Forensics & Binary
P-list Viewer Binary Inspector
Inspect binary data with P-list Viewer and review the recovered details. Add the content, choose the checks, and review the reported details.
This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.
P-list Viewer Binary Inspector performs binary structure inspection on supplied binary or media data. The operation returns parsed fields, file-tree entries, offsets, permissions, or binary structure details. This result is specific to P-list Viewer Binary Inspector's selected byte or media interpretation.
The operation returns parsed fields, file-tree entries, offsets, permissions, or binary structure details. This result is specific to P-list Viewer Binary Inspector's selected byte or media interpretation. This result runs in the browser for this catalog category. Processing runs in the browser.
Binary inspection reads selected structure fields; it does not establish authenticity, intent, or safety.
Instructions
- Provide file or files for this tool.
- Use a public fixture first. This applies to P-list Viewer Binary Inspector.
- Record the input format and offset basis with each observation. This applies to P-list Viewer Binary Inspector.
- Validate important fields with an independent parser before reporting them. This applies to P-list Viewer Binary Inspector.
Example
Input: A small public ELF, plist, or binary fixture accepted by the operation. Operation: P-list Viewer Binary Inspector.
Settings: P-list Viewer Binary Inspector: Provide the supported file or structured value. Select the input format and architecture or offset option shown. Keep the original file unchanged while inspecting a copy.
Result: The operation returns parsed fields, file-tree entries, offsets, permissions, or binary structure details. This result is specific to P-list Viewer Binary Inspector's selected byte or media interpretation.
Limits
- P-list Viewer Binary Inspector: Parsers can reject malformed, truncated, or unsupported variants.
- P-list Viewer Binary Inspector: Reported fields do not prove file provenance or runtime behavior.
- P-list Viewer Binary Inspector: Inspection does not execute or safely sandbox embedded code.