Feel The Beast Gaming
Would you like to react to this message? Create an account in a few clicks or log in to continue.
Feel The Beast Gaming

More Tutorials More Hacking
 
HomeHome  PortalPortal  Latest imagesLatest images  RegisterRegister  Log inLog in  
Log in
Username:
Password:
Log in automatically: 
:: I forgot my password
Statistics
We have 934 registered users
The newest registered user is chickas4513

Our users have posted a total of 344 messages in 84 subjects
Ads

    No ads available.



     

     Hex Editing: First Steps

    Go down 
    3 posters
    AuthorMessage
    Jhun»
    VIPMEMBER
    VIPMEMBER
    Jhun»


    Posts : 65
    AP : 40558
    Join date : 28/02/2013

    Hex Editing: First Steps Empty
    PostSubject: Hex Editing: First Steps   Hex Editing: First Steps Icon_minitimeThu Jun 05, 2014 12:09 pm

    Hex-a-What?
    The hexadecimal notation is almost universally used in computing - and not without a reason. There are sixteen hex digits - 0 to 9, and A to F (which correspond to decimal values 10 to 15), and each hex digit represents exactly four bits. Exactly two hex digits represent a byte, which can have a value from 00 to FF (that is from 0 to 255 decimal). In order to find a hex value of a multi-byte object, you would concatenate its bytes, for example, bytes 58 A4 1B FE constitute a four-byte value 58A41BFE (or FE1BA458 if the computer uses the reverse [You must be registered and logged in to see this link.]).
    But why hexadecimal? Can't we just use good old decimal numbers? Well, they would be fine for a decimal computer, but most contemporary computers are binary and work on bits and bytes. A decimal digit represents approximately 3.3 bits, and this makes arithmetic too complicated. Let's assume we have two bytes with decimal values 243 and 78. What will be the value of the two-byte word? 24378? No, this method works with hexadecimal digits only. To find the decimal value of the word we must compute 243*256+78, which equals to 62286. Does not look very obvious, does it? Imagine finding a value of an eight-byte long variable and you will see why the decimal notation is not the best choice for binary computers.
    Do I really need to know this?
    Yes, you should have some understanding of hexadecimal notation; in fact, there is not much else to know. Hex byte is the only kind of object a computer handles, and hex bytes are used to represent anything. For example, a hex byte 50 may represent the capital letter P, the processor command "push eax", the decimal number 80, a color component with 31% brightness, or a zillion of other things.
    The obvious question is "How can I tell what does the byte represent?" Well, sometimes you can tell that easily, sometimes - not that easily, and in many cases you can't tell that at all. It is usually easy to recognize a character string, but in other cases you will have to guess. Fortunately, it is not as bad as it sounds, and you will quickly pick up a few tricks.
    But for now it is enough to understand that 1) any computer data is just an array of hex bytes, and 2) a hex editor is a program that shows the true contents of a file, and lets you edit the data you normally can't.
    Main Edit Window
    It is time to try out our new knowledge and see what hex data looks like. Install [You must be registered and logged in to see this link.] if you haven't done it yet. Right-click any binary file in the Windows Explorer window and select "Edit with FlexHEX". You will see the binary contents in the FlexHEX main edit window:
       Hex Editing: First Steps Edit_window
    You can see four distinct panes marked with different colors. The leftmost one is the Address pane; each number in the pane shows the address of the first byte of the corresponding line. The only exception is the line on which the input caret is - it shows the address of the current byte, not the first one. The addresses are shown as hexadecimal numbers but if you point the mouse cursor to an address, the decimal value will appear in the Quick View popup window.
       Hex Editing: First Steps Address_tip
    The next is the Hex pane, which displays the file contents as an array of hex bytes. The light green ANSI pane shows the file contents as characters, and the rightmost UNICODE pane shows two-byte UNICODE characters.
    Note that all three data panes show different representations of the same data. If you change data in any data pane, the other two will change accordingly. You can switch between the panes by pressing the Tab or Shift-Tab key, or just by pointing the mouse cursor and pressing the left mouse button.
