STRINGS(1)
β¨ STRINGS(1) β¨
okay bestie, welcome to strings from the GNU Development Tools fam π this is the manual page, but make it make sense.
πΈ NAME πΈ
strings β print the sequences of printable characters in files
π SYNOPSIS π
strings [-afovV] [-min-len]
[-n min-len] [--bytes=min-len]
[-t radix] [--radix=radix]
[-e encoding] [--encoding=encoding]
[-] [--all] [--print-file-name]
[-T bfdname] [--target=bfdname]
[-w] [--include-all-whitespace]
[-s] [--output-separatorsep_string]
[--help] [--version] file...
π¦ DESCRIPTION π¦
so for every file you hand over, GNU strings prints out the printable character sequences that are at least 4 characters long (or however long you told it with the options below), and that are followed by an unprintable character. it's giving "find the words hiding in the binary" π
depending on how the strings program was configured, it'll default to either:
- showing all the printable sequences it can find in each file, or
- showing only the sequences that live in loadable, initialized data sections.
if the file type is unrecognizable, or if strings is reading from stdin, then bestie it will always display all of the printable sequences that it can find. no gatekeeping. periodt.
for backwards compatibility, any file that shows up after a command-line option of just - will also be scanned in full, regardless of whether a -d option is hanging around. lowkey iconic of it honestly.
strings is mainly useful for determining the contents of non-text files. fr fr that's the whole vibe.
π OPTIONS π
-a,--allβ scan the whole file, regardless of what sections it contains or whether those sections are loaded or initialized. normally this is the default behaviour, butstringscan be configured so that the-dis the default instead. the-option is position dependent and forcesstringsto perform full scans of any file that is mentioned after the-on the command line, even if the-doption has been specified. yes ma'am, order matters π€-d,--dataβ only print strings from initialized, loaded data sections in the file. this may reduce the amount of garbage in the output, but it also exposes thestringsprogram to any security flaws that may be present in the BFD library used to scan and load sections.stringscan be configured so that this option is the default behaviour. in such cases the-aoption can be used to avoid using the BFD library and instead just print all of the strings found in the file.
ngl bestie, that security note is not a vibe. read it twice. π
-f,--print-file-nameβ print the name of the file before each string. very "who said that" of it π€--helpβ print a summary of the program usage on the standard output and exit. your little cheat sheet π«Ά-min-len,-n min-len,--bytes=min-lenβ print sequences of characters that are at least min-len characters long, instead of the default4.-oβ like-t o. some other versions ofstringshave-oact like-t dinstead. since we can not be compatible with both ways, we simply chose one. we picked one and we're standing by it, no take-backs π-t radix,--radix=radixβ print the offset within the file before each string. the single character argument specifies the radix of the offset---ofor octal,xfor hexadecimal, ordfor decimal.-e encoding,--encoding=encodingβ select the character encoding of the strings that are to be found. possible values for encoding are:s= single-7-bit-byte characters (ASCII, ISO 8859, etc., default),S= single-8-bit-byte characters,b= 16-bit bigendian,l= 16-bit littleendian,B= 32-bit bigendian,L= 32-bit littleendian. useful for finding wide character strings. (landbapply to, for example, Unicode UTF-16/UCS-2 encodings).-T bfdname,--target=bfdnameβ specify an object code format other than your system's default format.-v,-V,--versionβ print the program version number on the standard output and exit. number check β¨-w,--include-all-whitespaceβ by default tab and space characters are included in the strings that are displayed, but other whitespace characters, such a newlines and carriage returns, are not. the-woption changes this so that all whitespace characters are considered to be part of a string.-s,--output-separatorβ by default, output strings are delimited by a new-line. this option allows you to supply any string to be used as the output record separator. useful with--include-all-whitespacewhere strings may contain new-lines internally.@fileβ read command-line options from file. the options read are inserted in place of the original@fileoption. if file does not exist, or cannot be read, then the option will be treated literally, and not removed.
options in file are separated by whitespace. a whitespace character may be included in an option by surrounding the entire option in either single or double quotes. any character (including a backslash) may be included by prefixing the character to be included with a backslash. the file may itself contain additional @file options; any such options will be processed recursively.
recursive @file?? it's giving inception π it works, just don't get lost in there.
π SEE ALSO π
ar(1), nm(1), objdump(1), ranlib(1), readelf(1) and the Info entries for binutils.
π COPYRIGHT π
Copyright (c) 1991-2020 Free Software Foundation, Inc.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, with no Front-Cover Texts, and with no Back-Cover Texts. A copy of the license is included in the section entitled "GNU Free Documentation License".
and that's the whole page bestie π this one's from binutils-2.35.1, dated 2022-11-21, and it ate. go read some binaries, you've got this πΈπ¦
π¦ where this page comes from
- debian bookworm: binutils-djgpp 2.35.1+dfsg-2 Β· GPL-3.0-or-later
- ubuntu noble: binutils-djgpp 2.35.1+dfsg-2 Β· GPL-3.0-or-later
- ubuntu resolute: binutils-djgpp 2.35.1+dfsg-2 Β· GPL-3.0-or-later
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms