Interactive pattern discovery in binaries (FF-16-TUI)
Summary
FF-16-TUI is an interactive static analysis tool that finds frequently occurring 16-bit patterns in binary files to help locate structures and understand file layout.
View Cached Full Text
Cached at: 08/28/26, 03:29 PM
HexLasso/FF-16-TUI
Source: https://github.com/HexLasso/FF-16-TUI
FF-16-TUI (Find Frequent 16-bit Text User Interface)
What does FF-16-TUI do?
FF-16-TUI is an interactive static analysis tool that finds frequently occurring local 16-bit patterns across the entire file. It can help to locate structures from frequent patterns and understand file layout.
Text User Interface
Command line usage
ff-16-tui [filename] [-d <filename>]
<filename> Target file
-d <filename> Dictionary file (Default: dict.csv)
Keyboard shortcuts
Hexdump panel:
| Key | Function |
|---|---|
| ← | Previous byte |
| → | Next byte |
| ↑ | Previous line |
| ↓ | Next line |
| PgUp | Previous page |
| PgDn | Next page |
| Home | Beginning of file |
| End | End of file |
Pattern panel:
| Key | Function |
|---|---|
| 0 | Highlight pattern (most frequent) |
| 1 | Highlight pattern |
| 2 | Highlight pattern |
| 3 | Highlight pattern |
| 4 | Highlight pattern |
| 5 | Highlight pattern |
| 6 | Highlight pattern |
| 7 | Highlight pattern |
| 8 | Highlight pattern |
| 9 | Highlight pattern (least frequent) |
Filter panel:
| Key | Function |
|---|---|
| q | Increase the minimum gap |
| s | Decrease the minimum gap |
| w | Increase the maximum gap |
| s | Decrease the maximum gap |
| e | Increase the minimum set bits |
| d | Decrease the minimum set bits |
| r | Increase the maximum set bits |
| f | Decrease the maximum set bits |
| t | Increase the threshold |
| g | Decrease the threashold |
Terminologies
| Term | Description |
|---|---|
| Ones | The number of bits set in the pattern. |
| Freq | The frequency of the pattern. |
| Dict | The dictionary entry for the pattern. |
Similar Articles
Visual Analysis of Binary Files
The article explores methods for visually analyzing binary files, which can aid in tasks like reverse engineering and cybersecurity.
dmtrKovalenko/fff
fff is a fast, typo-resistant file search toolkit with frecency ranking and an MCP server for AI agents, providing efficient file and content search with git awareness.
TIDE: Proactive Multi-Problem Discovery via Template-Guided Iteration
TIDE is a template-guided iterative framework for discovering multiple hidden problems from context, improving problem identification and resolution in document and code environments. It uses iterative discovery and thought templates to surpass single-shot and multi-agent baselines.
Visualizing Binary Files
The article describes the development of enhanced binary file visualization features in the 'bine' hex editor, including colorized output using Unicode characters and a method to interpret binary files as images for large-scale viewing.
SQLite with a Fine-Toothed Comb
John Regehr describes using tis-interpreter to search for undefined behavior in SQLite, finding bugs like dangling pointer uses and uninitialized reads that other tools missed.