readme
This commit is contained in:
parent
4e691a0bcc
commit
fa5b2c56bb
|
@ -11,12 +11,12 @@
|
||||||
- **`findSymbols.py`** - Script that recursively searches through PE files, scans their Imports and Exports and returns those matching filter criterias (like imported from specified module, name regexes, etc.)
|
- **`findSymbols.py`** - Script that recursively searches through PE files, scans their Imports and Exports and returns those matching filter criterias (like imported from specified module, name regexes, etc.)
|
||||||
|
|
||||||
```
|
```
|
||||||
:: scanSymbols.py - Searches PE Import/Exports based on supplied conditions.
|
:: findSymbols.py - Finds PE Import/Exports based on supplied filters.
|
||||||
|
|
||||||
Mariusz B. / mgeeky, '21
|
Mariusz B. / mgeeky, '21
|
||||||
<mb [at] binary-offensive.com>
|
<mb [at] binary-offensive.com>
|
||||||
|
|
||||||
usage: findSymbols.py [options] <path>
|
usage: .\findSymbols.py [options] <path>
|
||||||
|
|
||||||
positional arguments:
|
positional arguments:
|
||||||
path Path to a PE file or directory.
|
path Path to a PE file or directory.
|
||||||
|
@ -27,13 +27,17 @@ optional arguments:
|
||||||
-v, --verbose Verbose mode.
|
-v, --verbose Verbose mode.
|
||||||
-f {text,json}, --format {text,json}
|
-f {text,json}, --format {text,json}
|
||||||
Output format. Text or JSON.
|
Output format. Text or JSON.
|
||||||
|
-E EXTENSION, --extension EXTENSION
|
||||||
|
Extensions of files to scan. By default will scan all files. Can be repeated: -E exe -E dll
|
||||||
|
-o PATH, --output PATH
|
||||||
|
Write output to file.
|
||||||
|
|
||||||
Output sorting:
|
Output sorting:
|
||||||
-u, --unique Return unique symbols only. The first symbol with a name that occurs in results, will be returned.
|
-u, --unique Return unique symbols only. The first symbol with a name that occurs in results, will be returned.
|
||||||
-d, --descending Sort in descending order instead of default of descending.
|
-d, --descending Sort in descending order instead of default of descending.
|
||||||
-c COLUMN, --column COLUMN
|
-c COLUMN, --column COLUMN
|
||||||
Sort by this column name. Default: filename. Available columns: "filename", "symbol type", "module", "symbol", "file size", "path"
|
Sort by this column name. Default: filename. Available columns: "filename", "symbol type", "module", "symbol", "file size", "path"
|
||||||
-n NUM, --first NUM Show only first N results, as specified in this paremeter. By default will show all candidates.=
|
-n NUM, --first NUM Show only first N results, as specified in this paremeter. By default will show all candidates.
|
||||||
|
|
||||||
Output filtering:
|
Output filtering:
|
||||||
-i, --imports Filter only Imports.
|
-i, --imports Filter only Imports.
|
||||||
|
|
Loading…
Reference in New Issue