NoMoreXOR.py (T) alternatives
6 tools in the catalogue cover the same ground as NoMoreXOR.py (T) and can replace it depending on the need. Each one is reachable, re-checked daily, and listed with its pricing.
- Balbuzard (T)freePython malware analysis toolkit that extracts indicators and brute-forces common obfuscation patterns including XOR and rotation transforms.
- iheartxor.py (T)freePython script for brute-forcing XOR-obfuscated strings within defined boundaries to reveal hidden text in malware samples.
- XORBruteForcer.py (T)freeSingle-byte XOR brute-force Python script that iterates candidate key values and surfaces matching decoded output.
- CyberCheffreeGCHQ-maintained browser workbench for chained encoding, decoding, hashing, crypto, and data transformation operations.
- Functions OnlinefreePHP-oriented online utility suite for common encoding, decoding, hashing, and string-manipulation function tests.
- ClearImage Barcode ReaderfreeWeb-based barcode and QR code recognition tool using Inlite Research ClearImage technology for common image and document formats.
NoMoreXOR.py (T)
Encoding / Decoding
Also written NoMoreXOR.py, No More XOR.py, NoMoreXOR py
Python utility for recovering long XOR keys using character frequency heuristics and YARA-assisted pattern matching.
RECOMMENDED USE
Recovering long XOR keys in malware binaries
Information
Video tutorials
Learn to use NoMoreXOR.py (T)
Suggested workflow
Chain these tools in order for a complete investigation
Similar tools
These tools can also help you
unxor (T)
Encoding / DecodingKnown-plaintext XOR analysis utility for deriving keystreams and recovering original content from encoded samples.
xortool (T)
Encoding / DecodingPython-based XOR analysis tool that estimates key lengths and recovers likely multi-byte keys via frequency analysis.
Balbuzard (T)
Encoding / DecodingPython malware analysis toolkit that extracts indicators and brute-forces common obfuscation patterns including XOR and rotation transforms.
iheartxor.py (T)
Encoding / DecodingPython script for brute-forcing XOR-obfuscated strings within defined boundaries to reveal hidden text in malware samples.
User reviews
Be the first to leave a review