hecate
The Hex Editor From Hell!
Usage:
go get -u github.com/evanmiller/hecate
$GOPATH/bin/hecate file1 [file2 [...]]
Hecate is a hex editor designed for reverse engineering file formats without
leaving the comfort of your terminal window. Hecate (pronounced HECK-it)
features tabbed browsing, in-place editing, large-file support, full-file
searching, and Vim-like controls. Place the cursor over some bytes and choose
a mode (t for text, p for a bit pattern, i for an integer, f
for a floating point) to see what those bytes represent. Toggle endianness with
e and signedness with u. Press enter to edit.
Editing
Pressing enter brings up an edit field for the data under the cursor. Make
changes and press enter again to write changes to disk. Pressing esc
cancels any changes on the current position, otherwise exits edit mode.
Navigating passed the edges of the field moves the cursor. The expected format
depends on the cursor mode when entering edit mode.
Screenshot:
Full list of commands:
h | left | t | text mode | S | show tabs |
j | down | p | bit pattern mode | W | hide tabs |
k | up | i | integer mode | A | previous tab |
l | right | f | float mode | D | next tab |
b | left 4 bytes | H | shrink cursor | ctrl-t | new tab |
w | right 4 bytes | L | grow cursor | ctrl-w | close tab |
^ | line start | e | toggle endianness | ctrl-e | scroll down |
$ | line end | u | toggle signedness | ctrl-y | scroll up |
g | file start | a | date decoding | ctrl-f | page down |
G | file end | @ | set date epoch | ctrl-b | page up |
: | jump to byte | / | search file | enter | edit mode |
x | toggle hex | n | next match | ? | help screen |