Checksec
A bash script that analyzes executable files to check security properties like PIE, RELRO, canaries, ASLR, and Fortify Source protections.
Checksec
A bash script that analyzes executable files to check security properties like PIE, RELRO, canaries, ASLR, and Fortify Source protections.
Checksec Description
Checksec is a bash script designed to analyze executable files and assess their security properties and hardening features. The tool examines various security mechanisms implemented in binaries, including: - Position Independent Executable (PIE) support - Relocation Read-Only (RELRO) protection - Stack canaries for buffer overflow protection - Address Space Layout Randomization (ASLR) compatibility - Fortify Source compilation flags The script provides modular functionality with configurable output formats, including CLI and JSON options. Recent updates have enhanced the tool's capabilities to include Clang Control Flow Integrity (CFI) and safe stack checks through an extended analysis mode. Checksec operates through command-line interface with getopts-based option parsing, allowing flexible parameter ordering. The tool includes cryptographic verification features using both Cosign and OpenSSL signature validation to ensure integrity. Originally developed by Tobias Klein, the tool focuses specifically on Linux executables and does not support macOS Mach-O binaries or OSX kernel analysis. The script serves as a security assessment utility for developers and security professionals evaluating binary hardening implementations.
Checksec FAQ
Common questions about Checksec including features, pricing, alternatives, and user reviews.
Checksec is A bash script that analyzes executable files to check security properties like PIE, RELRO, canaries, ASLR, and Fortify Source protections. It is a Application Security solution designed to help security teams with Security Hardening, Linux, Binary Analysis.
