binary-reconnaissance
Initial reconnaissance on binaries including checksec, file analysis, strings, and symbols. First step for any new target.
安装与使用
请根据来源仓库和你的 AI 工具说明安装此技能。先阅读技能文件和依赖要求,再添加到工作流。
查看来源 ↗使用指南技能说明
Binary Reconnaissance
First-look analysis of any new binary target. Run these checks before deeper analysis.
Checklist
-
File type:
file target -
Security mitigations:
checksec target -
Symbols:
nm targetorreadelf -s target -
Strings:
strings target | grep -i flag\|win\|shell -
Disassembly:
objdump -M intel -d target > target.asm
Checksec Interpretation
| Protection | Enabled | Disabled | Bypass |
|---|---|---|---|
| NX | Can't execute shellcode on stack | Shellcode works | ROP, ret2libc |
| Canary | Stack smash detected | No protection | Leak canary, brute force |
| PIE | Addresses randomized | Fixed addresses | Leak code address |
| RELRO | GOT protected | GOT writable | Can't use GOT overwrite |
Quick Wins to Look For
- Functions named
win,get_flag,shell,backdoor - Strings containing
flag,/bin/sh,cat flag -
system()orexecve()in PLT - No canary + no PIE = likely simple overflow
Output
Produce context/binary-info.md using the template.
使用示例
查看来源仓库中的使用示例与配置说明。
查看来源 ↗来源历史
- 收录时间
- 2026-01-20
- 索引更新时间
- 2026-02-04
- Branch
- main
收录与同步日期属于本站记录。源码修改历史请查看来源仓库。
GitHub ↗chat Comments (0)
Sign in to join the discussion and leave a comment.
No comments yet. Be the first to share your thoughts!