kaos / hecate

The Hex Editor From Hell!

hecate

The Hex Editor From Hell!

Download latest release: Linux, Mac OS X, and Windows

Compile from source:

go get -u github.com/evanmiller/hecate
$GOPATH/bin/hecate file1 [file2 [...]]

Hecate is a hex editor designed for reverse engineering file formats without leaving the comfort of your terminal window. Hecate (pronounced HECK-it) features tabbed browsing, in-place editing, large-file support, full-file searching, and Vim-like controls. Place the cursor over some bytes and choose a mode (t for text, p for a bit pattern, i for an integer, f for a floating point) to see what those bytes represent. Toggle endianness with e and signedness with u. Press enter to edit.

Editing

Pressing enter brings up an edit field for the data under the cursor. Make changes and press enter again to write changes to disk. Pressing esc cancels any changes on the current position, otherwise exits edit mode. Navigating passed the edges of the field moves the cursor. The expected format depends on the cursor mode when entering edit mode.

Screenshot:

Full list of commands:

h	left	t	text mode	S	show tabs
j	down	p	bit pattern mode	W	hide tabs
k	up	i	integer mode	A	previous tab
l	right	f	float mode	D	next tab
b	left 4 bytes	H	shrink cursor	ctrl-t	new tab
w	right 4 bytes	L	grow cursor	ctrl-w	close tab
^	line start	e	toggle endianness	ctrl-e	scroll down
$	line end	u	toggle signedness	ctrl-y	scroll up
g	file start	a	date decoding	ctrl-f	page down
G	file end	@	set date epoch	ctrl-b	page up
:	jump to byte	/	search file	enter	edit mode
x	toggle hex	n	next match	?	help screen