This new version of format-bytes.py display extra information when unpacking strings: string length, first 10 bytes of the string (ASCII and HEX), entropy and MD5 hash.
In this example, a small binary file starts with an integer with the string length (25 bytes), followed by the string (like a Pascal string):
format-bytes_V0_0_4.zip (https)
MD5: EBCF854E9525D470171D7D8E99F836FD
SHA256: CEE2E5B71E1BE8E5D5C934ACCD10BC0FEE2B60DFB6FDB6472F1014CEC4E509EC
[…] Update: format-bytes.py Version 0.0.4 […]
Pingback by Week 3 – 2018 – This Week In 4n6 — Sunday 21 January 2018 @ 3:10
[…] Update: format-bytes.py Version 0.0.4 […]
Pingback by Overview of Content Published In January | Didier Stevens — Thursday 1 February 2018 @ 0:00
[…] document, followed by the encrypted document. If we decode the binary data for the integer with format-bytes.py, we get the size […]
Pingback by Encrypted OOXML Documents | Didier Stevens — Thursday 7 June 2018 @ 0:00