How To Install xorsearch on Fedora 34
Introduction
In this tutorial we learn how to install xorsearch on Fedora 34.
What is xorsearch
XORSearch is a program to search for a given string in an XOR, ROL, ROT or SHIFT encoded binary file. An XOR encoded binary file is a file where some (or all) bytes have been XORed with a constant value (the key). A ROL (or ROR) encoded file has its bytes rotated by a certain number of bits (the key). A ROT encoded file has its alphabetic characters (A-Z and a-z) rotated by a certain number of positions. A SHIFT encoded file has its bytes shifted left by a certain number of bits (the key) of the second byte becomes the LSB of the first byte, all bits of the second byte shift left, … XOR and ROL/ROR encoding is used by malware programmers to obfuscate strings like URLs.
We can use yum or dnf to install xorsearch on Fedora 34. In this tutorial we discuss both methods but you only need to choose one of method to install xorsearch.
Install xorsearch on Fedora 34 Using dnf
Update yum database with dnf using the following command.
sudo dnf makecache --refresh
The output should look something like this:
Fedora 34 - x86_64 20 kB/s | 6.6 kB 00:00
Fedora 34 openh264 (From Cisco) - x86_64 1.4 kB/s | 989 B 00:00
Fedora Modular 34 - x86_64 68 kB/s | 6.5 kB 00:00
Fedora 34 - x86_64 - Updates 3.5 kB/s | 6.2 kB 00:01
Fedora Modular 34 - x86_64 - Updates 17 kB/s | 5.9 kB 00:00
Metadata cache created.
After updating yum database, We can install xorsearch using dnf by running the following command:
sudo dnf -y install xorsearch
Install xorsearch on Fedora 34 Using yum
Update yum database with yum using the following command.
sudo yum makecache --refresh
The output should look something like this:
Fedora 34 - x86_64 20 kB/s | 6.6 kB 00:00
Fedora 34 openh264 (From Cisco) - x86_64 1.4 kB/s | 989 B 00:00
Fedora Modular 34 - x86_64 68 kB/s | 6.5 kB 00:00
Fedora 34 - x86_64 - Updates 3.5 kB/s | 6.2 kB 00:01
Fedora Modular 34 - x86_64 - Updates 17 kB/s | 5.9 kB 00:00
Metadata cache created.
After updating yum database, We can install xorsearch using yum by running the following command:
sudo yum -y install xorsearch
How To Uninstall xorsearch on Fedora 34
To uninstall only the xorsearch package we can use the following command:
sudo dnf remove xorsearch
xorsearch Package Contents on Fedora 34
/usr/bin/xorsearch
/usr/lib/.build-id
/usr/lib/.build-id/a9
/usr/lib/.build-id/a9/1e9f4325796591e759d32941298f9f40485b61
References
Summary
In this tutorial we learn how to install xorsearch on Fedora 34 using yum and dnf.