Hex viewer

Available in

SPA (main panel) · Marimo sandbox

Color-coded hex / ASCII dump viewer. Virtualized rows via @tanstack/react-virtual; paged reads through the /api/inspect/hex-raw endpoint.

Color classifications

Class

Meaning

INVARIANT

identical across all runs (structural constants, .rodata)

STRUCTURAL

low variance; typically pointers that survive ASLR

POINTER

mid variance; ASLR-shifted pointers

KEY_CANDIDATE

high variance; possible cryptographic material

Overlays

  • Structure overlay — colored fields from the structure library (TLS SSL_SESSION, SSH session_id layouts, …).

  • Neighborhood overlay — variance slice around a selected byte offset.

Hex viewer in dark theme with a TLS structure overlay coloring bytes by field role

Hex viewer with structure overlay applied.