https://github.com/threez/finbin
find stuff in binary content
https://github.com/threez/finbin
Last synced: 11 months ago
JSON representation
find stuff in binary content
- Host: GitHub
- URL: https://github.com/threez/finbin
- Owner: threez
- Created: 2021-06-25T16:29:47.000Z (about 5 years ago)
- Default Branch: master
- Last Pushed: 2021-06-28T05:24:26.000Z (about 5 years ago)
- Last Synced: 2025-04-01T13:16:19.015Z (over 1 year ago)
- Language: Go
- Size: 843 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: Readme.md
Awesome Lists containing this project
README
# FINBIN
find stuff in binary content or find keychain files.
## Install
```sh
go get github.com/threez/finbin/cmd/finbin
go get github.com/threez/finbin/cmd/finkc
```
## Usage finkc
Finds mac os keychain files.
All data will be stored with finding location into the provided
dir. The name of the file is `file-.keychain` offset is the byte
offset of the match.
```sh
$ finkc -file /dev/sda
Found file-1231231223.keychain (55018 to 55038 size 20.00B)
```
## Usage finbin
The pattern will be used to search for the content. Size is
the size of data to extract before **and** after the location.
All data will be stored with finding location into the provided
dir. The name of the file is `file-` offset is the byte
offset of the match.
```sh
$ finbin -file /dev/sda -pattern "kych\x00|SQLite format 3\x00|ACKeychainItemVersion" -size 10B -dir found
Found file-1231231223 (55018 to 55038 size 20.00B)
```