reScan is a very simple Python script to look for specific patterns (regular expressions) in binary or text files. It has been primarily developed to analyze malicious files, to quickly extract interesting patterns (shellcodes, embedded executables in malformed documents, etc).
Usage:
reScan.py <file>
Configuration:
To add your own patterns to the default list, create a script named reScan_custom.py and add the patterns to a dictionary named FIND_REGEX, with the same structure as in reScan.py.
Of course if you find useful patterns to add to this tool, please send me an e-mail at decalage[à]laposte.net so that I can improve the main version.
Licence:
CeCILL v2, open-source, GPL-compatible.
| Attachment | Size |
|---|---|
| reScan.py.txt | 5.6 KB |