Please recommend a hex editor for shell

Question

Can you recommend a hex editor that can be run from shell? I need to be able to edit not only view the content.

http://stackoverflow.com/questions/5498197/need-a-good-hex-editor-for-linux — Ciro Santilli OurBigBook.com, May 22 '15 at 15:39
Depends on the size of the file: When not too large hexl-mode of Emacs might do. I think you should specify what you actually mean with "run from the shell": Use inside shell scripts? — U. Windl, Nov 20 '24 at 09:44

score 142 · Answer 1 · edited Jan 23 '19 at 14:29

142

xxd

This tool is the most commonly available I have found for this type of task (available by default on both latest Ubuntu and macOS). You can remove the ascii readable part on the right if needed using -p and you can revert (change ascii input to binary data) using the -r function. Here are some simple example uses:

Converting to hex with ascii view:

echo example | xxd

Converting to a hexdump (no ascii view on the right):

echo example | xxd -p

Converting from a hexdump back to binary data:

echo 746573740a | xxd -p -r

You can get much more complex with this in shell scripts. I have actually used this and "dd" to scan for specific sequences and modify them in a predefined fashion all from a shell script using nothing but bash, dd, and xxd. You actually don't need dd for this either as you can "seek" to a specific location and write to that location the byte sequence you need. The biggest advantage to this approach is its easily scriptable.

edited Jan 23 '19 at 14:29

Gaurang Tandon

154

answered Jan 14 '15 at 05:44

Goblinlord

1,763
2
11
8

3

xxd seems to be installed on Ubuntu 16.04 by default, which is SWEET! Thanks! – GlenPeterson Sep 30 '16 at 00:44
Also available by default on MacOS! – thom_nic Jul 12 '17 at 12:41
1

The echo command substitutes newline at the end of the line. To avoid this, you can call the command like this echo -n example | xxd – Maxim Mandrik Jul 16 '22 at 10:17
10

The question is asking for an editor, not a viewer. xxd is a viewer – Baruch Oct 23 '22 at 20:19
5

@Baruch xxd can convert from binary to human-readable hex and back again, so paired with a regular text editor it can actually cover some use cases for a hex editor. – Thomas Jan 25 '23 at 07:50
I used xdd -r to convert a hexdump back to a binary. – Denis Apr 05 '23 at 12:26

score 47 · Answer 2 · answered Jun 02 '14 at 16:32

47

There is also DHEX

apt-cache show dhex

ncurses based hex editor with diff mode

This is more than just another hex editor: It includes a diff mode, which can be used to easily and conveniently compare two binary files. Since it is based on ncurses and is themeable, it can run on any number of systems and scenarios. With its utilization of search logs, it is possible to track changes in different iterations of files easily.

If you are not familiar with vim or emacs, this one doesn't seem to have much of a learning curve.

answered Jun 02 '14 at 16:32

mivk

5,821

3

Only downside to dhex imho is it cannot insert/delete bytes. Otherwise it is a very nice console hex editor. – Nicholi Nov 18 '16 at 00:22
When I run "dhex /path/to/big/file", I get "error opening inputfile /path/to/big/file". I like dhex and use it all the time for normal sized files. – sondra.kinsey Aug 17 '17 at 16:16
@sondra.kinsey : I just tried a 20GB file on my 8GB RAM machine, and didn't have a problem. This is on Ubuntu 16.04 64 bit, with dhex 0.68-2build1 (amd64). So it should work. – mivk Aug 18 '17 at 17:35
@mivk, I tried dhex unsuccessfully with a 44GB file using dhex_0.68-2build1_i386 on Ubuntu 17.04 with 3GB RAM. hexedit and wxHexEditor open the same file without complaint. – sondra.kinsey Aug 19 '17 at 14:37
1

@sondra.kinsey : maybe a problem/bug with the 32bit version of dhex and files over 4GB? – mivk Aug 19 '17 at 16:49

score 42 · Answer 3 · edited Oct 18 '16 at 14:42

42

You might be able to use vi/vim as a hex editor too (it can call xxd).

