Update: strings.py Version 0.0.7

This new version brings an update to the Pascal feature of strings.py, my tool to extract strings from arbitrary files.

I had to analyze compiled Lua code (compiled with Lua 5.2): Lua 5.2 byte code stores strings like C strings and Pascal strings.

The strings are terminated by a NULL byte, like C strings, and they are prefixed with a length counter, like Pascal strings. Since the length includes the NULL byte, my strings.py tool didn’t match compiled Lua 5.2 strings:

I need to subtract 1 from the counter, so that it matches the length of the string without NULL byte. This can now be done as follows:

strings_V0_0_7.zip (https)
MD5: 2533BF3E7CBD5526718CDE5E150039D2
SHA256: FFBE686A2E41B22858023898580419806A789349D408C24EF25E8BEBCD33A418

Print Share Comment Cite Upload Translate

APA

() » Update: strings.py Version 0.0.7. Retrieved from https://www.truth.cx/2021/01/24/update-strings-py-version-0-0-7/.

MLA

" » Update: strings.py Version 0.0.7." - , https://www.truth.cx/2021/01/24/update-strings-py-version-0-0-7/

HARVARD

» Update: strings.py Version 0.0.7., viewed ,

VANCOUVER

- » Update: strings.py Version 0.0.7. [Internet]. [Accessed ]. Available from: https://www.truth.cx/2021/01/24/update-strings-py-version-0-0-7/

CHICAGO

" » Update: strings.py Version 0.0.7." - Accessed . https://www.truth.cx/2021/01/24/update-strings-py-version-0-0-7/

IEEE

" » Update: strings.py Version 0.0.7." [Online]. Available: https://www.truth.cx/2021/01/24/update-strings-py-version-0-0-7/. [Accessed: ]

Select a language: Afrikaans Albanian Arabic Armenian Basque Bengali Bulgarian Catalan Cambodian Chinese (Mandarin) Croatian Czech Danish Dutch English Estonian Fiji Finnish French Georgian German Greek Gujarati Hebrew Hindi Hungarian Icelandic Indonesian Irish Italian Japanese Javanese Korean Latin Latvian Lithuanian Macedonian Malay Malayalam Maltese Maori Marathi Mongolian Nepali Norwegian Persian Polish Portuguese Punjabi Quechua Romanian Russian Samoan Serbian Slovak Slovenian Spanish Swahili Swedish Tamil Tatar Telugu Thai Tibetan Tonga Turkish Ukrainian Urdu Uzbek Vietnamese Welsh Xhosa <p>This new version brings an update to the <a href="https://blog.didierstevens.com/2020/10/22/update-strings-py-version-0-0-5-pascal-strings/">Pascal feature of strings.py</a>, my tool to extract strings from arbitrary files.</p> <p>I had to analyze compiled Lua code (compiled with Lua 5.2): Lua 5.2 byte code stores strings like C strings and Pascal strings.</p> <p>The strings are terminated by a NULL byte, like C strings, and they are prefixed with a length counter, like Pascal strings. Since the length includes the NULL byte, my strings.py tool didn’t match compiled Lua 5.2 strings:</p> <p><img loading="lazy" data-attachment-id="8136" data-permalink="https://blog.didierstevens.com/2021/01/24/update-strings-py-version-0-0-7/20210123-220518/" data-orig-file="https://didierstevens.files.wordpress.com/2021/01/20210123-220518.png" data-orig-size="463,229" data-comments-opened="1" data-image-meta="{"aperture":"0","credit":"","camera":"","caption":"","created_timestamp":"0","copyright":"","focal_length":"0","iso":"0","shutter_speed":"0","title":"","orientation":"0"}" data-image-title="20210123-220518" data-image-description="" data-medium-file="https://didierstevens.files.wordpress.com/2021/01/20210123-220518.png?w=300" data-large-file="https://didierstevens.files.wordpress.com/2021/01/20210123-220518.png?w=463" class="alignnone size-full wp-image-8136" src="https://didierstevens.files.wordpress.com/2021/01/20210123-220518.png?w=463&h=229" alt="" width="463" height="229" srcset="https://didierstevens.files.wordpress.com/2021/01/20210123-220518.png 463w, https://didierstevens.files.wordpress.com/2021/01/20210123-220518.png?w=128&h=63 128w, https://didierstevens.files.wordpress.com/2021/01/20210123-220518.png?w=300&h=148 300w" sizes="(max-width: 463px) 100vw, 463px" /></p> <p>I need to subtract 1 from the counter, so that it matches the length of the string without NULL byte. This can now be done as follows:</p> <p><img loading="lazy" data-attachment-id="8137" data-permalink="https://blog.didierstevens.com/2021/01/24/update-strings-py-version-0-0-7/20210123-220539/" data-orig-file="https://didierstevens.files.wordpress.com/2021/01/20210123-220539.png" data-orig-size="481,254" data-comments-opened="1" data-image-meta="{"aperture":"0","credit":"","camera":"","caption":"","created_timestamp":"0","copyright":"","focal_length":"0","iso":"0","shutter_speed":"0","title":"","orientation":"0"}" data-image-title="20210123-220539" data-image-description="" data-medium-file="https://didierstevens.files.wordpress.com/2021/01/20210123-220539.png?w=300" data-large-file="https://didierstevens.files.wordpress.com/2021/01/20210123-220539.png?w=481" class="alignnone size-full wp-image-8137" src="https://didierstevens.files.wordpress.com/2021/01/20210123-220539.png?w=481&h=254" alt="" width="481" height="254" srcset="https://didierstevens.files.wordpress.com/2021/01/20210123-220539.png 481w, https://didierstevens.files.wordpress.com/2021/01/20210123-220539.png?w=128&h=68 128w, https://didierstevens.files.wordpress.com/2021/01/20210123-220539.png?w=300&h=158 300w" sizes="(max-width: 481px) 100vw, 481px" /></p> <p> </p> <p><a href="http://didierstevens.com/files/software/strings_V0_0_7.zip" >strings_V0_0_7.zip</a> (<a href="https://didierstevens.com/files/software/strings_V0_0_7.zip" >https</a>)<br /> MD5: 2533BF3E7CBD5526718CDE5E150039D2<br /> SHA256: FFBE686A2E41B22858023898580419806A789349D408C24EF25E8BEBCD33A418</p> First name:

Last name: