Answer the question
In order to leave comments, you need to log in
elf identification?
The PE (win) and mach-o (mac) formats can contain metadata about themselves in the code signature section. From them, you can identify what kind of binary it is, and check if it has been modified.
Is there something similar for elf (linux)?
I would like to get something like this:
$ codesign -v -d ./trololo
Executable=/Users/Antelle/Documents/Temp/trololo
Identifier=com.apple.ping
***
Answer the question
In order to leave comments, you need to log in
for Linux, the same method is used, only without specifying an entry in the PE Security Directory www.sco.com/developers/gabi/1998-04-29/ch4.eheader.html - sign the file and add a signature in the form of an overlay, indicating the link as the last expandable data section (BUT not code)
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question