    Inspecting Data
    Hex numbers may be good for computers, but how can one convert a hex number to a more human-friendly decimal value? Easy! First, select the number either with your mouse, or by using the arrows key while holding down the Shift key. Second, move the mouse cursor to the selected area, and FlexHEX will display all the valid representations in the Quick View popup window.
       Hex Editing: First Steps Inspect
    Sometimes there is no valid representation at all. For example, if you select five bytes, there will be no Quick View window because FlexHEX knows no object five bytes long. However any 1, 2, 4, 8, or 16 byte long field has at least one valid representation. In general, when the mouse cursor changes to the arrow-with-question-mark shape, this means that FlexHEX has something to show you and the Quick View window is ready to appear.
    Editing Data
    Now that we know the basics let's go straight to hex editing. Start FlexHEX and you will see the main editing window with an automatically created new empty file. It has zero length but can be extended - the light gray boxes mark the positions where you can enter new data. Enter the hex bytes "4D 61 72 79 20" starting from the position 0, where the input caret initially was:
       Hex Editing: First Steps Editing
    Now press the Tab key to switch to the green ANSI pane and type in "had a little lamb". It is easy to see that every byte in the Hex pane corresponds to some character in the ANSI pane. When you enter a hex value, the corresponding character appears in the ANSI pane and vice versa.
    Don't be afraid to make a mistake - FlexHEX has unlimited Undo/Redo list. If you did something wrong, just press Ctrl-Z to undo the action.
    Editing Existing File
    A simple but rather typical task is to go to some address and replace some bytes. As an example we will change the byte string "EB 1F 5F FB" to "01 00 00 00" at the address 52E1C.
    The first step is to find the data to be modified. Select the Navigation / Go To command or just press Ctrl-G and enter the address:
           Hex Editing: First Steps Goto
    Don't forget to pay attention to the Dec/Hex selector. FlexHEX is smart enough to recognize a hexadecimal number if it contains hex digits A to F, but if the number consists of decimal digits only, make sure you have selected the correct number radix.
    Now press the Go To button and you are there:
       Hex Editing: First Steps Pos_found
    We have found the data, but before typing in the new values check the Insertion Mode indicator in the[You must be registered and logged in to see this link.]. If it displays OVERWRITE, the newly entered data will replace the data at the current position marked by the blinking input caret.
    The INSERT mode works differently. The existing data starting from the current position are shifted below, making place for the data you are entering. Note that this will change the position of all data objects below the insertion point. Many files get corrupted if their data have been shifted, so be careful and pay attention to the shift indicator in the [You must be registered and logged in to see this link.].
    If the current mode is INSERT, press the Insert key to switch to the OVERWRITE mode.
    Now type in the new hex data:
       Hex Editing: First Steps Data_changed
    You may have noticed that a new Modified tab has appeared in the Navigation panel. Click the tab to open the pane:
           Hex Editing: First Steps Modified_tab
    This pane lists all modified areas in the file. Click the area starting or ending address to jump there; to select the whole area, click the size field.
    Changing Typed Values
    Sometimes you need to make modification to a typed object, not just to a sequence of hex bytes. With FlexHEX, it is no more complicated than simple hex editing. Select the object (usually 1, 2, 4, 8, or 16 bytes long), right-click and select the Edit Selected As command from the menu:
           Hex Editing: First Steps Edit_as
    Select the appropriate representation and enter the new value.
    Happy Hex Editing!
    Back to top Go down
    jamescarl
    AP Trader LVL 1
    AP Trader LVL 1
    jamescarl


    Posts : 61
    AP : 36165
    Join date : 10/05/2014

    Hex Editing: First Steps Empty
    PostSubject: Re: Hex Editing: First Steps   Hex Editing: First Steps Icon_minitimeThu Jun 05, 2014 6:10 pm

