Miles Wolbe was looking for some strings in a Dell BIOS update; it took him some time to figure out they are ROT-1 encoded.
I updated my XORSearch tool to support ROT encoding.
Miles Wolbe was looking for some strings in a Dell BIOS update; it took him some time to figure out they are ROT-1 encoded.
I updated my XORSearch tool to support ROT encoding.
RSS feed for comments on this post. TrackBack URI
This site uses Akismet to reduce spam. Learn how your comment data is processed.
Excellent tool! I will definitely use this. I doubly appreciate the lack of windows system calls. It built without any modifications on gcc. Thanks.
I did a little looking at your exe with a tool of my own. It’s mostly a neat toy, but I thought you might be interested. http://randommusingsofarealgeek.blogspot.com/2009/04/why-are-windows-executables-so-big.html
Comment by Bryan Harris — Tuesday 21 April 2009 @ 13:39
That’s one of my requirements for this tool: being able to compile it with a standard C compiler on different OSes.
The EXE is compiled with Borland, and the C library (like printf) is linked in. And then there is also a digital signature (Authenticode) adding to the size.
Comment by Didier Stevens — Tuesday 21 April 2009 @ 14:11