DonationCoder.com forum
 
Read-only archive. This is a static copy of the DonationCoder.com forum. Reading and searching work as before; logging in, posting and private messages do not.
Archive of 2026-10-21 · About this archive · Main site

Author Topic: Fuzzy Hashing with ssdeep  (Read 5,487 times)

Mark0

  • Charter Honorary Member
  • Joined in 2005
  • ***
  • Posts: 654
Fuzzy Hashing with ssdeep
« on: April 27, 2012, 06:18 PM »
Hi!
Long time no post! :)

So, here an humble try at contributing something interesting.
I discovered ssdeep just some days ago, and already found it very useful in a couple of different situations.

Quoting from the site intro:
Quote
ssdeep is a program for computing context triggered piecewise hashes (CTPH). Also called fuzzy hashes, CTPH can match inputs that have homologies. Such inputs have sequences of identical bytes in the same order, although bytes in between these sequences may be different in both content and length.

So, point it a directory with a lot of files in, of any kind, and it can produce a list of related files: various versions of the same executable, all the documents of certain kind, and so on.
It also include a library with a few exported functions to easily take advantage of its features from other applications.

skwire

  • I eat Coding Snacks for breakfast...
  • Global Moderator
  • Joined in 2005
  • *****
  • Posts: 5,297
    • Participated in NANY Challenge Seventeen Times
    • Coding Snacks
    • Superboy Coder
    • Cody Award
    • Volunteers/Staff
    • Gathering Badge
Re: Fuzzy Hashing with ssdeep
« Reply #1 on: April 27, 2012, 06:30 PM »
Rather interesting.  :up:

Mark0

  • Charter Honorary Member
  • Joined in 2005
  • ***
  • Posts: 654
Re: Fuzzy Hashing with ssdeep
« Reply #2 on: April 27, 2012, 07:24 PM »

Original address: https://www.donationcoder.com/forum/index.php?topic=30825.0