rafind2
—
Advanced commandline hexadecimal editor
rafind2 |
[-ijzZXnrhqv ] [-b
size] [-f
from] [-F
file] [-t
to] [-[m|s|e]
str] [-x
hex] file|dir |
rafind2 is a program to find byte patterns into files
The options are:
-z
- Search for zero-terminated strings
-j
- Output in JSON format
-a
align
- Only accept aligned hits
-s
str
- Search for a specific string
-S
str
- Search for a specific wide string
-e
regex
- Search for a regular expression string matches
-x
hex
- Search for an hexpair string
-i
- Identify filetype (like file, uses r2 -qcpm)
-m
- Carve for known file-types using the r_magic signatures
-M
mask
- Set binary mask to be applied
-f
from
- Specify the source adddress
-F
file
- Read the keyword to search from the contents of the given file
-t
to
- Specify the target adddress
-X
- Display hexdump of search results
-Z
- Display zero-terminated strings results
-n
- Do not stop the search when a read error occurs
-r
- Show output in radare commands
-b
size
- Define block size
-q
- Quiet mode - do not show headings (filenames) above matching contents
(default for searching a single file)
-h
- Show help message
-v
- Print version and exit
pancake <pancake@nopcode.org>