Meta Configuration of Package bstrings

Overview Repositories Revisions Requests Users Attributes Meta

Meta Configuration of Package bstrings

<package name="bstrings" project="home:gregfreemyer:Tools-for-forensic-boot-cd">
  <title>A better strings utility!</title>
  <description>FOR NOW THIS IS A WINDOWS .NET APP ONLY

Provides functionality close to strings, but has additional integrated functions including search capability.

Looking for an exported symbol in collection of libraries. bstring can help.

https://github.com/EricZimmerman/bstrings

a               If set, look for ASCII strings. Default is true. Use -a false to disable
        b               Chunk size in MB. Valid range is 1 to 1024. Default is 512
        d               Directory to recursively process. Either this or -f is required
        f               File to search. Either this or -d is required
        m               Minimum string length. Default is 3
        o               File to save results to
        p               Display list of built in regular expressions
        q               Quiet mode (Do not show header or total number of hits)
        u               If set, look for Unicode strings. Default is true. Use -u false to disable
        x               Maximum string length. Default is unlimited
        ls              String to look for. When set, only matching strings are returned.
        ar              Range of characters to search for in 'Codepage' strings. Default is [\x20 -\x7E]
        ur              Range of characters to search for in Unicode strings. Default is [\u0020-\u007E]
        cp              Codepage to use. Default is 1252.
        mask            When using -d, file mask to search for. * and ? are supported.
        lr              Regex to look for. When set, only matching strings are returned.
        sa              Sort results alphabetically
        sl              Sort results by length

Examples: 
          bstrings.exe -f "C:\Temp\UsrClass 1.dat" --ls URL
          bstrings.exe -f "C:\Temp\someFile.txt" --lr guid
          bstrings.exe -d "C:\Temp" --mask "*.dll"
          bstrings.exe -d "C:\Temp" --ar "[\x20-\x37]"
          bstrings.exe -d "C:\Temp" --cp 10007
          bstrings.exe -d "C:\Temp" --ls test
          bstrings.exe -f "C:\Temp\someOtherFile.txt" --lr cc -sa
          bstrings.exe -f "C:\Temp\someOtherFile.txt" --lr cc -sa -m 15 -x 22
          bstrings.exe -f "C:\Temp\UsrClass 1.dat" --ls mui -sl</description>
  <build>
    <disable/>
  </build>
</package>

Places

Meta Configuration of Package bstrings

Places