    Jhun» wrote:
    Hex-a-What?
    The hexadecimal notation is almost universally used in computing - and not without a reason. There are sixteen hex digits - 0 to 9, and A to F (which correspond to decimal values 10 to 15), and each hex digit represents exactly four bits. Exactly two hex digits represent a byte, which can have a value from 00 to FF (that is from 0 to 255 decimal). In order to find a hex value of a multi-byte object, you would concatenate its bytes, for example, bytes 58 A4 1B FE constitute a four-byte value 58A41BFE (or FE1BA458 if the computer uses the reverse [You must be registered and logged in to see this link.]).
    But why hexadecimal? Can't we just use good old decimal numbers? Well, they would be fine for a decimal computer, but most contemporary computers are binary and work on bits and bytes. A decimal digit represents approximately 3.3 bits, and this makes arithmetic too complicated. Let's assume we have two bytes with decimal values 243 and 78. What will be the value of the two-byte word? 24378? No, this method works with hexadecimal digits only. To find the decimal value of the word we must compute 243*256+78, which equals to 62286. Does not look very obvious, does it? Imagine finding a value of an eight-byte long variable and you will see why the decimal notation is not the best choice for binary computers.
    Do I really need to know this?
    Yes, you should have some understanding of hexadecimal notation; in fact, there is not much else to know. Hex byte is the only kind of object a computer handles, and hex bytes are used to represent anything. For example, a hex byte 50 may represent the capital letter P, the processor command "push eax", the decimal number 80, a color component with 31% brightness, or a zillion of other things.
    The obvious question is "How can I tell what does the byte represent?" Well, sometimes you can tell that easily, sometimes - not that easily, and in many cases you can't tell that at all. It is usually easy to recognize a character string, but in other cases you will have to guess. Fortunately, it is not as bad as it sounds, and you will quickly pick up a few tricks.
    But for now it is enough to understand that 1) any computer data is just an array of hex bytes, and 2) a hex editor is a program that shows the true contents of a file, and lets you edit the data you normally can't.
    Main Edit Window
    It is time to try out our new knowledge and see what hex data looks like. Install [You must be registered and logged in to see this link.] if you haven't done it yet. Right-click any binary file in the Windows Explorer window and select "Edit with FlexHEX". You will see the binary contents in the FlexHEX main edit window:
       Hex Editing: First Steps Edit_window
    You can see four distinct panes marked with different colors. The leftmost one is the Address pane; each number in the pane shows the address of the first byte of the corresponding line. The only exception is the line on which the input caret is - it shows the address of the current byte, not the first one. The addresses are shown as hexadecimal numbers but if you point the mouse cursor to an address, the decimal value will appear in the Quick View popup window.
       Hex Editing: First Steps Address_tip
    The next is the Hex pane, which displays the file contents as an array of hex bytes. The light green ANSI pane shows the file contents as characters, and the rightmost UNICODE pane shows two-byte UNICODE characters.
    Note that all three data panes show different representations of the same data. If you change data in any data pane, the other two will change accordingly. You can switch between the panes by pressing the Tab or Shift-Tab key, or just by pointing the mouse cursor and pressing the left mouse button.
    Inspecting Data
    Hex numbers may be good for computers, but how can one convert a hex number to a more human-friendly decimal value? Easy! First, select the number either with your mouse, or by using the arrows key while holding down the Shift key. Second, move the mouse cursor to the selected area, and FlexHEX will display all the valid representations in the Quick View popup window.
       Hex Editing: First Steps Inspect
    Sometimes there is no valid representation at all. For example, if you select five bytes, there will be no Quick View window because FlexHEX knows no object five bytes long. However any 1, 2, 4, 8, or 16 byte long field has at least one valid representation. In general, when the mouse cursor changes to the arrow-with-question-mark shape, this means that FlexHEX has something to show you and the Quick View window is ready to appear.
    Editing Data
    Now that we know the basics let's go straight to hex editing. Start FlexHEX and you will see the main editing window with an automatically created new empty file. It has zero length but can be extended - the light gray boxes mark the positions where you can enter new data. Enter the hex bytes "4D 61 72 79 20" starting from the position 0, where the input caret initially was:
       Hex Editing: First Steps Editing
    Now press the Tab key to switch to the green ANSI pane and type in "had a little lamb". It is easy to see that every byte in the Hex pane corresponds to some character in the ANSI pane. When you enter a hex value, the corresponding character appears in the ANSI pane and vice versa.
    Don't be afraid to make a mistake - FlexHEX has unlimited Undo/Redo list. If you did something wrong, just press Ctrl-Z to undo the action.
    Editing Existing File
    A simple but rather typical task is to go to some address and replace some bytes. As an example we will change the byte string "EB 1F 5F FB" to "01 00 00 00" at the address 52E1C.
    The first step is to find the data to be modified. Select the Navigation / Go To command or just press Ctrl-G and enter the address:
           Hex Editing: First Steps Goto
    Don't forget to pay attention to the Dec/Hex selector. FlexHEX is smart enough to recognize a hexadecimal number if it contains hex digits A to F, but if the number consists of decimal digits only, make sure you have selected the correct number radix.
    Now press the Go To button and you are there:
       Hex Editing: First Steps Pos_found
    We have found the data, but before typing in the new values check the Insertion Mode indicator in the[You must be registered and logged in to see this link.]. If it displays OVERWRITE, the newly entered data will replace the data at the current position marked by the blinking input caret.
    The INSERT mode works differently. The existing data starting from the current position are shifted below, making place for the data you are entering. Note that this will change the position of all data objects below the insertion point. Many files get corrupted if their data have been shifted, so be careful and pay attention to the shift indicator in the [You must be registered and logged in to see this link.].
    If the current mode is INSERT, press the Insert key to switch to the OVERWRITE mode.
    Now type in the new hex data:
       Hex Editing: First Steps Data_changed
    You may have noticed that a new Modified tab has appeared in the Navigation panel. Click the tab to open the pane:
           Hex Editing: First Steps Modified_tab
    This pane lists all modified areas in the file. Click the area starting or ending address to jump there; to select the whole area, click the size field.
    Changing Typed Values
    Sometimes you need to make modification to a typed object, not just to a sequence of hex bytes. With FlexHEX, it is no more complicated than simple hex editing. Select the object (usually 1, 2, 4, 8, or 16 bytes long), right-click and select the Edit Selected As command from the menu:
           Hex Editing: First Steps Edit_as
    Select the appropriate representation and enter the new value.
    Happy Hex Editing!

    what is this for?..
    Back to top Go down
    Jhun»
    VIPMEMBER
    VIPMEMBER
    Jhun»


    Posts : 65
    AP : 40558
    Join date : 28/02/2013

    Hex Editing: First Steps Empty
    PostSubject: Re: Hex Editing: First Steps   Hex Editing: First Steps Icon_minitimeFri Jun 06, 2014 5:28 am

    jamescarl wrote:
    Jhun» wrote:
    Hex-a-What?
    The hexadecimal notation is almost universally used in computing - and not without a reason. There are sixteen hex digits - 0 to 9, and A to F (which correspond to decimal values 10 to 15), and each hex digit represents exactly four bits. Exactly two hex digits represent a byte, which can have a value from 00 to FF (that is from 0 to 255 decimal). In order to find a hex value of a multi-byte object, you would concatenate its bytes, for example, bytes 58 A4 1B FE constitute a four-byte value 58A41BFE (or FE1BA458 if the computer uses the reverse [You must be registered and logged in to see this link.]).
    But why hexadecimal? Can't we just use good old decimal numbers? Well, they would be fine for a decimal computer, but most contemporary computers are binary and work on bits and bytes. A decimal digit represents approximately 3.3 bits, and this makes arithmetic too complicated. Let's assume we have two bytes with decimal values 243 and 78. What will be the value of the two-byte word? 24378? No, this method works with hexadecimal digits only. To find the decimal value of the word we must compute 243*256+78, which equals to 62286. Does not look very obvious, does it? Imagine finding a value of an eight-byte long variable and you will see why the decimal notation is not the best choice for binary computers.
    Do I really need to know this?
    Yes, you should have some understanding of hexadecimal notation; in fact, there is not much else to know. Hex byte is the only kind of object a computer handles, and hex bytes are used to represent anything. For example, a hex byte 50 may represent the capital letter P, the processor command "push eax", the decimal number 80, a color component with 31% brightness, or a zillion of other things.
    The obvious question is "How can I tell what does the byte represent?" Well, sometimes you can tell that easily, sometimes - not that easily, and in many cases you can't tell that at all. It is usually easy to recognize a character string, but in other cases you will have to guess. Fortunately, it is not as bad as it sounds, and you will quickly pick up a few tricks.
    But for now it is enough to understand that 1) any computer data is just an array of hex bytes, and 2) a hex editor is a program that shows the true contents of a file, and lets you edit the data you normally can't.
    Main Edit Window
    It is time to try out our new knowledge and see what hex data looks like. Install [You must be registered and logged in to see this link.] if you haven't done it yet. Right-click any binary file in the Windows Explorer window and select "Edit with FlexHEX". You will see the binary contents in the FlexHEX main edit window:
       Hex Editing: First Steps Edit_window
    You can see four distinct panes marked with different colors. The leftmost one is the Address pane; each number in the pane shows the address of the first byte of the corresponding line. The only exception is the line on which the input caret is - it shows the address of the current byte, not the first one. The addresses are shown as hexadecimal numbers but if you point the mouse cursor to an address, the decimal value will appear in the Quick View popup window.
       Hex Editing: First Steps Address_tip
    The next is the Hex pane, which displays the file contents as an array of hex bytes. The light green ANSI pane shows the file contents as characters, and the rightmost UNICODE pane shows two-byte UNICODE characters.
    Note that all three data panes show different representations of the same data. If you change data in any data pane, the other two will change accordingly. You can switch between the panes by pressing the Tab or Shift-Tab key, or just by pointing the mouse cursor and pressing the left mouse button.
    Inspecting Data
    Hex numbers may be good for computers, but how can one convert a hex number to a more human-friendly decimal value? Easy! First, select the number either with your mouse, or by using the arrows key while holding down the Shift key. Second, move the mouse cursor to the selected area, and FlexHEX will display all the valid representations in the Quick View popup window.
       Hex Editing: First Steps Inspect
    Sometimes there is no valid representation at all. For example, if you select five bytes, there will be no Quick View window because FlexHEX knows no object five bytes long. However any 1, 2, 4, 8, or 16 byte long field has at least one valid representation. In general, when the mouse cursor changes to the arrow-with-question-mark shape, this means that FlexHEX has something to show you and the Quick View window is ready to appear.
    Editing Data
    Now that we know the basics let's go straight to hex editing. Start FlexHEX and you will see the main editing window with an automatically created new empty file. It has zero length but can be extended - the light gray boxes mark the positions where you can enter new data. Enter the hex bytes "4D 61 72 79 20" starting from the position 0, where the input caret initially was:
       Hex Editing: First Steps Editing
    Now press the Tab key to switch to the green ANSI pane and type in "had a little lamb". It is easy to see that every byte in the Hex pane corresponds to some character in the ANSI pane. When you enter a hex value, the corresponding character appears in the ANSI pane and vice versa.
    Don't be afraid to make a mistake - FlexHEX has unlimited Undo/Redo list. If you did something wrong, just press Ctrl-Z to undo the action.
    Editing Existing File
    A simple but rather typical task is to go to some address and replace some bytes. As an example we will change the byte string "EB 1F 5F FB" to "01 00 00 00" at the address 52E1C.
    The first step is to find the data to be modified. Select the Navigation / Go To command or just press Ctrl-G and enter the address:
           Hex Editing: First Steps Goto
    Don't forget to pay attention to the Dec/Hex selector. FlexHEX is smart enough to recognize a hexadecimal number if it contains hex digits A to F, but if the number consists of decimal digits only, make sure you have selected the correct number radix.
    Now press the Go To button and you are there:
       Hex Editing: First Steps Pos_found
    We have found the data, but before typing in the new values check the Insertion Mode indicator in the[You must be registered and logged in to see this link.]. If it displays OVERWRITE, the newly entered data will replace the data at the current position marked by the blinking input caret.
    The INSERT mode works differently. The existing data starting from the current position are shifted below, making place for the data you are entering. Note that this will change the position of all data objects below the insertion point. Many files get corrupted if their data have been shifted, so be careful and pay attention to the shift indicator in the [You must be registered and logged in to see this link.].
    If the current mode is INSERT, press the Insert key to switch to the OVERWRITE mode.
    Now type in the new hex data:
       Hex Editing: First Steps Data_changed
    You may have noticed that a new Modified tab has appeared in the Navigation panel. Click the tab to open the pane:
           Hex Editing: First Steps Modified_tab
    This pane lists all modified areas in the file. Click the area starting or ending address to jump there; to select the whole area, click the size field.
    Changing Typed Values
    Sometimes you need to make modification to a typed object, not just to a sequence of hex bytes. With FlexHEX, it is no more complicated than simple hex editing. Select the object (usually 1, 2, 4, 8, or 16 bytes long), right-click and select the Edit Selected As command from the menu:
           Hex Editing: First Steps Edit_as
    Select the appropriate representation and enter the new value.
    Happy Hex Editing!

