# brxor.py
# Brute-force XOR key detection for single-byte XOR-encoded strings
# FOR610 Labs: 5.2 | Sections: 5
# Docs: https://docs.remnux.org/discover-the-tools/examine+static+properties/deobfuscation

% xor, brute-force, deobfuscation

# Basic usage
brxor.py specimen.dll


# --- Recipes (multi-tool chains) ---

# >> Brute-Force XOR Key
# Quick check for XOR-encoded URLs/PE headers
XORSearch <file> http:
# Brute-force single-byte XOR keys
brxor.py <file>
# Try XOR, ROL, ADD combinations
bbcrack -l 1 <file>
# Guess multi-byte XOR key length and value
xortool <file>
# Decode with known key
xortool-xor -s '<key>' -i <encoded> -o <decoded>