PESTR(1)

πŸ“¦
version 0.85.1 Β· 2 versions
, in alpine 3.24, debian trixie, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

πŸ’– PESTR(1) πŸ’–

okay so bestie, we're in the General Commands Manual section and today's main character is pestr πŸŽ€


✨ NAME ✨

pestr β€” search strings in PE files πŸ”


🌸 SYNOPSIS 🌸

pestr [OPTIONS]...  pefile

πŸ¦‹ DESCRIPTION πŸ¦‹

pestr goes hunting for ASCII and Unicode strings inside PE files, no cap. It's part of pev, the PE file analysis toolkit β€” so if you know pev, you already know the vibe πŸ’…

pefile is a PE32/PE32+ executable or dynamic linked library file. that's the thing you're pointing it at, bestie 🫢


πŸ‘‘ OPTIONS πŸ‘‘

  • -n, --min-length β€” set the minimum string length. default is 4, so anything shorter gets left on read πŸ™ˆ
  • -o, --offset β€” show the string's offset in the file. receipts, but for bytes ✨
  • -s, --section β€” show the string's section, if it exists. sometimes a string is just out here with no section and that's valid πŸ’€
  • -V, --version β€” show version.
  • --help β€” show help.

🌈 EXAMPLES 🌈

search all the strings in putty.exe:

$ pestr putty.exe

and that's it. that's the whole ritual. iconic 🧚


😭 REPORTING BUGS 😭

found something cursed? first, please check the latest development code, then report it at https://github.com/mentebinaria/readpe/issues β€” the devs wanna hear it fr fr 🫢


πŸ“ SEE ALSO πŸ“

ofs2rva(1), pedis(1), pehash(1), peldd(1), pepack(1), peres(1), pescan(1), pesec(1), readpe(1), rva2ofs(1)

(the whole squad πŸŽ€ go say hi)


Copyright (C) 2012 - 2020 pev authors. License GPLv2+: GNU GPL version 2 or later <https://www.gnu.org/licenses/gpl-2.0.txt>. This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law.

so like, yes you can remix it, but if it breaks? not their problem, legally speaking 😭

and that's the page, bestie β€” it signs off as PESTR(1) from the General Commands Manual, straight from the pev era of 2012–2020. slay, bye πŸ’…βœ¨

πŸ“¦ where this page comes from