XeNTaX

I tried 2 dozens of them ans still I can't find the right one for our purposes: reverse engineering of unknown file format.
We need an hex editor capable of looking for dynamic structures and patterns based on offsets, lenghts and pointers.
Any suggestion?
Maybe "010 editor" would be good... but it's 50$!

jumpjack wrote: ↑Sun May 03, 2020 1:55 pm I tried 2 dozens of them ans still I can't find the right one for our purposes

Why don't you list those you've tried so people can see what options you have left?

I currently have these installed; some others were just discarded after first start as completely useless:
Binary Viewer
filealyz-2.0.5.57
fileinsight
FlexHex
hex_setup26
hexinator-64-1.12
HxD
winhex
WinMerge-2.14.0
wxHexEditor
wxMEdit-3.1-win32-bin
HEXEdit
BE
free-hex-editor-neo


FlexHex and Hexinator look promising but I am not sure they support dynamic structures and pointers to structures, still studying.

I also just downloaded ghidra_9.1.2_PUBLIC_20200212 from NSA (!): 200 MB, not tested yet.

kaitai-struct-compiler-0.8 is not clear if is a program, a library or what.

Well, I havn't tried as many as you did, coz I found the one that do just fine after, say 2 attempts.
I have tried WinHex, which's not convenient enough for me. Also checked FlexHex and Hexinator since you mentioned. My opinion, they're all too old-school and I'm hardly comfortable with their UIs. HexEdit on the other hand, is the one I've been using ever since. It has a build-in calculator, supports deflate data decompression of different headers and also file templates with a simple syntax for you to examine your formats. And I do enjoy its interface which is really helpful for dynamically interpreting the data with human eyes. That would be enough for me. But I see HexEdit is in your list, so what's your opinion of it?

Bigchillghost wrote: ↑Mon May 04, 2020 10:33 am HexEdit [...] supports deflate data decompression of different headers and also file templates with a simple syntax for you to examine your formats. [...]HexEdit is in your list, so what's your opinion of it?

Maybe it's another "hexedit"? Mine has just basic features. Its extended name is "MiTec Hexadecimal editor".

The hex editor hardly matters. It is the same data after all, no matter what you use to view it. I would suggest focusing more on understanding the data / patterns and trying to implement your findings by coding.

The "features" you mentioned sounds more like the process of programming an actual format reader which is not the purpose of the hex editor. That may be the reason why you are not satisfied with all those hex editors. The closest I can think of is the binary templates of 010, but you already mentioned that yourself.

jumpjack wrote: ↑Mon May 04, 2020 7:27 pm Maybe it's another "hexedit"? Mine has just basic features. Its extended name is "MiTec Hexadecimal editor".

It appears so. The one I was talking about was developed by Andrew Phillips but sadly its official site was down long time ago. This is the only download that I could retrieve from its Google cache: HexEdit5build1349.zip.
The source code is still available on Github: https://github.com/AndrewWPhillips/HexEdit.
Also found this on codeproject which contains some more info of its features: https://www.codeproject.com/Articles/13 ... ile-Editor.
Though it's for version 4.0 and current version is 5.0.