binsec

static binary detection tool for Linux security features

intro

binsec is a utility that statically checks ELF binaries for Linux kernel security features. It is a clone of the checksec.sh project, but written in Rust.

features

• Checks for: RELRO, NX, PIE, stack canary
• Fast: libgoblin is used as backend for low-level ELF parsing
• Convenient: deserialization and library module support

usage

To build and install:

$ cargo install binsec

To check for security features:

$ binsec ./my_binary

To deserialize to JSON:

$ binsec ./my_binary f=json

With more info:

$ binsec --info ./my_binary

Note that you do not need to supply any arguments/flags to ./my_binary, as binsec is a statically-based detection tool.

license

mit