[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-detail-43250-en":3,"doc-seo-43250-105":30,"detail-sidebar-cat-0-en-105":96},{"code":4,"msg":5,"data":6},0,"success",{"doc_id":7,"user_id":8,"nickname":9,"user_avatar":10,"doc_module":4,"category_id":11,"category_name":12,"doc_title":13,"doc_description":14,"doc_content":15,"file_id":16,"file_url":17,"file_type":18,"file_size":19,"view_count":20,"is_deleted":4,"is_public":21,"is_downloadable":21,"audit_status":21,"page_count":22,"language":23,"language_code":24,"site_id":25,"html_lang":24,"table_of_contents":26,"faqs":27,"seo_title":13,"seo_description":14,"update_tm":28,"read_time":29},43250,7971461740909,"Levi","https://ap-avatar.wpscdn.com/davatar_155a257f0dc6eb9ab79c44ca47cae57d",6,"Technology","Practical Binary Analysis: Build Your Own Linux Tools for Binary Instrumentation, Analysis, and Disassembly","Practical Binary Analysis explains how to build and use Linux tooling for inspecting and reversing compiled software, covering binary formats, disassembly, and step-by-step workflows. The book progresses from fundamentals such as ELF and PE anatomy and basic Linux binary analysis to advanced topics including customized disassembly, binary instrumentation, dynamic taint analysis, and symbolic execution with practical frameworks. It also includes an x86 assembly crash course and supporting appendix implementations, enabling hands-on experimentation for security research and reverse engineering.","Practical Binary Analysis  \nBuild Your Own Linux Tools for Binary Instrumentation, Analysis, and Disassembly  \nDennis Andriesse  \nForeword by Herbert Bos  \nPractical Binary analysis  \nPractical Binary analysis  \nBuild your Own linux tools for Binary instrumentation, analysis, and Disassembly  \nby Dennis Andriesse  \nSan Francisco  \nPractical Binary analysis. Copyright © 2019 by Dennis Andriesse.  \nAll rights reserved. No part of this work may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage or retrieval system, without the prior written permission of the copyright owner and the publisher.  \nISBN-10: 1-59327-912-4  \nISBN-13: 978-1-59327-912-7  \nPublisher: William Pollock  \nProduction Editor: Riley Hoffman  \nCover Illustration: Rick Reese  \nInterior Design: Octopod Studios  \nDevelopmental Editor: Annie Choi  \nTechnical Reviewers: Thorsten Holz and Tim Vidas  \nCopyeditor: Kim Wimpsett  \nCompositor: Riley Hoffman  \nProofreader: Paula L. Fleming  \nFor information on distribution, translations, or bulk sales, please contact No Starch Press, Inc. directly:  \nNo Starch Press, Inc.  \n245 8th Street, San Francisco, CA 94103 phone: 1.415.863.9900; [info@nostarch.com](info@nostarch.com)[ ](info@nostarch.com)[www.nostarch.com](www.nostarch.com)  \nLibrary of Congress Cataloging-in-Publication Data  \nNames: Andriesse, Dennis, author.  \nTitle: Practical binary analysis : build your own Linux tools for binary instrumentation, analysis, and disassembly / Dennis Andriesse.  \nDescription: San Francisco : No Starch Press, Inc., [2019] | Includes index. Identifiers: LCCN 2018040696 (print) | LCCN 2018041700 (ebook) | ISBN 9781593279134 (epub) | ISBN 1593279132 (epub) | ISBN 9781593279127 (print)| ISBN 1593279124 (print)  \nSubjects: LCSH: Disassemblers (Computer programs) | Binary system (Mathematics) | Assembly languages (Electronic computers) | Linux.  \nClassification: LCC QA76.76.D57 (ebook) | LCC QA76.76.D57 A53 2019 (print) | DDC 005.4/5--dc23  \nLC record available at [https://lccn.loc.gov/2018040696](https://lccn.loc.gov/2018040696)  \nNo Starch Press and the No Starch Press logo are registered trademarks of No Starch Press, Inc. Other product and company names mentioned herein may be the trademarks of their respective owners. Rather than use a trademark symbol with every occurrence of a trademarked name, we are using the names only in an editorial fashion and to the benefit of the trademark owner, with no intention of infringement of the trademark.  \nThe information in this book is distributed on an “As Is” basis, without warranty. While every precaution has been taken in the preparation of this work, neither the author nor No Starch Press, Inc. shall have any liability to any person or entity with respect to any loss or damage caused or alleged to be caused directly or indirectly by the information contained in it.  \nFor Noortje and Sietse  \nabout the author  \nDennis Andriesse has a PhD in system and network security and uses binary analysis daily in his research. He is one of the main contributors to PathArmor, a control-flow integrity system that defends against controlflow hijacking attacks such as ROP. Andriesse was also one of the attack developers involved in the takedown of the GameOver Zeus P2P botnet.  \nabout the technical reviewers  \nThorsten Holz is a professor in the Faculty of Electrical Engineering and Information Technology at Ruhr-University Bochum, Germany. His research interests include technical aspects of secure systems with a focus on systems security. Currently, his work concentrates on reverse engineering, automated vulnerability detection, and studying the latest attack vectors.  \nTim Vidas is a student of hacking. Over the years, Tim has led the DARPA CGC infrastructure team, championed innovation at Dell Secureworks, andoverseen CERT’s research group for digital forensics. He has a PhD from Carnegie Mellon, many confere","cbCaikpxdbSHu0Mi","https://ap.wps.com/l/cbCaikpxdbSHu0Mi","pdf",34539614,7,1,460,"English","en",105,"# Introduction\n# PART I: BINARY FORMATS\n## Anatomy of a Binary\n## The ELF Format\n## The PE Format: A Brief Introduction\n## Building a Binary Loader Using libbfd\n# PART II: BINARY ANALYSIS FUNDAMENTALS\n## Basic Binary Analysis in Linux\n## Disassembly and Binary Analysis Fundamentals\n## Simple Code Injection Techniques for ELF\n# PART III: ADVANCED BINARY ANALYSIS\n## Customizing Disassembly\n## Binary Instrumentation\n## Principles of Dynamic Taint Analysis\n## Practical Dynamic Taint Analysis with libdft\n## Principles of Symbolic Execution\n## Practical Symbolic Execution with Triton\n# PART IV: APPENDIXES\n## A Crash Course on x86 Assembly\n## Implementing PT_NOTE Overwriting Using libelf","[{\"question\":\"What types of binary formats does the book cover?\",\"answer\":\"It covers ELF and provides an introduction to the PE format. It also includes guidance for building a binary loader using libbfd.\"},{\"question\":\"What are the core Linux-focused skills taught in the fundamentals part?\",\"answer\":\"The fundamentals section focuses on basic binary analysis in Linux and the fundamentals of disassembly and binary analysis, including simple code injection techniques for ELF.\"},{\"question\":\"Which advanced reverse-engineering methods are included?\",\"answer\":\"Advanced chapters cover customizing disassembly, binary instrumentation, dynamic taint analysis (including practical work with libdft), and symbolic execution (including practical work with Triton).\"},{\"question\":\"Does the book include any low-level assembly reference materials?\",\"answer\":\"Yes. An appendix provides a crash course on x86 assembly, and another appendix discusses implementing PT_NOTE overwriting using libelf.