A couple of new features:
- searching for Unicode
- searching for Hex code
- printing of neighbouring bytes
Unicode support is rather simple: I consider Unicode as ASCII with 2 bytes per character, last byte always equals 0.
Usage case of hexcode search: search for embedded and encoded PE-file by searching for the PE-magic bytes MZ:
XORSearch -h malware.exe 50450000
Remember that XORSearch is not limited to win32, you can compile it on *nix too: cc -o XORSearch XORSearch.c
Download here.
Didier Stevens 