sábado, 17 de julio de 2010

Mostrar informacion de binarios ELF

Si necesita conocer informacion de algun binario ELF , puede usar la aplicacion readelf.
Para mas informacion lea su manual --> man readelf
Uso:
readelf -a binariofile
Muestra una salida como esta:


ELF Header:
Magic: 7f 45 4c 46 01 01 01 00 00 00 00 00 00 00 00 00
Class: ELF32
Data: 2's complement, little endian
Version: 1 (current)
OS/ABI: UNIX - System V
ABI Version: 0
Type: EXEC (Executable file)
Machine: Intel 80386
Version: 0x1
Entry point address: 0x805cc00
Start of program headers: 52 (bytes into file)
Start of section headers: 824720 (bytes into file)
Flags: 0x0
Size of this header: 52 (bytes)
Size of program headers: 32 (bytes)
Number of program headers: 10
Size of section headers: 40 (bytes)
Number of section headers: 31
Section header string table index: 28

Section Headers:
[Nr] Name Type Addr Off Size ES Flg Lk Inf Al
[ 0] NULL 00000000 000000 000000 00 0 0 0
[ 1] .interp PROGBITS 08048174 000174 000013 00 A 0 0 1
[ 2] .note.ABI-tag NOTE 08048188 000188 000020 00 A 0 0 4
[ 3] .note.SuSE NOTE 080481a8 0001a8 000018 00 A 0 0 4
...................
....................

No hay comentarios:

Publicar un comentario