\"}]",1783379127,1159,{"code":4,"msg":31,"data":32},"ok",{"site_id":25,"language":24,"slug":33,"title":13,"keywords":34,"description":14,"schema_data":35,"social_meta":91,"head_meta":93,"extra_data":95,"updated_unix":28},"practical-binary-analysis-build-your-own-linux-tools-for-binary-instrumentation-analysis-and-disassembly","",{"@graph":36,"@context":90},[37,54,69],{"@type":38,"itemListElement":39},"BreadcrumbList",[40,44,48,51],{"item":41,"name":42,"@type":43,"position":21},"https://docshare.wps.com","Home","ListItem",{"item":45,"name":46,"@type":43,"position":47},"https://docshare.wps.com/document/","Document",2,{"item":49,"name":12,"@type":43,"position":50},"https://docshare.wps.com/document/technology/",3,{"item":52,"name":13,"@type":43,"position":53},"https://docshare.wps.com/document/practical-binary-analysis-build-your-own-linux-tools-for-binary-instrumentation-analysis-and-disassembly/43250/",4,{"url":52,"name":13,"@type":55,"author":56,"headline":13,"publisher":58,"fileFormat":61,"inLanguage":24,"description":14,"dateModified":62,"datePublished":63,"encodingFormat":61,"isAccessibleForFree":64,"interactionStatistic":65},"DigitalDocument",{"name":9,"@type":57},"Person",{"url":41,"name":59,"@type":60},"DocShare","Organization","application/pdf","2026-07-14","2026-07-06",true,{"@type":66,"interactionType":67,"userInteractionCount":20},"InteractionCounter",{"@type":68},"ViewAction",{"@type":70,"mainEntity":71},"FAQPage",[72,78,82,86],{"name":73,"@type":74,"acceptedAnswer":75},"What types of binary formats does the book cover?","Question",{"text":76,"@type":77},"It covers ELF and provides an introduction to the PE format. It also includes guidance for building a binary loader using libbfd.","Answer",{"name":79,"@type":74,"acceptedAnswer":80},"What are the core Linux-focused skills taught in the fundamentals part?",{"text":81,"@type":77},"The fundamentals section focuses on basic binary analysis in Linux and the fundamentals of disassembly and binary analysis, including simple code injection techniques for ELF.",{"name":83,"@type":74,"acceptedAnswer":84},"Which advanced reverse-engineering methods are included?",{"text":85,"@type":77},"Advanced chapters cover customizing disassembly, binary instrumentation, dynamic taint analysis (including practical work with libdft), and symbolic execution (including practical work with Triton).",{"name":87,"@type":74,"acceptedAnswer":88},"Does the book include any low-level assembly reference materials?",{"text":89,"@type":77},"Yes. An appendix provides a crash course on x86 assembly, and another appendix discusses implementing PT_NOTE overwriting using libelf.","https://schema.org",{"og:url":52,"og:type":92,"og:title":13,"og:site_name":59,"og:description":14},"article",{"robots":94,"canonical":52},"index,follow",{"doc_id":7,"site_id":25},{"code":4,"msg":5,"data":97},[98,102,106,110,115,118,122,127,132,135,139],{"id":21,"doc_module":4,"doc_module_name":46,"category_name":99,"show_sort_weight":100,"slug":101},"Story & Novel",90,"story-novel",{"id":47,"doc_module":4,"doc_module_name":46,"category_name":103,"show_sort_weight":104,"slug":105},"Literature",80,"literature",{"id":53,"doc_module":4,"doc_module_name":46,"category_name":107,"show_sort_weight":108,"slug":109},"Exam",70,"exam",{"id":111,"doc_module":4,"doc_module_name":46,"category_name":112,"show_sort_weight":113,"slug":114},5,"Comic",60,"comic",{"id":11,"doc_module":4,"doc_module_name":46,"category_name":12,"show_sort_weight":116,"slug":117},50,"technology",{"id":20,"doc_module":4,"doc_module_name":46,"category_name":119,"show_sort_weight":120,"slug":121},"Healthcare",40,"healthcare",{"id":123,"doc_module":4,"doc_module_name":46,"category_name":124,"show_sort_weight":125,"slug":126},8,"Research & Report",30,"research-report",{"id":128,"doc_module":4,"doc_module_name":46,"category_name":129,"show_sort_weight":130,"slug":131},9,"Religion & Spirituality",20,"religion-spirituality",{"id":130,"doc_module":4,"doc_module_name":46,"category_name":133,"show_sort_weight":130,"slug":134},"World Cup","world-cup",{"id":136,"doc_module":4,"doc_module_name":46,"category_name":137,"show_sort_weight":136,"slug":138},10,"Lifestyle","lifestyle",{"id":140,"doc_module":4,"doc_module_name":46,"category_name":141,"show_sort_weight":111,"slug":142},19,"General","general"]