Thursday, February 24, 2011

rsymtab - Regenerating the symbol table for a statically linked and stripped executable

Official website: http://reverse.lostrealm.com/tools/rsymtab.html

The rsymtab suite is a collection of tools to assist in the identification of library code inside statically linked executables, and to automatically regenerate symbol table entries for that library code.

It uses the libbfd library, so should be portable to all platforms that libbfd supports. However, it also suffers from the same problems as libbfd. For ELF executables, this means that they must have a valid section header table.

No comments:

Post a Comment