search

pjrinaldi / wombatforensics

linux c++, fox-toolkit, multi-threaded forensic gui tool
GNU General Public License v2.0
46 stars 12 forks source link

Hex Viewer #448

Open pjrinaldi opened 1 year ago

pjrinaldi commented 1 year ago

Implemented the hex viewer text display when you double click a file that doesn't have a viewer such as pdf. Also implemented the same viewer when you right click on a file and select the hex viewer.

Need to implement a hex view display in the main plain text view when there are no ext representations for the file, such as prefetch, lnk, etc..

pjrinaldi commented 1 year ago

hex viewer doesn't include slack, so i need to get file content with slack to display the slack hex or just build a getslackcontent function which goes to the offset + file size and go from that point to physical size - logical size

pjrinaldi commented 1 year ago

added slack to the hex viewer as a separate hex section at the bottom of the viewer as it's own thing.

pjrinaldi commented 1 year ago

i can add a internal hex viewer for viewing the slack... and a popup menu item for it. also i implemented ghex to deploy henever something without a viewer or external program is opened.

need to update file content to either write to a file or pull into memory depending on the file size....

pjrinaldi commented 1 year ago

also will use the hex viewer for right click display of parsarble artifacts such as recycler, link, etc.. and use external for unknowns...

implement the right click slack hex

pjrinaldi commented 6 months ago

issue with right click hexviewer and getfileslack(), need to test and fix.

pjrinaldi commented 6 months ago

also might want to look into fixing the numbering for the slack so it picks up where the content ends.