# xortool
# Analyze XOR-encoded data — guess key length and probable key bytes
# Docs: https://docs.remnux.org/discover-the-tools/examine+static+properties/deobfuscation

% xor, deobfuscation, key-recovery

# Basic usage
xortool <encoded_file>

# Select specific item
xortool-xor -s 'key' -i <input> -o <output>


# --- Recipes (multi-tool chains) ---

# >> Brute-Force XOR Key
# Quick check for XOR-encoded URLs/PE headers
XORSearch <file> http:
# Brute-force single-byte XOR keys
brxor.py <file>
# Try XOR, ROL, ADD combinations
bbcrack -l 1 <file>
# Guess multi-byte XOR key length and value
xortool <file>
# Decode with known key
xortool-xor -s '<key>' -i <encoded> -o <decoded>