[HN Gopher] Hiew Hex Editor
       ___________________________________________________________________
        
       Hiew Hex Editor
        
       Author : taviso
       Score  : 132 points
       Date   : 2024-01-02 06:17 UTC (16 hours ago)
        
 (HTM) web link (lock.cmpxchg8b.com)
 (TXT) w3m dump (lock.cmpxchg8b.com)
        
       | speps wrote:
       | I now use ImHex after looking for years for a good one. It has a
       | pattern language to provide highlighting.
       | 
       | https://imhex.werwolv.net/
        
         | EspadaV9 wrote:
         | I just found out about ImHex yesterday when I was trying to
         | work out a save game format for an hold retro game. For my very
         | basic needs it was great, and the diffing took came in very
         | handy. Would be keen to see if I could make a pattern for the
         | save game format somehow. Will be something I have to look
         | into.
        
         | butz wrote:
         | ImHex has so many features. Very useful for ROM hacking, as it
         | can display custom text table mappings. I haven't even looked
         | into patterns and other features yet.
        
       | xvilka wrote:
       | Everything Hiew can do, Rizin[1] can do too, and is completely
       | free and open source[2] under LGPL3 license. Moreover, it
       | supports more architectures, platforms, and file formats, as well
       | as GUI in Qt - Cutter[3][4]. If something is missing in Rizin but
       | presented in Hiew, please let us know by opening the issue with
       | details.
       | 
       | [1] https://rizin.re
       | 
       | [2] https://github.com/rizinorg/rizin
       | 
       | [3] https://cutter.re
       | 
       | [4] https://github.com/rizinorg/cutter
        
         | smartis2812 wrote:
         | This is my found of the day!
         | 
         | Thank you!
        
         | stavros wrote:
         | Does Rizin have a straight-up console hex editor? It looks
         | great for reversing executables, but sometimes I just want to
         | edit some binary data.
        
           | xvilka wrote:
           | Yes, for example, `p` commands for printing and `w` commands
           | for writing, visual hex editor (`VP`), and bit-level editor
           | modes. There is room for improvement, but I already used it
           | to reverse unknown firmware formats, so it's usable in that
           | regard.
           | 
           | You can even explore various histograms with `p=?` and `p==?`
           | commands (they will print help for these).
        
             | stavros wrote:
             | That sounds very promising, thanks!
        
         | 29athrowaway wrote:
         | Other stuff you might be interested in
         | 
         | - Ghidra SRE (https://ghidra-sre.org/) from NSA
         | 
         | - https://frida.re/
         | 
         | - https://x64dbg.com/ (spiritual successor of OllyDbg for
         | Windows)
         | 
         | - https://github.com/eteran/edb-debugger (spiritual successor
         | of OllyDbg for Linux)
         | 
         | - https://github.com/ReFirmLabs/binwalk
         | 
         | - https://github.com/kentavv/binary_viewer (spiritual successor
         | of Cantor Dust)
         | 
         | - https://dogbolt.org/ (decompiler explorer)
        
           | weinzierl wrote:
           | Not free, but from a small family-owned business - the
           | classical hex editor used for reverse engineering by your
           | favorite three letter agency:
           | 
           | 010 Editor
           | 
           | https://www.sweetscape.com/010editor/
        
             | not_the_fda wrote:
             | I've been looking for something like this.
        
               | edwinbalani wrote:
               | Says not a three letter agency ;)
        
             | reaperman wrote:
             | Thank you for mentioning this. I've had the most success
             | with 010 Editor for find-and-replace across very large
             | binaries and text files (100MB - 4GB). It seems much more
             | performant than other text editors, much more than even
             | favorite ones close to my heart like Sublime.
        
           | 0xeb wrote:
           | thanks for the links! especially the spiritual successor of
           | Cantor Dust ;p
        
         | jdefr89 wrote:
         | I must say I am impressed with how far Cutter had come. I will
         | need to try it out again. I am partial to BinaryNinja because
         | it is written by folks I was colleagues with.
        
