Welcome Guest.   Make a donation to an author on the site December 22, 2014, 01:55:10 PM  *

Please login or register.
Or did you miss your validation email?


Login with username and password (forgot your password?)
Why not become a lifetime supporting member of the site with a one-time donation of any amount? Your donation entitles you to a ton of additional benefits, including access to exclusive discounts and downloads, the ability to enter monthly free software drawings, and a single non-expiring license key for all of our programs.


You must sign up here before you can post and access some areas of the site. Registration is totally free and confidential.
 
The N.A.N.Y. Challenge 2014! Download dozens of custom programs!
   
   Forum Home   Thread Marks Chat! Downloads Search Login Register  
Pages: [1]   Go Down
  Reply  |  New Topic  |  Print  
Author Topic: Fuzzy Hashing with ssdeep  (Read 1633 times)
Mark0
Charter Honorary Member
***
Posts: 594


see users location on a map View Profile WWW Give some DonationCredits to this forum member
« on: April 27, 2012, 01:18:10 PM »

Hi!
Long time no post! smiley

So, here an humble try at contributing something interesting.
I discovered ssdeep just some days ago, and already found it very useful in a couple of different situations.

Quoting from the site intro:
Quote
ssdeep is a program for computing context triggered piecewise hashes (CTPH). Also called fuzzy hashes, CTPH can match inputs that have homologies. Such inputs have sequences of identical bytes in the same order, although bytes in between these sequences may be different in both content and length.

So, point it a directory with a lot of files in, of any kind, and it can produce a list of related files: various versions of the same executable, all the documents of certain kind, and so on.
It also include a library with a few exported functions to easily take advantage of its features from other applications.
Logged

skwire
Global Moderator
*****
Posts: 4,186



Another Coding Snack request? Om nom nom...

see users location on a map View Profile WWW Give some DonationCredits to this forum member
« Reply #1 on: April 27, 2012, 01:30:50 PM »

Rather interesting.   thumbs up
Logged

Mark0
Charter Honorary Member
***
Posts: 594


see users location on a map View Profile WWW Give some DonationCredits to this forum member
« Reply #2 on: April 27, 2012, 02:24:29 PM »

A paper on the topic by the tool's author:

Identifying Almost Identical Files Using Context Triggered Piecewise Hashing (Jesse Kornblum, 2006)
Logged

Pages: [1]   Go Up
  Reply  |  New Topic  |  Print  
 
Jump to:  
   Forum Home   Thread Marks Chat! Downloads Search Login Register  

DonationCoder.com | About Us
DonationCoder.com Forum | Powered by SMF
[ Page time: 0.025s | Server load: 0.22 ]