{"id":13597732,"url":"https://github.com/EricZimmerman/bstrings","last_synced_at":"2025-04-10T05:33:15.671Z","repository":{"id":34898375,"uuid":"38929387","full_name":"EricZimmerman/bstrings","owner":"EricZimmerman","description":"A better strings utility!","archived":false,"fork":false,"pushed_at":"2023-07-05T13:16:26.000Z","size":267,"stargazers_count":113,"open_issues_count":0,"forks_count":16,"subscribers_count":11,"default_branch":"master","last_synced_at":"2024-05-01T21:21:34.127Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/EricZimmerman.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2015-07-11T14:57:28.000Z","updated_at":"2024-04-26T16:49:39.000Z","dependencies_parsed_at":"2024-01-13T10:40:01.397Z","dependency_job_id":"fce7a806-b3d3-444b-949d-e97bb109de30","html_url":"https://github.com/EricZimmerman/bstrings","commit_stats":null,"previous_names":[],"tags_count":15,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/EricZimmerman%2Fbstrings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/EricZimmerman%2Fbstrings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/EricZimmerman%2Fbstrings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/EricZimmerman%2Fbstrings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/EricZimmerman","download_url":"https://codeload.github.com/EricZimmerman/bstrings/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248163360,"owners_count":21057918,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-01T17:00:39.933Z","updated_at":"2025-04-10T05:33:15.658Z","avatar_url":"https://github.com/EricZimmerman.png","language":"C#","readme":"# bstrings\n\nA better strings utility!\n\n## Command Line Interface\n\n    bstrings version 1.5.1.0\n    \n    Author: Eric Zimmerman (saericzimmerman@gmail.com)\n    https://github.com/EricZimmerman/bstrings\n    \n            a               If set, look for ASCII strings. Default is true. Use -a false to disable\n            b               Chunk size in MB. Valid range is 1 to 1024. Default is 512\n            d               Directory to recursively process. Either this or -f is required\n            f               File to search. Either this or -d is required\n            m               Minimum string length. Default is 3\n            o               File to save results to\n            p               Display list of built in regular expressions\n            q               Quiet mode (Do not show header or total number of hits)\n            s               Really Quiet mode (Do not display hits to console. Speeds up processing when using -o)\n            u               If set, look for Unicode strings. Default is true. Use -u false to disable\n            x               Maximum string length. Default is unlimited\n    \n            ls              String to look for. When set, only matching strings are returned\n            lr              Regex to look for. When set, only strings matching the regex are returned\n            fs              File containing strings to look for. When set, only matching strings are returned\n            fr              File containing regex patterns to look for. When set, only strings matching regex patterns are returned\n    \n            ar              Range of characters to search for in 'Code page' strings. Specify as a range of characters in hex format and enclose in quotes. Default is [\\x20 -\\x7E]\n            ur              Range of characters to search for in Unicode strings. Specify as a range of characters in hex format and enclose in quotes. Default is [\\u0020-\\u007E]\n    \n            cp              Code page to use. Default is 1252. Use the Identifier value for code pages at https://goo.gl/ig6DxW\n            mask            When using -d, file mask to search for. * and ? are supported. This option has no effect when using -f\n            ms              When using -d, maximum file size to process. This option has no effect when using -f\n            ro              When true, list the string matched by regex pattern vs string the pattern was found in (This may result in duplicate strings in output. ~ denotes approx. offset)\n            off             Show offset to hit after string, followed by the encoding (A=1252, U=Unicode)\n\n            sa              Sort results alphabetically\n            sl              Sort results by length\n\n    Examples: bstrings.exe -f \"C:\\Temp\\UsrClass 1.dat\" --ls URL\n              bstrings.exe -f \"C:\\Temp\\someFile.txt\" --lr guid\n              bstrings.exe -f \"C:\\Temp\\aBigFile.bin\" --fs c:\\temp\\searchStrings.txt --fr c:\\temp\\searchRegex.txt -s\n              bstrings.exe -d \"C:\\Temp\" --mask \"*.dll\"\n              bstrings.exe -d \"C:\\Temp\" --ar \"[\\x20-\\x37]\"\n              bstrings.exe -d \"C:\\Temp\" --cp 10007\n              bstrings.exe -d \"C:\\Temp\" --ls test\n              bstrings.exe -f \"C:\\Temp\\someOtherFile.txt\" --lr cc --sa\n              bstrings.exe -f \"C:\\Temp\\someOtherFile.txt\" --lr cc --sa -m 15 -x 22\n              bstrings.exe -f \"C:\\Temp\\UsrClass 1.dat\" --ls mui --sl\n\n## Built In Regular Expressions\n\nRun `bstrings.exe -p` to see the following list of built in Regular Expressions:\n\n              Name            Description\n              aeon            Finds Aeon wallet addresses\n              b64             Finds valid formatted base 64 strings\n              bitcoin         Finds BitCoin wallet addresses\n              bitlocker       Finds Bitlocker recovery keys\n              bytecoin        Finds ByteCoin wallet addresses\n              cc              Finds credit card numbers\n              dashcoin        Finds DashCoin wallet addresses (D*)\n              dashcoin2       Finds DashCoin wallet addresses (7|X)*\n              email           Finds embedded email addresses\n              fantomcoin      Finds Fantomcoin wallet addresses\n              guid            Finds GUIDs\n              ipv4            Finds IP version 4 addresses\n              ipv6            Finds IP version 6 addresses\n              mac             Finds MAC addresses\n              monero          Finds Monero wallet addresses\n              reg_path        Finds paths related to Registry hives\n              sid             Finds Microsoft Security Identifiers (SID)\n              ssn             Finds US Social Security Numbers\n              sumokoin        Finds SumoKoin wallet addresses\n              unc             Finds UNC paths\n              url3986         Finds URLs according to RFC 3986\n              urlUser         Finds usernames in URLs\n              usPhone         Finds US phone numbers\n              var_set         Finds environment variables being set (OS=Windows_NT)\n              win_path        Finds Windows style paths (C:\\folder1\\folder2\\file.txt)\n              xml             Finds XML/HTML tags\n              zip             Finds zip codes\n              \n              To use a built in pattern, supply the Name to the --lr switch \n\n## Documentation\n\n[Introducing bstrings, a Better Strings utility!](https://binaryforay.blogspot.com/2015/07/introducing-bstrings-better-strings.html)\n\n[bstrings 0.9.0.0 released](https://binaryforay.blogspot.com/2015/07/bstrings-0900-released.html)\n\n[bstrings 0.9.5.0 released](https://binaryforay.blogspot.com/2015/07/bstrings-0950-released.html)\n\n[A few updates](https://binaryforay.blogspot.com/2015/08/a-few-updates.html)\n\n[bstrings 0.9.7.0 released](https://binaryforay.blogspot.com/2015/11/bstrings-0970-released.html)\n\n[bstrings 0.9.8.0 released](https://binaryforay.blogspot.com/2015/12/bstrings-0980-released.html)\n\n[bstrings 0.9.9.0 released!](https://binaryforay.blogspot.com/2016/02/bstrings-0990-released.html)\n\n[bstrings 1.0 released!](https://binaryforay.blogspot.com/2016/02/bstrings-10-released.html)\n\n[bstrings v1.1 released!](https://binaryforay.blogspot.com/2016/04/bstrings-v11-released.html)\n\n[Everything gets an update, Sept 2018 edition](https://binaryforay.blogspot.com/2018/09/everything-gets-update-sept-2018-edition.html?q=bstrings)\n\n# Download Eric Zimmerman's Tools\n\nAll of Eric Zimmerman's tools can be downloaded [here](https://ericzimmerman.github.io/#!index.md). \n# Special Thanks\n\nOpen Source Development funding and support provided by the following contributors: [SANS Institute](http://sans.org/) and [SANS DFIR](http://dfir.sans.org/).\n","funding_links":[],"categories":["Tools","Challenges","Tool-Related GitHub Repos"],"sub_categories":["Carving","EZ Tools"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FEricZimmerman%2Fbstrings","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FEricZimmerman%2Fbstrings","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FEricZimmerman%2Fbstrings/lists"}