Sunday, February 15, 2015

ExtensionBySignature

Here is a little app that will help rename files with the wrong or missing extension by getting its signature. You must know the signature before hand and the extension you wish to append to the file.

Download: http://www.mediafire.com/download/txac5cdc5a9tofh/ExtensionBySignature.exe

Instructions:
The program relies on a file called "sig.txt" to know what extensions and signatures to name and look for.
The format of the list is {extension}={signature}.
example for a .zip file: "zip=504B0304" without quotes.

Usage:
 ExtensionBySignature.exe [Input Directory(s)]
   or
 ExtensionBySignature.exe /n [Input Directory(s)]

Logging:
 Every session is saved in a log upon completion.

Arguments:
 /n , /N = NonDestructive mode (files will not be renamed but the log file will stay the same)

Note: Multiple input directories can be used, just make sure to space them from one each other and use quotes where appropriate. If a file already has an extension and the program is going to rename it, the new extension is appended to the end (keeping the old extension in the file name) for future reference in case knowledge of what the previous extension used is needed.

Source:

Wednesday, February 11, 2015

SysCommParser

Well here is something to kinda parse the syscon communication (not everything is parsed). It sorts out the packets and is able to output read and write operations to a file.
Apparently these dumps may contain the QA token and so be very careful with those files.

[UPDATE JAN 04 2015]
Zecoxao found some problems which I had to fix.
Link updated to v1.0.0.3.

[UPDATE JAN 04 2015]
Added parsing of commas (apparently the new logs use commas instead of ';').
Also added parsing of unlock instruction although not tested.
Download link updated with v1.0.0.1.

Download: http://www.mediafire.com/download/cc09aoxrglcbbpf/SysComParser.exe

PS: Brought about by zecoxao's request for the parser.