2 个仓库
Defining layouts of binary data using named fields and offsets to reconstruct C-style structures.
Distinct from Struct Mapping: Candidates focus on GraphQL or database-to-script mapping; this is about raw binary layout reconstruction.
Explore 2 awesome GitHub repositories matching data & databases · Binary Struct Mapping. Refine with filters or upvote what's useful.
fq 是一个命令行二进制数据处理器,用于将原始字节流和位级数据解码、转换和分析为结构化格式。它作为一个函数式二进制查询引擎,允许对二进制结构进行过滤和映射,同时也是一个转换器,将复杂的二进制 Blob 和专有文件格式转换为标准的 JSON、YAML 或 XML。 该工具作为低级位操作器,能够对原始文件执行位级切片、位运算和加密哈希。它还作为一个网络协议分析器,能够重组碎片化的 TCP 流并解密 TLS 流量以进行应用级检查。 该项目涵盖了二进制解析和数据转换方面的广泛功能,包括对自定义解码器定义的支持,以及对 Mach-O、ASN1 BER 和 Avro OCF 等多种专业格式的支持。它提供了用于二进制树搜索、结构化文本解码以及二进制与文本格式之间双向序列化的工具。 用户可以通过命令行界面和用于实时查询测试的交互式 REPL 与系统进行交互。
Translates raw binary scalars into human-readable symbols or strings during the decoding process.
Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and visibility tool. It provides a query engine and remote forensic collector used to hunt for indicators of compromise and perform triage across a fleet of hosts. The system is distinguished by its specialized query language for interrogating host state and parsing binary files. It features a notebook environment that combines markdown documentation with executable query cells to standardize investigative workflows and enable collaborative reporting. The platform covers a wide range o
Defines the layout of binary data using named fields and offsets to reconstruct C-style structs.