strings 命令详解

| 选择喜欢的代码风格  

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

strings 命令安装:


-bash/zsh: strings command not found

# Windows (WSL2)
sudo apt-get update sudo apt-get install binutils

# Debian
apt-get install binutils

# Ubuntu
apt-get install binutils

# Alpine
apk add binutils

# Arch Linux
pacman -S binutils

# Kali Linux
apt-get install binutils

# CentOS
yum install binutils

# Fedora
dnf install binutils

# OS X
brew install binutils

# Raspbian
apt-get install binutils

# Dockerfile
dockerfile.run/strings

# Docker
docker run cmd.cat/strings strings

strings 命令补充说明:


对于给定的每个文件,GNU 字符串都会打印可打印字符序列,这些序列至少有 4 个字符长(或使用以下选项给出的数字),并且后面跟着一个不可打印字符。

根据 strings 程序的配置方式,它将默认显示它在每个文件中找到的所有可打印序列,或者仅显示可加载的初始化数据部分中的序列。 如果文件类型无法识别,或者如果 strings 正在从标准输入读取,那么它将始终显示它能找到的所有可打印序列。

为了向后兼容,在命令行选项 just - 之后出现的任何文件也将被完整扫描,无论是否存在 -d 选项。

strings 主要用于确定非文本文件的内容。

strings 命令语法:


strings [-afovV] [-min-len]
               [-n min-len] [--bytes=min-len]
               [-t radix] [--radix=radix]
               [-e encoding] [--encoding=encoding]
               [-U method] [--unicode=method]
               [-] [--all] [--print-file-name]
               [-T bfdname] [--target=bfdname]
               [-w] [--include-all-whitespace]
               [-s] [--output-separator sep_string]
               [--help] [--version] file...

strings 命令选项:


-a
--all
-   Scan the whole file, regardless of what sections it contains or
whether those sections are loaded or initialized.  Normally this is
the default behaviour, but strings can be configured so that the -d
is the default instead.

The - option is position dependent and forces strings to perform full
scans of any file that is mentioned after the - on the command line,
even if the -d option has been specified.

-d
--data
Only print strings from initialized, loaded data sections in the
file.  This may reduce the amount of garbage in the output, but it
also exposes the strings program to any security flaws that may be
present in the BFD library used to scan and load sections.  Strings
can be configured so that this option is the default behaviour.  In
such cases the -a option can be used to avoid using the BFD library
and instead just print all of the strings found in the file.

-f
--print-file-name
Print the name of the file before each string.

--help
Print a summary of the program usage on the standard output and exit.

-min-len
-n min-len
--bytes=min-len
Print sequences of displayable characters that are at least min-len
characters long.  If not specified a default minimum length of 4 is
used.  The distinction between displayable and non-displayable
characters depends upon the setting of the -e and -U options.
Sequences are always terminated at control characters such as new-
line and carriage-return, but not the tab character.

-o  Like -t o.  Some other versions of strings have -o act like -t d
instead.  Since we can not be compatible with both ways, we simply
chose one.

-t radix
--radix=radix
Print the offset within the file before each string.  The single
character argument specifies the radix of the offset---o for octal, x
for hexadecimal, or d for decimal.

-e encoding
--encoding=encoding
Select the character encoding of the strings that are to be found.
Possible values for encoding are: s = single-7-bit-byte characters
(default), S = single-8-bit-byte characters, b = 16-bit bigendian, l
= 16-bit littleendian, B = 32-bit bigendian, L = 32-bit littleendian.
Useful for finding wide character strings. (l and b apply to, for
example, Unicode UTF-16/UCS-2 encodings).

-U [d|i|l|e|x|h]
--unicode=[default|invalid|locale|escape|hex|highlight]
Controls the display of UTF-8 encoded multibyte characters in
strings.  The default (--unicode=default) is to give them no special
treatment, and instead rely upon the setting of the --encoding
option.  The other values for this option automatically enable
--encoding=S.

The --unicode=invalid option treats them as non-graphic characters
and hence not part of a valid string.  All the remaining options
treat them as valid string characters.

The --unicode=locale option displays them in the current locale,
which may or may not support UTF-8 encoding.  The --unicode=hex
option displays them as hex byte sequences enclosed between <>
characters.  The --unicode=escape option displays them as escape
sequences (\uxxxx) and the --unicode=highlight option displays them
as escape sequences highlighted in red (if supported by the output
device).  The colouring is intended to draw attention to the presence
of unicode sequences where they might not be expected.

-T bfdname
--target=bfdname
Specify an object code format other than your system's default
format.

-v
-V
--version
Print the program version number on the standard output and exit.

-w
--include-all-whitespace
By default tab and space characters are included in the strings that
are displayed, but other whitespace characters, such a newlines and
carriage returns, are not.  The -w option changes this so that all
whitespace characters are considered to be part of a string.

-s
--output-separator
By default, output strings are delimited by a new-line. This option
allows you to supply any string to be used as the output record
separator.  Useful with --include-all-whitespace where strings may
contain new-lines internally.

@file
Read command-line options from file.  The options read are inserted
in place of the original @file option.  If file does not exist, or
cannot be read, then the option will be treated literally, and not
removed.

Options in file are separated by whitespace.  A whitespace character
may be included in an option by surrounding the entire option in
either single or double quotes.  Any character (including a
backslash) may be included by prefixing the character to be included
with a backslash.  The file may itself contain additional @file
options; any such options will be processed recursively.

strings 命令实例:


strings 打印二进制中的所有字符串:

strings path/to/file

strings 将结果限制为至少 n 个字符长的字符串:

strings -n n path/to/file

strings 在每个结果前面加上它在文件中的偏移量:

strings -t d path/to/file

strings 在每个结果前面加上文件内的十六进制偏移量:

strings -t x path/to/file

strings 命令扩展阅读:




strings 命令评论

共收录到 525Linux 命令