二進制文件分析工具-hexdump使用指南

一 概念:

hexdump是Linux下的一個二進制文件查看工具，它可以將二進制文件轉換為ASCII、八進制、十進制、十六進制

格式進行 查看。

 

二 用法簡介:

   該工具的用法十分簡單，具體如下所示:

 

hexdump: 不適用的選項 -- -
usage: hexdump [-bcCdovx] [-e fmt] [-f fmt_file] [-n length]
               [-s skip] [file ...]
       hd      [-bcdovx]  [-e fmt] [-f fmt_file] [-n length]
               [-s skip] [file ...]

 

 

 

三 應用實例：

  該工具用法十分簡單，下面以一個c代碼例子來說明:

 

#include <stdio.h>

int main()
{
        printf("hello hexdump");
}
~            

 

   通過這個查看該bin文件的編譯信息:

➜  hexdump git:(master) ✗ hexdump -C test 
00000000  7f 45 4c 46 02 01 01 00  00 00 00 00 00 00 00 00  |.ELF............|
00000010  03 00 3e 00 01 00 00 00  60 10 00 00 00 00 00 00  |..>.....`.......|
00000020  40 00 00 00 00 00 00 00  78 39 00 00 00 00 00 00  |@.......x9......|
00000030  00 00 00 00 40 00 38 00  0d 00 40 00 1f 00 1e 00  |....@.8...@.....|
00000040  06 00 00 00 04 00 00 00  40 00 00 00 00 00 00 00  |........@.......|
00000050  40 00 00 00 00 00 00 00  40 00 00 00 00 00 00 00  |@.......@.......|
00000060  d8 02 00 00 00 00 00 00  d8 02 00 00 00 00 00 00  |................|

*
00003000  00 00 00 00 00 00 00 00  08 40 00 00 00 00 00 00  |.........@......|
00003010  47 43 43 3a 20 28 55 62  75 6e 74 75 20 39 2e 33  |GCC: (Ubuntu 9.3|
00003020  2e 30 2d 31 37 75 62 75  6e 74 75 31 7e 32 30 2e  |.0-17ubuntu1~20.|
00003030  30 34 29 20 39 2e 33 2e  30 00 00 00 00 00 00 00  |04) 9.3.0.......|
00003040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|