Using strings for static analysis

October 24, 2016
static-analysis

What is strings

A quick lookup in the man pages gives us the following short description.

strings - find the printable strings in a object, or other binary, file

What’s inside /bin/ls?

$ strings /bin/ls
...
%s%s %*u %-*s  %-*s
%-*s
%3d, 0x%08x
warn: LSCOLORS should use characters a-h instead of 0-9 (see the manual page)
error: invalid character '%c' in LSCOLORS env var
allow
read
list
...

This is just a snippet of strings for this particular binary. As you can see, we have some format strings, some errors and some other keywords.