I am working through some work exercises on file carving. Using a header of 0xDEADBEEF
and a footer of 0xBEEFDEAD
, I need to run the program to receive a specific token.
I have turned the header/footer into hexadecimal:
0xDEADBEEF = \x30\x78\x44\x45\x41\x44\x42\x45\x45\x46
0xBEEFDEAD = \x30\x78\x42\x45\x45\x46\x44\x45\x41\x44
I have enabled it in the config file but I am unsure if I am doing anything incorrectly, as I am yet to receive the token.
NONE y 200000 \x30\x78\x44\x45\x41\x44\x42\x45\x45\x46 \x30\x78\x42\x45\x45\x46\x44\x45\x41\x44
Above is how I configured the config file.
Any help would be great! Thanks.
User contributions licensed under CC BY-SA 3.0