What Is a Hex Editor?
Hex editor, editing tool software for text editing in hex view. Hex editor can be used to check and repair various files, recover deleted files, data loss caused by hard disk damage, etc. It has always been a favorite tool for computer professionals.
Hex Editor
- Chinese name
- Hex Editor
- Features
- Check and repair various files, etc.
- Platform
- Windows
- Application
- section
- Hex editor, editing tool software for text editing in hex view. Hex editor can be used to check and repair various files, recover deleted files, data loss caused by hard disk damage, etc. It has always been a favorite tool for computer professionals.
- In fact, if you use it in an appropriate environment, the hex editor can find vulnerabilities in Windows and some applications. These vulnerabilities may not have caught your attention, but they must not be ignored. Today, viruses and Trojans are rampant, we should fully use this tool. In fact, I believe that it is one of the most neglected security inspection and testing tools.
- Generally used in applications such as modifying game saves, some software cracks,
- Software size: 1.65 MB
- Software language: multiple languages [Chinese]
- Software nature: foreign software
- Software License: Special Software
- Application platform: Win7 / Vista / Win2003 / WinXP
- The hex editors are:
- Winhex
- FPE
- Hex Workshop
- XVI32
- Ultraedit
- Wait
- In general, you can perform the following operations through a hex editor such as WinHex to find security holes in the Windows environment.
- 1. Check passwords still stored in Windows, browsers, and other applications. The risk that confidential information such as passwords can be stored in memory is self-evident. This method can show us how fragile login accounts and other private information are, especially on computers with public access . As shown
- Figure: Use WinHex to find the memory area of FireFox for sensitive information
- If that's not enough to prove the vulnerability, you can also search your computer's entire memory for further passwords or other sensitive information about Windows applications. I have repeatedly found sensitive information stored in memory by a web browser after the application was closed. It is quite easy and fast to search this type of sensitive information in the entire memory through a hex editing program such as WinHex.
- 2. Search for sensitive information in local system files (such as pagefile.sys and hiberfil.sys) or the entire physical disk. Every time I use this function, I always gain something. This is really helpful for checking the data on the computer hard disk. The figure below shows Winhex's interface for finding local files.
- 3. Find malicious software in memory or sensitive data on disk. These locations are hard to find for us.
- 4. Find confidential documents, such as doc (word document) files that can reveal some sensitive information, so these files must never leave our network. This includes document authors, draft wording, comments, or third party information that should be removed. For example, in Word there is such a privacy option "Delete personal information (R) from file attributes when saving", as shown in the figure
- Figure: Check the privacy option
- We should tick this property when publishing and transmitting some confidential doc files, so using this feature of WinHex helps us to find those files that forget to select this feature.
- There are many types of hex editors. In addition to WinHex, there are tools such as Hex Workshop, XVI32. These powerful hex editing tools can be modified