linux 之 strings 命令

strings [ -a ] [ - ] [ -o ] [ -t Format ] [ -n Number ] [ -Number ] [ file ... ]

-a --all：扫描整个文件而不是只扫描目标文件初始化和装载段-f –print-file-name：在显示字符串前先显示文件名-n –bytes=[number]：找到并且输出所有NUL终止符序列- ：设置显示的最少的字符数，默认是4个字符-t --radix={o,d,x} ：输出字符的位置，基于八进制，十进制或者十六进制-o ：类似--radix=o-T --target= ：指定二进制文件格式-e --encoding={s,S,b,l,B,L} ：选择字符大小和排列顺序:s = 7-bit, S = 8-bit, {b,l} = 16-bit, {B,L} = 32-bit@ ：读取中选项

> strings `which pwd` | more/lib64/ld-linux-x86-64.so.2libc.so.6fflushstrcpy__printf_chkreaddirsetlocalembrtowcstrncmpoptindstrrchrdcgettextclosedirfchdir...

> cd /usr/bin && strings -f * | grep "name"

strings /lib64/libc.so.6 | grep GLIBCGLIBC_2.2.5GLIBC_2.2.6GLIBC_2.3GLIBC_2.3.2GLIBC_2.3.3GLIBC_2.3.4GLIBC_2.4GLIBC_2.5GLIBC_2.6GLIBC_2.7GLIBC_2.8GLIBC_2.9GLIBC_2.10GLIBC_2.11GLIBC_2.12GLIBC_2.13GLIBC_2.14GLIBC_2.15GLIBC_2.16GLIBC_2.17GLIBC_PRIVATE...

> strings -s /  ls | more/lib64/ld-linux-x86-64.so.2/    ...$8H/T$@H/D$@H/D$@H/=u|!/D$@H9/D$8t      /D$@H/=^y!/=]y!/=Hy!/=+y!/=/y!/G(H;G0/5 s!/-Is!/D$P??/D$@H/D$PL/5|u!/D$8H/D$@H/D$8H/L$$H/L$$L/D$(H/D$@I/D$@H/-Vj!/t$81/=9r!/=P_!/>v|<?/$A\A]A^/<=tJ/[]A\A]/=~w!/5{w!/=lw!/=!w!/AWAVD/ATUSH/=&v!/[]A\A]A^A_/ATH9/G(H;G0sgH/W(H;W0s/[]A\/ATSH/[A\A]A^A_]/AUATUSH/HcN0/-,^!/G(H;G0s%H/[]A\A]/X[]A\A]/O(H;O0sMH/=:n!/[]A\/O@H9N@H/NxH9OxH/ |&)/OhI9IhI/NXH9OXH/=wi!/G(H;G0s/=Lh!/=[h!/=^h!/t|Hc/AUATH9/5le!/%h[!/-~e!/[]A\A]A^/UUUUUUU/ATUS/[]A\/[]A\/AWAVAUATL/[]A\A]A^A_/=Qa!/=$a!/D$ H/D$(H/D$0H/D$8H/D$@H/D$HH/D$PH/D$XH/D$`H/D$hH/D$pH/D$xH/='`!/=q`!/AWAVAUI/ATUH/-o^!/       tJ=/=C^!/=M]!/H9S /H9K /[]A\A]A^A_/=}Z!

> strings -t d ls | more    568 /lib64/ld-linux-x86-64.so.2    648         _k+   3817 libselinux.so.1   3833 __gmon_start__   3848 _init   3854 fgetfilecon   3866 freecon   3874 lgetfilecon   3886 _fini   3892 libcap.so.2   3904 cap_to_text   3916 cap_free   3925 cap_get_file   3938 libacl.so.1   3950 acl_get_entry   3964 acl_get_tag_type   3981 acl_extended_file   3999 libc.so.6