Ever wondered whether it would be possible to find strings that have been xored, without undoing the xor? After seeing Lenny Zeltzer demonstrate the ‘xorsearch’ command, I started to wonder if it was possible to find xored strings by considering how each byte differed from the byte next to it.
Malware Musings
Thoughts on malware and malware analysis
Subscribe to RSS Feeds
My Github activity- An error has occurred; the feed is probably down. Try again later.
Malware Musings 