Reverse enginerring getting started

Abstractor

  • Application Binary Interface (ABI)

How to check the binary format inform

1# you can view the program format and linked information
2file xxxxx
3# view the detail elf
4readelf -a xxxxx
5# to detect the dynamic libraries be used
6ldd xxxxx
7# view the header details
8hexdump -C -n 64  xxxxx

Some command to view headers

  • dumpelf
  • elfls -p /bin/ps
  • eu-readelf –section-headers /bin/ps
  • readelf -S /bin/ps
  • objdump -h /bin/ps

Posts series about knowledge