3 ms·
Don't forget line endings! At least for texts using it, the CR-LF combination can make removing XOR obfuscation the work of just a few minutes. But not as easy
by exmadscientist 6y ago
Don't forget line endings! At least for texts using it, the CR-LF combination can make removing XOR obfuscation the work of just a few minutes.
But not as easy as binaries... I've seen a few binaries in the wild that were "protected" with XOR "encryption". Sure, you can go for the header and figure out the XOR constant that way. But no need to waste your time on that! Binaries are often full of long stretches of zeros... and guess what happens to those under XOR?