HexWrite
A forensic binary and hex editor for Mac.
Mount a file read-only, read it as hex and ASCII, decode and disassemble the bytes under the cursor, and compare it with a second file. Reading is free. Saving changes to disk is part of HexWrite Pro.
Opens a file read-only and shows it as hex, with offsets and an ASCII column. Pick a .app and it opens the executable inside the bundle. The status bar shows the file’s MD5 and SHA-256 and, after an export, the digests of the written copy.
Decodes the selected bytes as integers, Float32, Float64 and Mac time, in little or big endian. Disassembles at the cursor as ARM64, Intel 64-bit, Intel 32-bit or ARM 32-bit using Capstone.
Marks bytes that start one of nine known file headers and names the format when you click one. The scrollbar track is tinted by sampled entropy, as a guide to where to look. It is not a complete scan.
Mounts a second file beside the first and outlines the differing bytes in both panes. It compares the rows currently loaded, not the whole file, and it gives no difference count.
Searches the file for hex or text (up to 1,000 matches) and replaces same-length matches after a confirmation. Inject ASCII, Base64 or a C array at the cursor, or repair a mismatched header. These stay in memory until you save.
Adds Save Patches, Surgical Export (a patched copy written to a new location), typing into the grid, and the Parser, Lua and Pattern Scan workspaces. Pattern Scan is YARA-style and matches literal bytes only. Lua runs in a sandbox.
HexWrite has no network entitlement and can send nothing to us. Zero Telemetry is always on: the app shows it as fixed text, with no switch to turn it off. In two packet captures, HexWrite’s own process sent no packets. The only traffic on its behalf is Apple’s: StoreKit looks up the Pro products and your purchases when the app starts and when the purchase screen opens, the system checks certificates alongside it, and Apple’s own sign-in sheet appears only if you press Restore Purchases or choose a plan. The Terms of Use and Privacy Policy links open in your browser.
Free to download. Reading is free: the hex grid, the Data Inspector, the disassembler and Split View. Pro adds writing to disk and the Parser, Lua and Pattern Scan workspaces, and either Pro plan unlocks them. The Annual Pass renews automatically. US prices.
Educational, military, and first-responder discounts apply; see Academic & Service Discounts.