Comments by "" (@billionai4871) on "Low Level" channel.

  1. Just a comment on using ldd. You should not run ldd on unknown binaries, because on some cases ldd may execute the binary to figure out what libraries it depends on. So unless you sandboxed and would be comfortable running the unknown program in the system, do not use ldd on it.
    2
  2. ok, I'm very happy that (at least until you put it in the disassembler) you didn't run this under GDB. I'm a gdb developer, this is a public service announcement: As much as we would LOVE to make gdb safe to just look at a file without executing it, it isn't safe to do that just yet. We have a few issues in how we read debug information. Maliciously crafted debug information can at the very least cause your GDB to crash, and while no one ever managed to prove that those crashes lead to controllable memory corruption or code execution or whatever, no one ever manage to prove it _doesn't_... so for the time being, if you wish to look at an untrusted binary - even if you just look at it statically - sandbox your environment. And if you wanna see how something ticks with GDB, it's literally as secure as running it raw, we perform no security controls whatsoever.
    1