diff --git a/README.md b/README.md
index b386c6d..4cfb0bf 100644
--- a/README.md
+++ b/README.md
@@ -243,10 +243,16 @@ the [browser malware](#browser-malware) section.*
 
 *Reverse XOR and other code obfuscation methods.*
 
+* [ex_pe_xor](http://hooked-on-mnemonics.blogspot.com/2014/04/expexorpy.html)
+  & [iheartxor](http://hooked-on-mnemonics.blogspot.com/p/iheartxor.html) -
+  Two tools from Alexander Hanel for working with single-byte XOR encoded
+  files.
 * [NoMoreXOR](https://github.com/hiddenillusion/NoMoreXOR) - Guess a 256 byte
   XOR key using frequency analysis.
 * [unxor](https://github.com/tomchop/unxor/) - Guess XOR keys using
   known-plaintext attacks.
+* [XORSearch & XORStrings](http://blog.didierstevens.com/programs/xorsearch/) -
+  A couple programs from Didier Stevens for finding XORed data.
 * [xortool](https://github.com/hellman/xortool) - Guess XOR key length, as
   well as the key itself.