Menu

#41 Advanced Find

Next_Release
closed
nobody
Find (1)
2
2017-02-24
2014-07-15
Zordsec
No

Hi there,

Are you planning to add regexp search option for TEXT and HEXA in wxHexEditor?
As this tool is part of Parted Magic we're intending to use as auditing disk wiping process.

I can open a physical/virtual disk image in wxHexEditor which is really good but I would like to search for non "00" byte values in the image and create summary list on the findings.

In version 0.22 there is no way to search for a negated value in the Find field such as "!00" or similar.

At the moment wxHexEditor can use the "Find Some Bytes" feature to search for non-zero byte values but it stops at the first finding.

Please consider to add this capability at the next release.

The editor is really good and I wish good luck and lot of interest in the coming versions.

Regards

Zordsec

Discussion

  • Steven

    Steven - 2014-07-18

    (just as an aside) for confirming disk wiping, you can just do:

    hexdump /dev/sdX

    by default it hides/combines identical lines, so it'll only show you anything not-zeroed.

     

    Last edit: Steven 2014-07-18
  • Death Knight®

    Death Knight® - 2014-07-19

    Hi there,
    For confirming disk wiping, "find some bytes" will work already If disk is empty. If it's not, will find some byte means, disk is not empty...

    "Find Some Bytes" working good for find some data islands at file, which is developed for. What is the problem with stopping at the first one? You can move cursor some page down there and you can re-use "find some byte" and find second data island.

    Also, that option it doesn't work for just 00. Works also 0xFF (I make it for search on NAND devices). That option will find first different hex than actual cursor and, you don't need to close find dialog for use it. Just put cursor after the data island and "press find some bytes" again.

    Regexp searching is more advanced than current version but not interested in implementing that, yet. If you implement I could merge it :)

    Might be file histogram better idea to implement. But I don't add feature to wxHexEditor. I will give a release with current state. Just debugging right now and make it compatible with Win and Osx.
    Thanks.

     
  • Death Knight®

    Death Knight® - 2017-02-24
    • status: open --> closed
     
  • Death Knight®

    Death Knight® - 2017-02-24

    Hi, will (hopefully) implement FindAll for Find Some Bytes.
    With it you can analyze big chunks of file and create tags for them.
    You can continue to follow this issue from:
    https://github.com/EUA/wxHexEditor/issues/49
    Regards

     

    Last edit: Death Knight® 2017-02-24

Log in to post a comment.