FLOSS should extract static strings from binary data via stdin
See original GitHub issueshould be able to pipe data to FLOSS and have it extract some strings.
not sure if it should serialize a PE to a temp file and extract obfuscated strings? or just do static strings (if enabled?).
if like this:
cat ntdll.dll | floss.exe
should read from stdin
if like this:
cat ntdll.dll | floss.exe -a -
should interpret -
as “please use stdin”.
Issue Analytics
- State:
- Created 7 years ago
- Comments:6
Top Results From Across the Web
C read binary stdin - Stack Overflow
In the normal mode, reading from stdin on Windows will convert \r\n (Windows newline) to the single character ASCII 10. Using the "rb"...
Read more >flare-floss/usage.md at master - GitHub
You can use FLOSS just like you'd use strings.exe to extract human-readable strings from binary data. The enhancement that FLOSS provides is that...
Read more >Display printable strings in binary files - IBM
The command displays strings of printable characters that are at least four characters in length. Strings must be terminated by a NUL character...
Read more >How to Read Text and Binary Files in Java (ULTIMATE GUIDE)
I'm actually going to cover 15 different ways to read a file in Java. I'm going to cover reading files in multiple ways...
Read more >How to use bash script to read binary file content?
If you want to stick with shell utilities, you can use head to extract a number of bytes, and od to convert a...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
ok, sounds good. lets warn the user via stderr that only static strings will be extracted.
Although it would be a cool feature, we should not worry about it for now given the complex code changes.