xorsearch.py

Search for XOR, ROL, ROT, and SHIFT encoded strings with YARA and regex support.

Platforms: Linux · License: Public Domain · Last verified September 6, 2026

Search for XOR, ROL, ROT, and SHIFT encoded strings with YARA and regex support.

Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.

Getting started

Preinstalled on REMnux. See the official REMnux tool listing and upstream website linked above for details.

Ubuntu-based toolkit for reverse-engineering and analyzing malicious software