reverse engineer binary encoded data
Is there a general approach? It doesn't appear to be encrypted, and I know the file must contain numeric tabular data of some kind:
$ od -tc filename.hobo | head
0000000 H O B O 210 r 004 001 d 210 035 004
0000020 001 c 210 " 035 001 001 035 q - $ 070
0000040 8 E 001 d 377 377 235 220 001 v f
0000060 030 002 210 5 032 001 003 003 001 a a
0000100 005 004 210
0000120 c 001 210 033 002 a ҈ ** 034 002 001 210 001 002
0000140 017 033 210 002 002 001 035 210 003 002 001 n 210 004 032 O
0000160 n s e t C o m p u t e r C o
0000200 r p o r a t i o n 210 005 024 H O B O
0000220 U 2 3 - 0 0 1 T e m p / R H
binaryfiles
add a comment |
Is there a general approach? It doesn't appear to be encrypted, and I know the file must contain numeric tabular data of some kind:
$ od -tc filename.hobo | head
0000000 H O B O 210 r 004 001 d 210 035 004
0000020 001 c 210 " 035 001 001 035 q - $ 070
0000040 8 E 001 d 377 377 235 220 001 v f
0000060 030 002 210 5 032 001 003 003 001 a a
0000100 005 004 210
0000120 c 001 210 033 002 a ҈ ** 034 002 001 210 001 002
0000140 017 033 210 002 002 001 035 210 003 002 001 n 210 004 032 O
0000160 n s e t C o m p u t e r C o
0000200 r p o r a t i o n 210 005 024 H O B O
0000220 U 2 3 - 0 0 1 T e m p / R H
binaryfiles
If you don't know what actual data is stored there - it would be impossible. If you know - possible with some degree of confidence. If you can alter it - then even with higher confidence.
– zerkms
Nov 14 '18 at 20:08
@zerkms I do know at least some of the data (have a CSV export of a table) in the file. Can you point me from "possible with some degree of confidence" to step 1?
– Ian
Nov 14 '18 at 20:55
Yes - if you know original data - simply try to find it in that dump? I'd usexxd
though to visualise it
– zerkms
Nov 14 '18 at 21:11
add a comment |
Is there a general approach? It doesn't appear to be encrypted, and I know the file must contain numeric tabular data of some kind:
$ od -tc filename.hobo | head
0000000 H O B O 210 r 004 001 d 210 035 004
0000020 001 c 210 " 035 001 001 035 q - $ 070
0000040 8 E 001 d 377 377 235 220 001 v f
0000060 030 002 210 5 032 001 003 003 001 a a
0000100 005 004 210
0000120 c 001 210 033 002 a ҈ ** 034 002 001 210 001 002
0000140 017 033 210 002 002 001 035 210 003 002 001 n 210 004 032 O
0000160 n s e t C o m p u t e r C o
0000200 r p o r a t i o n 210 005 024 H O B O
0000220 U 2 3 - 0 0 1 T e m p / R H
binaryfiles
Is there a general approach? It doesn't appear to be encrypted, and I know the file must contain numeric tabular data of some kind:
$ od -tc filename.hobo | head
0000000 H O B O 210 r 004 001 d 210 035 004
0000020 001 c 210 " 035 001 001 035 q - $ 070
0000040 8 E 001 d 377 377 235 220 001 v f
0000060 030 002 210 5 032 001 003 003 001 a a
0000100 005 004 210
0000120 c 001 210 033 002 a ҈ ** 034 002 001 210 001 002
0000140 017 033 210 002 002 001 035 210 003 002 001 n 210 004 032 O
0000160 n s e t C o m p u t e r C o
0000200 r p o r a t i o n 210 005 024 H O B O
0000220 U 2 3 - 0 0 1 T e m p / R H
binaryfiles
binaryfiles
asked Nov 14 '18 at 19:56
IanIan
436312
436312
If you don't know what actual data is stored there - it would be impossible. If you know - possible with some degree of confidence. If you can alter it - then even with higher confidence.
– zerkms
Nov 14 '18 at 20:08
@zerkms I do know at least some of the data (have a CSV export of a table) in the file. Can you point me from "possible with some degree of confidence" to step 1?
– Ian
Nov 14 '18 at 20:55
Yes - if you know original data - simply try to find it in that dump? I'd usexxd
though to visualise it
– zerkms
Nov 14 '18 at 21:11
add a comment |
If you don't know what actual data is stored there - it would be impossible. If you know - possible with some degree of confidence. If you can alter it - then even with higher confidence.
– zerkms
Nov 14 '18 at 20:08
@zerkms I do know at least some of the data (have a CSV export of a table) in the file. Can you point me from "possible with some degree of confidence" to step 1?
– Ian
Nov 14 '18 at 20:55
Yes - if you know original data - simply try to find it in that dump? I'd usexxd
though to visualise it
– zerkms
Nov 14 '18 at 21:11
If you don't know what actual data is stored there - it would be impossible. If you know - possible with some degree of confidence. If you can alter it - then even with higher confidence.
– zerkms
Nov 14 '18 at 20:08
If you don't know what actual data is stored there - it would be impossible. If you know - possible with some degree of confidence. If you can alter it - then even with higher confidence.
– zerkms
Nov 14 '18 at 20:08
@zerkms I do know at least some of the data (have a CSV export of a table) in the file. Can you point me from "possible with some degree of confidence" to step 1?
– Ian
Nov 14 '18 at 20:55
@zerkms I do know at least some of the data (have a CSV export of a table) in the file. Can you point me from "possible with some degree of confidence" to step 1?
– Ian
Nov 14 '18 at 20:55
Yes - if you know original data - simply try to find it in that dump? I'd use
xxd
though to visualise it– zerkms
Nov 14 '18 at 21:11
Yes - if you know original data - simply try to find it in that dump? I'd use
xxd
though to visualise it– zerkms
Nov 14 '18 at 21:11
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53307878%2freverse-engineer-binary-encoded-data%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53307878%2freverse-engineer-binary-encoded-data%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
If you don't know what actual data is stored there - it would be impossible. If you know - possible with some degree of confidence. If you can alter it - then even with higher confidence.
– zerkms
Nov 14 '18 at 20:08
@zerkms I do know at least some of the data (have a CSV export of a table) in the file. Can you point me from "possible with some degree of confidence" to step 1?
– Ian
Nov 14 '18 at 20:55
Yes - if you know original data - simply try to find it in that dump? I'd use
xxd
though to visualise it– zerkms
Nov 14 '18 at 21:11