RE: OT: Bitshift, howto

Hello CG,

After my initial post, I found Cygnus hex editor. This tool does what I
want at the file level. Winhex does it too; I just didn't want to buy the
license. I've been very busy since I first posted to the list.

I'm going to try again with HW (trial) and also Winhex (trial) to see if I
can modify at the sector level. Thanks for you help.

Eric

:-----Original Message-----
:From: plug-discuss-bounces@lists.plug.phoenix.az.us
:[mailto:plug-discuss-bounces@lists.plug.phoenix.az.us] On
:Behalf Of Carlos Macedo Gomes
:Sent: Wednesday, March 07, 2007 7:35 PM
:To: Main PLUG discussion list
:Subject: Re: OT: Bitshift, howto
:
:Hi Eric,
:
:I believe Hex Workshop [1] (a Windows based tool) will do what
:you want. It can handle file and sector circular bitwise
:shifts in either direction and has options for taking into
:account the data's Endian-ness. I'm not sure about doing an
:entire partition but since you can open an entire drive w/ the
:tool you may be able to do the shift. If you have the ability
:to write the partition to an image file (e.g., using something
:akin to DriveSpy's [2] SavePart command) then you can bitshift
:the image file and possibly achieve your objective.
:
:Let me know if this helps or, if not, what alternatives you
:find as I'd be interested in the results. I do some digital
:forensics support at work (for a local Fortune 50) and teach
:cybercrime/digitalforensics at night.
:
:thanks,
:C.G.
:
:[1] http://www.bpsoft.com/
:[2] http://www.digitalintelligence.com/software/disoftware.php
:
:On 3/7/07, evb <dsmntl@cox.net> wrote:
:>
:> Sorry for the OT post, but all my other avenues have failed. Thus I
:> am seeking out the advice of the technorati on this list.
:>
:> I would like a tool(Linux or Windows) that would bitshift all bits
:> within a defined scope (file/sector/partition/etc). Specifically, I
:> would like a tool that will perform the following operation
:at the file/sector level:
:> http://en.wikipedia.org/wiki/Circular_shift
:>
:> I already have a tool that will shift bits at the sector level, but
:> only if the data is on a floppy disk and only in DOS; other
:media and
:> Oses are not supported. VMWare also is not supported.
:(That tool is
:> called Anadisk; you can find a trial version here, fyi:
:> http://retro.icequake.net/dob/files/bleuge/anadisk.207/).
:>
:> The tool "Winhex" already has a simple feature (Edit > Modify Data >
:> Invert/XOR/RightShiftby1/LeftShiftby1) but for various reasons I
:> cannot use it.
:>
:> Any suggestions are appreciated.
:>
:> Eric Van Buskirk
:> Assistant City Prosecutor/CISSP
:> City of Phoenix
:>
:> ---------------------------------------------------
:> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
:> To subscribe, unsubscribe, or to change you mail settings:
:> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
:>
:
:
:--
:powerofprimes@gmail.com
:Carlos Macedo Gomes
:_sic itur ad astra_
:---------------------------------------------------
:PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
:To subscribe, unsubscribe, or to change you mail settings:
:http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss

---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss