Ilja van Sprundel d672934033 Add pcap support to hex patterns (#16)
* Add initial pcap support 

Assumes little endian and fixed to 1000 packets, but it's a start.

* update readme for pcap entry

added initial pcap support
2021-06-02 16:08:25 +02:00
2020-12-03 21:17:55 +01:00

ImHex-Patterns

Hex patterns, include patterns and magic files for the use with the ImHex Hex Editor

Table of Contents

Hex Patterns

Name MIME Path Description
BMP image/bmp patterns/bmp.hexpat OS2/Windows Bitmap files
ELF application/x-executable, application/x-sharedlib patterns/elf.hexpat ELF header in elf binaries
PE application/x-dosexec patterns/pe.hexpat PE header, COFF header, Standard COFF fields and Windows Specific fields
MIDI audio/midi patterns/midi.hexpat MIDI header, event fields provided
WAV audio/wav patterns/wav.hexpat RIFF header, WAVE header, PCM header
ZIP application/zip patterns/zip.hexpat End of Central Directory Header, Central Directory File Headers
PCAP application/vnd.tcpdump.pcap patterns/pcap.hexpat pcap header and packets

Include Patterns

Name Path Description
cstdint includes/cstdint.hexpat C standard style fixed width integer types

Magic files

Name Path Description
Nintendo Switch magic/nintendo_switch_magic Identifies common file types used on the Nintendo Switch
Portable Executable magic/portable_executable_magic Identifies PE files used on Windows

Contributing

If you want to contribute a file to the database, please make a PR which adds it to the right folder and adds a new entry to the table in this readme. Thanks a lot :)

Languages
Rust 97.1%
Python 0.5%
C++ 0.5%
YARA 0.5%
Arc 0.4%
Other 1%