fx

README

🔎 Forensic Examiner

The Swiss Army Knife for examining text files. Combining the most useful functionality from (z)cat, (z)less, head, tail, grep, hexdump, sha256sum, sha1sum, md5sum, wc and jq into one performant forensic tool.

AS THIS IS A FORENSIC TOOL, NO WRITE ACCESS MUST BE GRANTED OR WILL BE USED.

Install

$ make install

Usage

$ fx [-r] [-h | -t] [-n # | -c #] [-x | -e PATTERN] [-o FILE] [-b FILE] [PATH ... | -]

Available options:

• -r Raw
• -h Head limit
• -t Tail limit
• -n Lines count
• -c Bytes count
• -x Hexdump mode
• -e Pattern value
• -o Output file
• -b Evidence file

Standard options:

• --help Usage information
• --version Version number

Keyboard

General

Shortcut	Action
Esc	Exit
F1 / Ctrl + l	Less mode
F2 / Ctrl + g	Grep mode
F3 / Ctrl + x	Hex mode
F4 / Ctrl + Space	Goto mode
F9	Show file(s) counts
F10	Show file(s) MD5
F11	Show file(s) SHA1
F12	Show file(s) SHA256
Tab	Load next file
Shift + Tab	Load prev file
Shift + Up	Scroll page up
Shift + Down	Scroll page down
Shift + Left	Scroll page left
Shift + Right	Scroll page right
Ctrl + Shift + Up	Scroll to start
Ctrl + Shift + Down	Scroll to end
Ctrl + r	Reload file
Ctrl + q	Close file
Ctrl + t	Cycle themes
Ctrl + f	Toggle file follow
Ctrl + n	Toggle line numbers
Ctrl + w	Toggle wrap text
Ctrl + s	Save buffer content
Ctrl + c	Copy buffer content

Less Mode

Shortcut	Action
Space	Scroll page down

Grep Mode

Shortcut	Action
Print / Ctrl + e	Save evidence in file
Enter	Append filter
Backspace	Delete filter
Alt + Up	Prev input in history
Alt + Down	Next input in history
Ctrl + v	Paste as input
Any Key	Filter buffer content

Config

Located under ~/.fxrc.

Theme = "Monokai"
Follow = true  # Follow file
Line = true    # Line numbers
Wrap = true    # Wrap text

Environment

FX_THEME=Monokai

Themes

• Monokai
• Catppuccin-Latte
• Catppuccin-Frappe
• Catppuccin-Macchiato
• Catppuccin-Mocha
• Ansi
• Matrix
• Monochrome

---

Supported by codecentric opt time.