# bbcrack
# Detect and decode strings obfuscated with XOR, ROL, and ADD algorithms
# FOR610 Labs: 5.2 | Sections: 5

% xor, rol, add, deobfuscation, balbuzard

# Basic usage
bbcrack -l 1 specimen.dll


# --- Recipes (multi-tool chains) ---

# >> Brute-Force XOR Key
# Quick check for XOR-encoded URLs/PE headers
XORSearch <file> http:
# Brute-force single-byte XOR keys
brxor.py <file>
# Try XOR, ROL, ADD combinations
bbcrack -l 1 <file>
# Guess multi-byte XOR key length and value
xortool <file>
# Decode with known key
xortool-xor -s '<key>' -i <encoded> -o <decoded>