stringsext - search for multi-byte encoded strings in binary data

Cargo Documentation License

stringsext is a Unicode enhancement of the GNU strings tool with additional functionalities: stringsext recognizes Cyrillic, Arabic, CJKV characters and other scripts in all supported multi-byte-encodings, while GNU strings fails in finding any of these scripts in UTF-16 and many other encodings.

stringsext prints all graphic character sequences in FILE or stdin that are at least MIN bytes long.

Unlike GNU strings stringsext can be configured to search for valid characters not only in ASCII but also in many other input encodings, e.g.: UTF-8, UTF-16BE, UTF-16LE, BIG5-2003, EUC-JP, KOI8-R and many others. The option --list-encodings shows a list of valid encoding names based on the WHATWG Encoding Standard. When more than one encoding is specified, the scan is performed in different threads simultaneously.

When searching for UTF-16 encoded strings, 96% of all possible two byte sequences, interpreted as UTF-16 code unit, relate directly to Unicode codepoints. As a result, the probability of encountering valid Unicode characters in a random byte stream, interpreted as UTF-16, is also 96%. In order to reduce this big number of false positives, stringsext provides a parametrizable Unicode-block-filter. See --encodings and --same-unicode-block options in the manual page for more details.

stringsext is mainly useful for extracting Unicode content out of non-text files.

When invoked with stringsext -e ascii stringsext can be used as GNU strings replacement.

1 Screenshot

stringsext -tx -e utf-8 -e utf-16le -e utf-16be \
           -n 10 -a None -u African  /dev/disk/by-uuid/567a8410

 3de2fff0+  (b UTF-16LE)    ݒݓݔݕݖݗݙݪ
 3de30000+  (b UTF-16LE)    ݫݱݶݷݸݹݺ
<3de36528   (a UTF-8)   فيأنمامعكلأورديافىهولملكاولهبسالإنهيأيقدهلثمبهلوليبلايبكشيام
>3de36528+  (a UTF-8)   أمنتبيلنحبهممشوش
<3de3a708   (a UTF-8)   علىإلىهذاآخرعددالىهذهصورغيركانولابينعرضذلكهنايومقالعليانالكن
>3de3a708+  (a UTF-8)   حتىقبلوحةاخرفقطعبدركنإذاكمااحدإلافيهبعضكيفبح
 3de3a780+  (a UTF-8)   ثومنوهوأناجدالهاسلمعندليسعبرصلىمنذبهاأنهمثلكنتالاحيثمصرشرححو
 3de3a7f8+  (a UTF-8)   لوفياذالكلمرةانتالفأبوخاصأنتانهاليعضووقدابنخيربنتلكمشاءوهياب
 3de3a870+  (a UTF-8)   وقصصومارقمأحدنحنعدمرأياحةكتبدونيجبمنهتحتجهةسنةيتمكرةغزةنفسبي
 3de3a8e8+  (a UTF-8)   تللهلناتلكقلبلماعنهأولشيءنورأمافيكبكلذاترتببأنهمسانكبيعفقدحس
 3de3a960+  (a UTF-8)   نلهمشعرأهلشهرقطرطلب
 3df4cca8   (c UTF-16BE)    փօև։֋֍֏֑֛֚֓֕֗֙֜֝֞׹
<3df4cd20   (c UTF-16BE)    ־ֿ׀ׁׂ׃ׅׄ׆ׇ׈׉׊׋

2 Documentation

User documentation

Developer documentation

3 Source code

Repository

4 Distribution

5 Building and installing

  1. Install Rust, e.g.

    curl https://sh.rustup.rs -sSf | sh

  2. Download, compile and install:

    cargo install stringsext
sudo cp ~/.cargo/bin/stringsext /usr/local/bin

This project follows Semantic Versioning.

6 About

Author

Copyright

Build status