Srch_Strings

Description

Srch_Strings  is Display printable strings in [file(s)] (stdin by default) .It provide additional information on string matches and automatically carve out matching files or blocks.

Usage

Syntax

srch_strings [option(s)] [file(s)]

Options

  -a                   Scan the entire file, not just the data section
  -f       Print the name of the file before each string
  -n number       Locate & print any NUL-terminated sequence of at
  -<number>                 least [number] characters (default 4).
  -t {o,x,d}        Print the location of the string in base 8, 10 or 16
  -o                        An alias for --radix=o
  -e {s,S,b,l,B,L} Select character size and endianness:
                            s = 7-bit, S = 8-bit, {b,l} = 16-bit, {B,L} = 32-bit
  -h                  Display this information
  -v               Print the program's version number

Example

cyborg@cyborg:~$ srch_strings -a image.dd 
NTFS    
NTFSu
TCPAu$
fSfSfU
fY[ZfYfY
A disk read error occurred
BOOTMGR is missing
BOOTMGR is compressed
Press Ctrl+Alt+Del to restart
g:H	
g:J@
f`gf
fPgf
fSfPfQfVfW
f_f^fYf
$Microsoft Root Certificate Authority0
050915215541Z
160315220541Z0
Washington1
Redmond1
Microsoft Corporation1+0)
"Microsoft Windows Verification PCA0
FtirS
	 "8z
~3+b3
qDFd>
)gCw
[email protected]'
a0_1
com1
0 Comments

Leave a reply

CONTACT US

We're are building as a community and a team. Be a part of it.

Sending

©2017 Ztrela Knowledge Solutions Pvt. Ltd

Log in with your credentials

Forgot your details?