Home | Blog | Software | Reviews and Features | Forum | Help | Donate | About us
topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • December 03, 2016, 12:52:48 AM
  • Proudly celebrating 10 years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Author Topic: Fuzzy Hashing with ssdeep  (Read 2240 times)

Mark0

  • Charter Honorary Member
  • Joined in 2005
  • ***
  • Posts: 617
    • View Profile
    • Mark's home
    • Donate to Member
Fuzzy Hashing with ssdeep
« on: April 27, 2012, 01:18:10 PM »
Hi!
Long time no post! :)

So, here an humble try at contributing something interesting.
I discovered ssdeep just some days ago, and already found it very useful in a couple of different situations.

Quoting from the site intro:
Quote
ssdeep is a program for computing context triggered piecewise hashes (CTPH). Also called fuzzy hashes, CTPH can match inputs that have homologies. Such inputs have sequences of identical bytes in the same order, although bytes in between these sequences may be different in both content and length.

So, point it a directory with a lot of files in, of any kind, and it can produce a list of related files: various versions of the same executable, all the documents of certain kind, and so on.
It also include a library with a few exported functions to easily take advantage of its features from other applications.

skwire

  • Global Moderator
  • Joined in 2005
  • *****
  • Posts: 4,664
    • View Profile
    • Donate to Member
Re: Fuzzy Hashing with ssdeep
« Reply #1 on: April 27, 2012, 01:30:50 PM »
Rather interesting.   :up:

Mark0

  • Charter Honorary Member
  • Joined in 2005
  • ***
  • Posts: 617
    • View Profile
    • Mark's home
    • Donate to Member
Re: Fuzzy Hashing with ssdeep
« Reply #2 on: April 27, 2012, 02:24:29 PM »