0

I'm trying to decompile or analyse an injected Linux executable binary file /usr/bin/cat ,and find the injected code as a readable.

Need some tips as a beginner how to find the injection method if it's the right start.

2
  • Does this question help? reverseengineering.stackexchange.com/q/26386
    – Rup
    Commented Jan 18 at 8:41
  • Do you have access to the original binary e.g. from your Linux distribution, to compare it to? I’d also guess you could get Ghidra or similar to just decompile everything and find the code in there.
    – Rup
    Commented Jan 18 at 8:43

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.