~ Grep

Usage: [command]~[modifier][word,word][endmodifier][[column]][:line]

modifier:

• & all words must match to grep the line
• $[n] sort numerically / alphabetically the Nth column
• $! sort in inverse order
• + case insensitive grep (grep -i)
• ^ words must be placed at the beginning of line
• ! negate grep
• ? count number of matching lines
• ?. count number chars
• ?? show this help message
• :s..e show lines s-e
• .. internal 'less'
• ... internal 'hud' (like V_)
• {} json indentation

  • Example: iij ~{} for pretty printing json output. Can be combine with .. for less. Example: iij~{}..

• {path} json grep

  • The path is a json key. If the json output is an array, then use [array position]key. If the keys are nested, then use key.secondkey etc. Example ij~{bin.pic}

• {}.. less json indentation

endmodifier:

• $ words must be placed at the end of line

column:

• [n] show only column n
• [n-m] show column n to m
• [n-] show all columns starting from column n
• [i,j,k] show the columns i, j and k

Examples:

• i~:0 show first line of 'i' output
• i~:-2 show the second to last line of 'i' output
• i~:0..3 show first three lines of 'i' output
• pd~mov disasm and grep for mov
• pi~[0] show only opcode
• i~0x400$ show lines ending with 0x400

Tips

• .. Internal less

• [commandj]~{} json indentation

• ... HUD style navigation. really nice!

• Multiple grep patterns can be set by seperating them with a , . Example: i~canary,nx,pic

HUD style views / grepping

Use [somecommand] plus ~... for HUD style naviation and searching. Example screenshot shows HUD style grepping for mov operands

• & all words must match to grep the line
• $[n] sort numerically / alphabetically the Nth column
• $! sort in inverse order
• + case insensitive grep (grep -i)
• ^ words must be placed at the beginning of line

• ! negate grep

• grep -v

• ? count number of matching lines

  • 🚀You can use ~? to grep count the number of matching lines. asciinema
• ?. count number chars
• ?? show this help message
• :[s]-[e] show lines s-e

• .. internal 'less'

• _Example: pdf ~..

• ... 🚀 internal 'hud' (like V_) asciinema

• This is take any commands output and overlay a HUD on top of it for string type searching. Example: pdf ~... and then search for call