         | endeavour wrote:
         | Very excited to give this a try!
        
       | madars wrote:
       | Hiew is peak ergonomics, kinda like good orthodox file managers
       | (FAR Manager/Total Commander). Hiew's color scheme is, obviously,
       | Norton Commander's as well :-) One of the few Windows
       | applications that make me keep a Windows VM.
        
       | ruslan wrote:
       | I had been using Hiew in early 90th on MS-DOS and OS/2.
       | Unfortunately it's still MS-DOS/Windows only thing.
        
       | 29athrowaway wrote:
       | There's a clone of Hiew called HT
       | 
       | https://hte.sourceforge.net/
       | 
       | It's packaged for many Linux distros, and is on Homebrew
       | brew install ht
       | 
       | To disassemble, you press F6 and pick any of the detected formats
       | for that file.
        
       | 0xeb wrote:
       | If you like scripting, you can use my HEM extension to write more
       | stuff in Python:
       | 
       | - https://github.com/0xeb/pyhiew/tree/main/bin/pyhiew -
       | https://github.com/0xeb/pyhiew/tree/main/bin/pyhiew -
       | https://0xeb.wordpress.com/2010/08/21/introducing-pyhiew/
        
       | shmerl wrote:
       | Is there an easy way to use that DOS style font on Linux in
       | something like Midnight Commander viewer or neovim?
       | 
       | I like that font for binary files, it's more distinct than having
       | a bunch of ? symbols for bytes 0-31.
        
         | Brian_K_White wrote:
         | For displaying 0-31 in programs and scripts of my own, I add 64
         | and display that in inverse video.
         | 
         | The resulting glyph is the letter from the matching CTRL or ^
         | notation for that byte, but in a single character cell, and
         | still distinct from a byte containing that letter.
         | 
         | So for instance, a NUL is value 0, which is CTRL+@ or ^@
         | 
         | But displaying ^@ screws up formatting, and displaying @
         | collides with byte value 64. Inverse video @ solves both, and
         | doesn't need any special font. I do the same for DEL which is
         | 127 displayed as inverse ?, but the ? is meaningful and adheres
         | to the same rule because it's literally ^? not a placeholder
         | for "no glyph" or "non-printing control byte"
         | 
         | Doesn't help you with configuring an editor but just describing
         | a way to display those undisplayable bytes in a way that is
         | actually meaningful & unambiguous and without caring what the
         | font or even terminal type is. (ei: works the same in BASIC on
         | a TRS-80 Model 100 or in bash on a xterm, or in c on windows,
         | etc).
        
           | shmerl wrote:
           | I'd prefer that font, since it's succinct and expressive.
           | Each byte from 0-31 just has a unique symbol.
           | 
           | Here is an example of the font: https://int10h.org/oldschool-
           | pc-fonts/fontlist/font?ibm_vga_...
           | 
           | But simply switching to that font in something like Konsole
           | doesn't seem to be enough.
        
             | Brian_K_White wrote:
             | I know what the font looks like, and I already said this
             | doesn't help with configuring an editor. I wasn't trying to
             | tell you to do anything or not do anything.
        
           | tedunangst wrote:
           | Another approach on many terminals would be to add 96 and use
           | the DEC special charset.
           | https://en.wikipedia.org/wiki/DEC_Special_Graphics
        
             | shmerl wrote:
             | So is there a way to use the IMB style font, or it's
             | impossible?
        
               | tedunangst wrote:
               | It's a font. Lots of programs can use fonts.
               | 
               | If you want to change your terminal so that it prints a
               | character instead of moving the cursor when it sees \r,
               | good luck.
        
       | dang wrote:
       | One small related thread:
       | 
       |  _Hiew (Hacker 's view)_ -
       | https://news.ycombinator.com/item?id=18898214 - Jan 2019 (1
       | comment)
        
       ___________________________________________________________________
       (page generated 2024-01-02 23:01 UTC)