Skip to main content
Unix & Linux

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

7
  • 1
    \x converts fa from 2 hex digits into a single binary char. My script runs on the original binary you had before converting it with xxd, not the file you put on dropbox. Commented Jun 27, 2015 at 11:08
  • 1
    @masi I added an alternative solution that uses your hexdump format file and grep with ascii characters. Note that the dd is still applied to the raw file. Commented Jun 27, 2015 at 12:22
  • 1
    yes, it finds offsets 24292 48444. Perhaps your grep will work if you create the characters in the shell: pat=$(echo -e '\xfa\xfa\xfa\xfa') and grep -b -a -o "$pat"... Commented Jun 27, 2015 at 15:49
  • 1
    #3 is working. concatenate the resulting files together and compare that with the original the binary file I got from dropbox is truncated compared to the binary I can get from the hexdump version. I think we should stop there. Commented Jun 27, 2015 at 16:29
  • 1
    file f1 is an intermediary file that is not part of the output. I didnt want to rename it at this late stage Commented Jun 27, 2015 at 20:14