How To Install xorsearch on Fedora 34

xorsearch is Search for a given string in an XOR, ROL, ROT or SHIFT encoded binary file

Introduction

In this tutorial we learn how to install xorsearch on Fedora 34.

What is xorsearch

XORSearch is a program to search for a given string in an XOR, ROL, ROT or SHIFT encoded binary file. An XOR encoded binary file is a file where some (or all) bytes have been XORed with a constant value (the key). A ROL (or ROR) encoded file has its bytes rotated by a certain number of bits (the key). A ROT encoded file has its alphabetic characters (A-Z and a-z) rotated by a certain number of positions. A SHIFT encoded file has its bytes shifted left by a certain number of bits (the key) of the second byte becomes the LSB of the first byte, all bits of the second byte shift left, … XOR and ROL/ROR encoding is used by malware programmers to obfuscate strings like URLs.

We can use yum or dnf to install xorsearch on Fedora 34. In this tutorial we discuss both methods but you only need to choose one of method to install xorsearch.

Install xorsearch on Fedora 34 Using dnf

Update yum database with dnf using the following command.

sudo dnf makecache --refresh

The output should look something like this:

Fedora 34 - x86_64                               20 kB/s | 6.6 kB     00:00
Fedora 34 openh264 (From Cisco) - x86_64        1.4 kB/s | 989  B     00:00
Fedora Modular 34 - x86_64                       68 kB/s | 6.5 kB     00:00
Fedora 34 - x86_64 - Updates                    3.5 kB/s | 6.2 kB     00:01
Fedora Modular 34 - x86_64 - Updates             17 kB/s | 5.9 kB     00:00
Metadata cache created.

After updating yum database, We can install xorsearch using dnf by running the following command:

sudo dnf -y install xorsearch

Install xorsearch on Fedora 34 Using yum

Update yum database with yum using the following command.

sudo yum makecache --refresh

The output should look something like this:

Fedora 34 - x86_64                               20 kB/s | 6.6 kB     00:00
Fedora 34 openh264 (From Cisco) - x86_64        1.4 kB/s | 989  B     00:00
Fedora Modular 34 - x86_64                       68 kB/s | 6.5 kB     00:00
Fedora 34 - x86_64 - Updates                    3.5 kB/s | 6.2 kB     00:01
Fedora Modular 34 - x86_64 - Updates             17 kB/s | 5.9 kB     00:00
Metadata cache created.

After updating yum database, We can install xorsearch using yum by running the following command:

sudo yum -y install xorsearch

How To Uninstall xorsearch on Fedora 34

To uninstall only the xorsearch package we can use the following command:

sudo dnf remove xorsearch

xorsearch Package Contents on Fedora 34

/usr/bin/xorsearch
/usr/lib/.build-id
/usr/lib/.build-id/a9
/usr/lib/.build-id/a9/1e9f4325796591e759d32941298f9f40485b61

References

Summary

In this tutorial we learn how to install xorsearch on Fedora 34 using yum and dnf.