
1.2.0
24 Oct 2011 09:11:38
|
dougb |
The vast majority of pkg-descr files had the following format when they
had both lines:
Author: ...
WWW: ....
So standardize on that, and move them to the end of the file when necessary.
Also fix some more whitespace, and remove more "signature tags" of varying
forms, like -- name, etc.
s/AUTHOR/Author/
A few other various formatting issues |
1.2.0
03 Jul 2011 14:03:52
|
ohauer |
-remove MD5 |
1.2.0
17 Dec 2007 20:33:59
|
edwin |
XORSearch
XORSearch is a program to search for a given string in an XOR or
ROL encoded binary file. An XOR encoded binary file is a file where
some (or all) bytes have been XORed with a constant value (the key).
A ROL (or ROR) encoded file has it bytes rotated by a certain number
of bits (the key). XOR and ROL/ROR encoding is used by malware
programmers to obfuscate strings like URLs.
XORSearch will try all XOR keys (0 to 255) and ROL keys (1 to 7)
when searching. I programmed XORSearch to include key 0, because
this allows to search in an unencoded binary file (X XOR 0 equals
X).
If the search string is found, XORSearch will print it until the 0
(byte zero) is encountered or until 50 characters have been printed,
which ever comes first. 50 is the default value, it can be changed
with option -l. Unprintable characters are replaced by a dot.
WWW: http://blog.didierstevens.com/programs/xorsearch/
Author: Didier Stevens |
As an Amazon Associate I earn from qualifying purchases.