tool for searching signatures inside files, extremely useful as help in reversing jobs like figuring or having an initial idea of what encryption/compression algorithm is used for a proprietary protocol or file.
it can recognize tons of compression, multimedia and encryption algorithms and many other things like known strings and anti-debugging code which can be also manually added since it's all based on a text signature file read at runtime and easy to modify.
supports also the scanning of processes, the conversion of the offsets of the executables in memory offsets, the loading of custom signature files and their automatic checking for avoiding errors, the automatic finding of the instructions that reference the found signatures (like "Find references" of Ollydbg) and the launching of an executable placing an INT3 byte at the desired memory offset (for example one of those retrieved with the -F option, watch the -->Video <-- setion for an example).
the tool supports 8, 16, 32 and 64 bits, float and double plus automatic CRC table creation and C style strings.
feel free to send me your comments and other signatures if you like this tool.

Утилита с исходниками:
--> Signsrch <--
Видео:
-->Video <--

-----
Чтобы правильно задать вопрос, нужно знать большую часть ответа. Р.Шекли.

| Сообщение посчитали полезным: ressa

Коряво написана, разве что на посмотреть.
Add:
ressa
Зачем мне это допиливать, когда есть yara которая по фичам делает этот сканер и написана чище?

| Сообщение посчитали полезным:

F_a_u_s_t
Ну так велкам ту сорс, буду рад видеть Signsrch mod by F_a_u_s_t

| Сообщение посчитали полезным: