Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
$HEX - Plains inside founds
#1
Just to mention:

In the junk list there seem to be "plains" like $HEX[313233].
After dehexing them i found, that there are even iterated versions
e.g. $HEX[244845585b...]
Reply
#2
The $HEX[] notation is used in the found files if there are non-printable ASCII or invalid encoded plaintexts which would mess up the found file if they would be put in there raw.

The double hexified founds (we called that hexception) are nearly all coming for the Have I Been Pnwed lists where the parsing and handling was made poorly when the hashlists were created. There are also more details available on this blog post: https://blog.cynosureprime.com/2017/08/3...posed.html
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)