4 ms·

What is binary stripping?

• Buge 10y ago
  Compiled programs sometimes contain the names of the functions. To reduce binary size and/or discourage reverse engineering, the names can be stripped out.
  • cperciva 10y ago
    Not just names of functions; also names of variables and potentially a great many other things. Stripping binaries generally refers to removing debugging information of all sorts.
    • HillRat 10y ago
      Exactly. In this case -- working from antique memory here -- Solaris binaries were normally stripped, while the compromised versions placed by the hacker weren't, which was an immediate red flag. The system was compromised as part of a very large-scale, probably North Korean, attack that exploited an OpenWindows buffer overflow bug that was fixed many patch-revs ago by the time I saw the system (and shouldn't have been exploitable over the Internet anyway, but the firewall was also not properly set up at the time of compromise). Drive-by hacking, in other words. Luckily their compromised binaries -- specifically a 'ps' that filtered out the hackers' background attack processes -- weren't particularly robust to arbitrary input.
• DCoder 10y ago
  https://en.wikipedia.org/wiki/Strip_(Unix) https://en.wikipedia.org/wiki/Strip_(Unix)