Comments (4)
Hi !
so checksec tries to locate the libc on your system since it's required to analyze ELF binaries in order to produce a list of fortified symbols and give a fortify_score
to the binary.
The get_libc()
function deals with the locating the libc using various methods.
I agree here that I could add a check whether we are running on Windows, and simply skip that search.
from checksec.py.
Thanks for the explanation. So I guess, as long as we are not checking elf files in windows environment, we still be able to obtain the same result when runs checksec.py in linux machine right?
from checksec.py.
Yes, exactly.
The only difference with Windows is that you won't get fortify scores for ELF files, since you don't have a libc to compare from.
There is still an option to provide an explicit libc file if you want to though
from checksec.py.
Thanks.
from checksec.py.
Related Issues (20)
- PE: stack_cookie value is invalid
- [ELF/PE/Mach-O] Brainstorming: Add checks for unstripped symbols/debug sections/profiling sections/embedded bitcode/...
- JSON Output Format Loses Information HOT 3
- Add DT_FLAGS_1.NOW for RELRO check HOT 1
- Incorrect PIE report for ld.so and musl libc.so HOT 3
- checksec.py bash script HOT 2
- should there be a note for how to do "scan process libs" in checksec.py? HOT 1
- __stack_chk_fail in PE files HOT 1
- License under the LGPL? HOT 1
- add checksum and filetype to report
- Reports AttributeError: module 'os' has no attribute 'uname' when using Windows release HOT 3
- Binary: ErrorParsingFailed is always ELF
- Testing: add E2E tests
- Add tests with pypy
- Fix multiprocessing coverage
- Upgrade to Python 3.9
- Output: SARIF format
- ELF: detect CET
- PE: add Authenticode signature check
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from checksec.py.