String Analysis

When exploring binary files it is often useful to run strings to look for interesting data.  I’ve written a simple python script to analyze strings output for IP addresses and domain names.

This script will analyze the output of the strings command and look for IP addresses and domain names. When a potential IP address is found it will attempt a reverse lookup. When a potential domain name is found it will attempt to resolve the name to an IP address.

Usage

$ strings FileName | python strings-analysis.py

You can find the code on my Github.