This is the mail archive of the
binutils@sourceware.org
mailing list for the binutils project.
What have you done to strings!
- From: Russell Fulton <r dot fulton at auckland dot ac dot nz>
- To: "binutils at sourceware dot org" <binutils at sourceware dot org>
- Date: Tue, 28 Oct 2014 19:49:41 +0000
- Subject: What have you done to strings!
- Authentication-results: sourceware.org; auth=none
Hi folks,
I have just read that gnu version of string is a whole lot ‘smarter’ than one might have imagined. I had no idea that it used libbfd on target files. I regularly use strings on suspected malicious file in the naive belief that it was simply running through the file looking for contiguous strings of ascii chars.
Add functionality like smart parsing and decoding of executables by all means but *please* don’t make it default.
Russell (who has been using strings for around 30 years and has never felt the need to check the man page to find out that the behaviour has changed)
Russell