4 ms·
Also works well on non-text files, similar to `strings`! I don't think it works as well, but can still be useful for quick checks.
by chaps 7y ago
Also works well on non-text files, similar to `strings`! I don't think it works as well, but can still be useful for quick checks.
- lizknope 7y agoI normally do: strings file | grep search_pattern
- cesarb 7y agoBut remember, always use "strings -a"! http://lcamtuf.blogspot.com/2014/10/psa-dont-run-strings-on-untrusted-files.html http://lcamtuf.blogspot.com/2014/10/psa-dont-run-strings-on-...
- steerablesafe 7y agoIt's the default since 2014: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=commit;h=7fac9594c41ab180979bdf5927ff7f7e1d13a9e9 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=c... edit: I would say that if you are doing forensics on an untrusted binary and you are not using a dedicated VM for it then you are not careful enough. objdump, nm are still attack vectors, not to mention debuggers and disassemblers.