Binary String Classifier (reversing/strings.py)

Decepticon-Cobaltai · analytics, strings, extraction, classification, binary, forensics

Extracts printable strings from binary blobs and tags them into categories like URL, IP, crypto, version, aiding automated knowledge‑graph enrichment.

# Source: https://github.com/mperkins0155/Decepticon-Cobaltai | License: Apache-2.0 | Copyright You must retain, in the Source form of any Derivative Works
# Provided via justclaw.it.com; keep this notice with the code.
"""Classified string extraction from a binary blob.

``strings(1)``-equivalent plus category tagging. Every string is
classified into a high-signal bucket:

- ``url``       — http/https/ftp/ws URLs
- ``ip``        — IPv4/IPv6 literals
- ``email``     — RFC-ish email addresses
- ``path``      — filesystem paths (Unix + Windows)
- ``crypto``    — hex keys (16/32/64 byte), PEM markers, known S-box hints
- ``version``   — X.Y.Z(.W) version strings
- ``format``    — printf-style format strings (LPM candidate)
- ``secret``    — looks like a credential / API key / token (heuristic

... (truncated -- full source via MCP)

See the full source, get the GitHub permalink, and search 40K more like it.

Get a free API key