Show HN: Elfpeek – A tiny interactive ELF binary inspector in C

4 pointsposted a month ago
by oblivionsage

3 Comments

oblivionsage

a month ago

I built this while learning ELF internals for RE work.

Main features:

- Interactive REPL with readline support - Colored hexdump (null/printable/control/high bytes) - Address resolver (VA → segment/section/file offset/symbol) - ELF32/64, little/big endian - No dependencies beyond glibc

It's not meant to replace readelf/objdump, just a quick tool for common questions like "what section is this address in?" or "what bytes are at this offset?"

~1K lines of C, compiles in seconds. Feedback welcome!

GitHub: https://github.com/Oblivionsage/elfpeek

nullprophet

a month ago

Would a strings or relocs command be more useful to add next?

oblivionsage

a month ago

Probably `strings` first , more useful for quick RE triage. Then `relocs` for GOT/PLT analysis. Thanks for the feedback!