    what is this for?..
    DLL Editing!
    or .exe Editing
    Back to top Go down
    jamescarl
    AP Trader LVL 1
    AP Trader LVL 1
    jamescarl


    Posts : 61
    AP : 36165
    Join date : 10/05/2014

    Hex Editing: First Steps Empty
    PostSubject: Re: Hex Editing: First Steps   Hex Editing: First Steps Icon_minitimeSun Jun 08, 2014 9:08 am

    saan ka natuto mag coding?
    Back to top Go down
    ThaBot
    Pro
    Pro
    ThaBot


    Posts : 63
    AP : 2147525877
    Join date : 04/09/2012

    Hex Editing: First Steps Empty
    PostSubject: Re: Hex Editing: First Steps   Hex Editing: First Steps Icon_minitimeMon Jun 09, 2014 4:38 am

    jamescarl wrote:
    saan ka natuto mag coding?
    Youtube:

    Search it

    start with C++ lol!
    Back to top Go down
    jamescarl
    AP Trader LVL 1
    AP Trader LVL 1
    jamescarl


    Posts : 61
    AP : 36165
    Join date : 10/05/2014

    Hex Editing: First Steps Empty
    PostSubject: Re: Hex Editing: First Steps   Hex Editing: First Steps Icon_minitimeMon Jun 09, 2014 2:54 pm

    ahh ok thanks..
    gonna search now.. Smile)
    Back to top Go down
    ThaBot
    Pro
    Pro
    ThaBot


    Posts : 63
    AP : 2147525877
    Join date : 04/09/2012

    Hex Editing: First Steps Empty
    PostSubject: Re: Hex Editing: First Steps   Hex Editing: First Steps Icon_minitimeTue Jun 10, 2014 12:25 pm

    #Closed!
     lol! 
    Back to top Go down
    Sponsored content





    Hex Editing: First Steps Empty
    PostSubject: Re: Hex Editing: First Steps   Hex Editing: First Steps Icon_minitime

    Back to top Go down
     
    Hex Editing: First Steps
    Back to top 
    Page 1 of 1

    Permissions in this forum:You cannot reply to topics in this forum
    Feel The Beast Gaming :: Main :: Other Editing Tools-
    Jump to: