Hello,
Looking to find a way to search forensic image(s) for number lists instead of word lists. I know bulk extractor is a good tool or even Strings but cannot think of the expression I would use. Looking to find a 6 digit pin-code with numbers only. Have numerous images and haven't indexed any of them in my initial processing so was wanting to utilize a third party tool. Thoughts or tools anyone uses here for this? Thanks.
This would be the regex for searching 6 digits. /^([0-9]{6})/
http//
strings image.dd | grep '[0-9]\{6\}' | sort | uniq
Will match ( like the regex above ) all strings that contain 6 numbers in them, even if they are longer …
e.g. 12345678910 will match as well as 123456
If you want _just_ 6 digit number strings then add -ow to the grep ( match whole words & only show the match, not the whole line )
Forgive me though - do you really expect to reduce your search space significantly enough that this is preferable to just brute forcing a 6 digit numeric pin ?
EDIT I think that the regexp above would only match 6 digits at the start of the line because of the ^ …
"Forgive me though - do you really expect to reduce your search space significantly enough that this is preferable to just brute forcing a 6 digit numeric pin ?"
Unfortunately, the brute force software I am using in this circumstance is very slow so it's helpful to have suggestions.
Thanks so much, both of you. This will be very helpful.