tech:notes_fichiers_binaire_executable_exe_elf
Table des matières
Notes fichiers - binaire executable exe elf
Voir :
- scanelf
Voir aussi :
file exefile strings exefile objdump -s -j .rodata exefile ldd exefile
readelf -x .rodata hello_world.o
| -h | Displays the ELF header, which contains key information about the file’s structure. |
| -S | Lists all the sections in the ELF file, showing details about each section’s address, size, type, and attributes. |
| -l | Displays the program headers, which describe the segments used at runtime. |
| -s | Shows the symbol table, including symbols defined and used in the ELF file. |
| -r | Displays the relocation sections, showing how the binary modifies itself at runtime. |
| -d | Displays the dynamic section, which contains information about dynamic linking. |
| -n | Displays core notes, which include metadata such as the build ID. |
Connaître la version d'un exe
$ exiftool -FileVersion -ProductVersion MicrosoftEdgeSetup.exe File Version : 1.3.195.61 Product Version : 1.3.195.61
ou
7z l MicrosoftEdgeSetup.exe
Ou
wrestool --extract --raw --type=version MicrosoftEdgeSetup.exe
ou sudo apt-get install pev
Voir aussi : readpe
$ peres -v MicrosoftEdgeSetup.exe DEBUG: Length=1, String=B DEBUG: Length=12, String=GOOGLEUPDATE File Version: 65263.1213.1.0 Product Version: 1.3.195.61
Connaître la version d'un exe
file MicrosoftEdgeEnterpriseX64.msi
Avoir des infos sur un exe
Voir Connaître la version d'un exe
Lister les sections
objdump -h MicrosoftEdgeSetup.exe
Consulter une section spécifique
objdump -s --section .rdata MicrosoftEdgeSetup.exe
Autres
objdump -d /lib64/libc-2.9.so | fgrep -A5 '<time>:'
tech/notes_fichiers_binaire_executable_exe_elf.txt · Dernière modification : de Jean-Baptiste