{{tag>EXE MSI Binaire}} # Notes fichiers - binaire executable exe elf Voir : * scanelf Voir aussi : * [[Prometheus windows_export i386 compilation go lang]] ~~~bash file exefile strings exefile objdump -s -j .rodata exefile ldd exefile ~~~ ~~~bash readelf -x .rodata hello_world.o ~~~ | | | | - | ----------------------------------------------------------------------------------------------------------------- | |-h | Displays the ELF header, which contains key information about the file’s structure. | |-S | Lists all the sections in the ELF file, showing details about each section’s address, size, type, and attributes. | |-l | Displays the program headers, which describe the segments used at runtime. | |-s | Shows the symbol table, including symbols defined and used in the ELF file. | |-r | Displays the relocation sections, showing how the binary modifies itself at runtime. | |-d | Displays the dynamic section, which contains information about dynamic linking. | |-n | Displays core notes, which include metadata such as the build ID. | ## Connaître la version d'un exe ~~~bash $ exiftool -FileVersion -ProductVersion MicrosoftEdgeSetup.exe File Version : 1.3.195.61 Product Version : 1.3.195.61 ~~~ ou ~~~bash 7z l MicrosoftEdgeSetup.exe ~~~ Ou ~~~bash wrestool --extract --raw --type=version MicrosoftEdgeSetup.exe ~~~ ou sudo apt-get install pev Voir aussi : readpe ~~~ $ peres -v MicrosoftEdgeSetup.exe DEBUG: Length=1, String=B DEBUG: Length=12, String=GOOGLEUPDATE File Version: 65263.1213.1.0 Product Version: 1.3.195.61 ~~~ ### Connaître la version d'un exe ~~~bash file MicrosoftEdgeEnterpriseX64.msi ~~~ ### Avoir des infos sur un exe Voir **Connaître la version d'un exe** Lister les sections ~~~bash objdump -h MicrosoftEdgeSetup.exe ~~~ Consulter une section spécifique ~~~bash objdump -s --section .rdata MicrosoftEdgeSetup.exe ~~~ ## Autres ~~~bash objdump -d /lib64/libc-2.9.so | fgrep -A5 ':' ~~~