Checksec Logo

Checksec

A bash script that analyzes executable files to check security properties like PIE, RELRO, canaries, ASLR, and Fortify Source protections.

2,204
Visit website
Compare
Compare
0
MCPThe entire cybersecurity market, one prompt awayTry MCP Access

Checksec Description

Checksec is a bash script designed to analyze executable files and assess their security properties and hardening features. The tool examines various security mechanisms implemented in binaries, including: - Position Independent Executable (PIE) support - Relocation Read-Only (RELRO) protection - Stack canaries for buffer overflow protection - Address Space Layout Randomization (ASLR) compatibility - Fortify Source compilation flags The script provides modular functionality with configurable output formats, including CLI and JSON options. Recent updates have enhanced the tool's capabilities to include Clang Control Flow Integrity (CFI) and safe stack checks through an extended analysis mode. Checksec operates through command-line interface with getopts-based option parsing, allowing flexible parameter ordering. The tool includes cryptographic verification features using both Cosign and OpenSSL signature validation to ensure integrity. Originally developed by Tobias Klein, the tool focuses specifically on Linux executables and does not support macOS Mach-O binaries or OSX kernel analysis. The script serves as a security assessment utility for developers and security professionals evaluating binary hardening implementations.

Checksec FAQ

Common questions about Checksec including features, pricing, alternatives, and user reviews.

Checksec is A bash script that analyzes executable files to check security properties like PIE, RELRO, canaries, ASLR, and Fortify Source protections.. It is a Application Security solution designed to help security teams with Security Hardening, Linux, Binary Analysis.

Have more questions? Browse our categories or search for specific tools.

ALTERNATIVES

DerScanner Full Cycle Application Security Testing Logo

Full-cycle app security platform with SAST, DAST, MAST, SCA & binary analysis

0
Delphos Labs Analyze Logo

AI-powered reverse engineering tool for analyzing compiled binaries

0
Kodem C.O.R.E. Logo

Unified engine correlating static & runtime analysis for app security

0
Offensive 360 O360 Logo

SAST tool using virtual compilers to analyze source code for vulnerabilities

0
DerSecur DerScanner Logo

SAST tool that scans source code and binaries for security vulnerabilities

0

Stay Updated with Mandos Brief

Get strategic cybersecurity insights in your inbox