-
Notifications
You must be signed in to change notification settings - Fork 0
binParser
Konychev Valera edited this page Mar 17, 2024
·
4 revisions
Cross platform binary parser. Doesn't matter OS you prefer to use or binary filetype you need to parse. Potentially it can be used to replace readelf, otool, DUMPBIN
The followed table shows support platforms and binary formats. macho files format also includes fat binaries.
MacOsX | Win | Linux | |
---|---|---|---|
macho64 | X | X | X |
fatMacho64 | X | X | X |
elf64 | X | X | X |
PE64 | X | X | X |
Short Arg | Long Arg | Description |
---|---|---|
-h | --header | print all headers |
-m | --mcpu | set up cpu type for parser, used for fat binaries |
-r | --relocs | print relocations |
--segments | print all segments | |
-s | --symbols | print all symbols |
-S | --sections | print all section |
--code-sign | macho: print code sign | |
--fat-header | macho: print fat header information if it's | |
--fixups | macho: print all fixups information | |
--func-starts | macho: print info about function starts | |
-l | --lcom | macho: print load commands |
-d | --delay-imports | pe: print delay imports |
--dos-header | pe: print dos header | |
-e | --exports | pe: print exports |
--file-header | pe: print file header | |
-i | --imports | pe: print imports |
--opt-header | pe: print opt header | |
--dynamic | elf: print .dynamic section | |
--version-info | elf: print symbols version info from sections:.gnu.version, .gnu.version_r |
binParser --mcpu=aarch64 -s [PATH_TO_FAT_MACHO64]
If you work with fat binary without specifying arch type, binParser will try to extract information related to its own arch.