Enter hex mode:

:%!xxd

Exit hex mode:

:%!xxd -r

Source: Using vi as a hex editor

edited Oct 18 '16 at 14:42

friederbluemle

462

answered Sep 12 '13 at 14:37

klcant

579

5

I'd be careful with that. I've found :%!xxd adding new characters(i.e. new line) to the file. – Quazi Irfan Dec 06 '16 at 03:46
3

@iamcreasy it's not xxd who does this: rather Vim itself. – Ruslan Jun 05 '17 at 15:44
7

Don't forget to :set binary! Otherwise, VIM is likely to corrupt the file by adding a line-end (CR/LF/CRLF) at the end of the file (depending on what you have the format set to (set ff=[mac/unix/dos])). This is highly likely to break executables and data binaries. And it does. A lot. Making sure VIM is in binary mode will prevent that from happening. – Braden Best Feb 03 '18 at 04:57
file didn't save and gave conversion error. Even after :set binary – wick Jan 03 '21 at 13:06
I would add this link for more info as well: https://vi.stackexchange.com/questions/343/how-to-edit-binary-files-with-vim – Shayan Nov 11 '21 at 15:08

score 25 · Accepted Answer · answered Sep 12 '13 at 13:37

25

emacs has a hexl-mode for hex editing.

answered Sep 12 '13 at 13:37

psusi

38,171

5

hexl-mode isn't suitable for large files or disk partitions, since it loads the whole file into an emacs buffer. It's great for small files if you're already comfortable with emacs. – Peter Cordes Feb 15 '15 at 23:36
2

@PeterCordes, for editing a disk, simply dd the region you want to edit into a file and open that in emacs, then dd it back. – psusi Feb 17 '15 at 15:21
8

@psusi The problem is, I shouldn't have to go to that effort to edit a file – Cole Tobin Nov 11 '15 at 03:54
1

@ColeJohnson, we aren't talking about editing a file; we're talking about editing an entire raw hard disk. – psusi Nov 11 '15 at 23:15
2

@psusi On my Windows machine, I can use HxD and open up a disk just like any other file. – Cole Tobin Nov 15 '15 at 06:54

score 14 · Answer 5 · answered Aug 17 '17 at 04:28

14

This one is dead simple to use:

sudo apt-get install hexcurse

answered Aug 17 '17 at 04:28

HenryRootTwo

241

3

This is the one to beat. All other answers seem like just hex dumps or unnecessary vim acrobatics. Hex editor should have a multiple cursor, one on the hex, and one on the output representation. – DannyB Feb 24 '22 at 13:54

score 11 · Answer 6 · answered Oct 03 '17 at 20:38

I know this is an old question, but I was dissatisfied with all of the answers here. I was looking for a hex editor that allowed for me to create my own binary files (aka insert mode) and could handle very large files.

I came across tweak, which fulfills both of these requirements, as well as the OPs.

Tweak supports insert mode (not particularly useful if you're editing an executable file or a filesystem image, but can be extremely handy in other file formats such as PNG).

Cutting, copying and pasting within the file you are editing is extremely efficient. No matter how big the chunk of data you are moving around - even if it's a 200Mb section of a CD image - Tweak will always perform the operation effectively instantly.

Tweak supports lazy loading of the input file: rather than sucking it all into memory straight away, it simply remembers which parts of the editing buffer are copies of which parts of the input file and refers to the file on disk when it needs to. Tweak only has to take significant time when you genuinely need it to read the entire file. The only two operations with this property are searching, and saving the modified version of the file to disk. Everything else is instant.

Hmmm, a program that's ready to modify the buffer with every mistaken keystroke, and doesn't instruct the user how (or exit!) to use the program. Yuck!
Turns out the "exit" command is the same as emacs... but it didn't work for me the first time, so I tried everything else I could think of before trying it again. I gave up on emacs decades ago, but remember the most important command: Ctrl-X, Ctrl-C.

If you like emacs, you might like tweak, but for me it was awkward. I may try it again if I really need editing. Run man tweak from the terminal for an overview and list of commands. — Lambart, Aug 14 '19 at 00:47
@Lambart The whole point of tweak's insert mode is to modify the buffer, so your point isn't really valid there. Also, you should read the man page before using it anyway. Not doing so and then complaining that it doesn't tell you how to exit is just lazy. — Gogeta70, Aug 16 '19 at 15:04

score 4 · Answer 7 · edited May 23 '17 at 12:39

4

Bless Hex Editor is a is a binary (hex) editor and currently provides the following features:

Efficient editing of large data files and block devices.
Multilevel undo - redo operations.
Customizable data views.
Fast data rendering on screen.
Multiple tabs.
Fast find and replace operations.
A data conversion table.
Advanced copy/paste capabilities.
Highlighting of selection pattern matches in the file.
Plugin based architecture.
Export of data to text and html (others with plugins).
Bitwise operations on data.
A comprehensive user manual.

You can dounload it from here: http://packages.debian.org/sid/all/bless/download.

To install it, see How do I install a .deb file via the command line?

Need more?

https://stackoverflow.com/questions/5498197/need-a-good-hex-editor-for-linux

edited May 23 '17 at 12:39

Community

1

answered Sep 12 '13 at 12:17

Radu Rădeanu

174,437

12

The question is asking for a command line editor. – psusi Sep 12 '13 at 13:39
2

@psusi No, the OP asked about a hex editor that can be run from shell, not inside shell/terminal. It can be run from shell using bless command after is installed. – Radu Rădeanu Sep 12 '13 at 14:05
39

There is nothing you can not run from the shell; he wouldn't have mentioned it unless he meant command line. – psusi Sep 12 '13 at 17:50
Actually I was searching "ubuntu hex viewer" meaning window-based viewer in mind and the search site brought me here. So this answer was what I had search for. – kinORnirvana May 16 '18 at 16:37

score 3 · Answer 8 · answered Jan 06 '15 at 22:01

3

Try hexed, it's made for use in scripts and make files.

answered Jan 06 '15 at 22:01

b.zaar

31

score 2 · Answer 9 · answered Sep 11 '24 at 08:44

You might as well use the good old Midnight Commander: mc.

To install:

sudo apt-get update
sudo apt-get install mc

The mc command gives you an ncurses like file explorer. It makes heavy use of the function buttons in the top row of the keyboard (F1 - F10). A line at the bottom of the console indicates the function assigned to a specific function key. To save screen space the F is omitted, so 3View means press F3 to view the file.

Warning:
F4 just fires up your default editor. Use F3to view the file and then switch into HEX mode with F4.

Here's a rough list of key presses:

Use cursor keys to move to the file in question
Press F3 - View to look at the file (Do NOT press F4 - Edit)
Press F4 - Hex to switch into hex editing mode
Use the cursor keys to move around in the file
Press TAB to toggle the edit cursor between the HEX and ASCII column
Edit to your liking
Press F7 - HxSrch to search in the file (HEX or ASCII)
Press F6 - Save to save your work
Press F10 - Quit to quit the hex editor
Press F10 - Quit again to quit the Midnight Commander

The mouse might work as well, just try to click on the function button line at the bottom of the screen.

To verify the work I usually dump the file before and after editing and diff the dump:

xxd hexfile > before
# edit with mc
mc
xxd hexfile > after
diff before after

Instead of xxd the cli tool hd works as well. hdmight already be installed on your system.

I had no permission to install anything on the system I was working on and this solution turned out to be quite helpful! — Gergely Lukacsy, Sep 25 '25 at 15:13

score 2 · Answer 10 · answered Aug 21 '17 at 17:36

2

There is also ht. Install it as

sudo apt-get install ht

and then run it by typing hte.

I haven't tried it with really large files/partitions, though.

answered Aug 21 '17 at 17:36

fjflores

121

Olivier Lasne · Answer 11 · 2024-09-21T23:05:46.373

I have written hextazy an hexadecimal editor with colors written in rust.

It has the following features:

colored output, based on the byte value.
search, for both hex values and ascii strings.
undo and redo (Ctrl+Z, Ctrl+Y).
insert mode (Ctrl+J)
delete byte (Del key, only in insert mode)
jump to an address with the command :0xaddress.

You can find pre-compiled binaries on the release page.

The project is developed on Github here: https://github.com/0xfalafel/hextazy

Please recommend a hex editor for shell

11 Answers11

Linked