New hashing tool --> ssdeep


Prickaerts

Administrator
Jan 2, 2006
765
0
#1
Hi group,

Another nice tool from the creator of MD5deep, SSDeep.

ssdeep.sourceforge.net

It can compare hashes of pieces of a file, so for example remnants of a file found in Freespace could be compared with (pieces) of their original.

From the included readme file:

"Computes a checksum based on context triggered piecewise hashes for each input file. If requested, the program matches those checksums against a file of known checksums and reports any possible matches. Output is written to standard out and errors to standard error. Input from standard input is not supported."
 

About us

  • Our community began in 2004. Since this time, we have grown to have over 29,000+ members within the DFIR & Cyber Security community.

    We are happy to announce that this forum is now under new ownership with the goal to once again become the main Digital Forensics Forum on the internet for DFIR, OSINT and Cyber Security.

    If you can think of ways to help us improve, please let us know.

    We pride ourselves on offering unbiased, critical discussion among people of all different backgrounds.

    We are working every day to make sure our community is one of the best.

Quick Navigation

User Menu