[THUGS(red)]

susfile

CLI file-forensics visualiser — draws a file as a defrag-style map of classified byte regions: magic, MIME, entropy, hashes, ELF/PE/Mach-O structure. Offline, no telemetry.

Tooling live
github.com open ↗

Point it at a file and it draws the thing: a defrag-style map of the bytes, every region classified and coloured — magic headers, MIME type, entropy, the compressed or encrypted stretches, the ELF, PE or Mach-O structure underneath. A hex view, an entropy chart, a byte histogram and the extracted strings sit alongside the map, so identifying an unknown blob is a matter of looking at it rather than running six tools in sequence. Pure Go, static binaries, and no network code at all. MIT licensed; Linux amd64, i386, arm64 and armv7.

forensics file-analysis entropy reverse-engineering tui go

go to github.com