RevEnge is a fully featured hex viewer designed with Reverse Engineering in mind (hence the name). It comes with features not seen in other Hex viewers such as its ability to perform on the fly decompression of ZLib compressed data, display and search for dates in multiple date formats and decode SMS messages encoded in GSM PDU 7 bit ASCII.
An abridged feature list can be found below…RevEnge will allow on the fly decoding of ZLib, ROT13, ROT18, ROT47 and UUEncoded data – i.e. as you move the cursor RevEnge will attempt to decode and display the data from the cursor using the appropriate algorithm
– Decode and display the GSM 7 character set – can assist finding text messages or fragments of text messages in mobile phone hex dumps
– Date searching – search for a date in a specific date range using any or all of the inbuilt 12 date types (including 4 variants of dates found almost exclusively on mobile phones)
– define your own structures – RevEnge will decode the data from the current cursor position according to the current structure definition – move the cursor and the displayed structure data is updated accordingly
– verify that a file/image/disk/volume is blank
– Jump forwards/backwards from the current offset/block start based on the value under the cursor. jump back to the last cursor prior to the current jump
– Highlight any date that falls within a specific predefined range
– Bookmark ranges of a file
– Highlight any bytes that match a preset template – i.e. set the context to include JFIF, GIF89, BM etc. and as the display scrolls any matching bytes will be displayed
More info at http://www.sandersonforensics.com/content.asp?page=325
