Hello again, before we jump into Heidi, I would like to share with you some other do's commonly used
in reverse engineering.
So the first cease fire.
So now we're in this photo here, so I'm going to have a list to list the contents of the first command
I use.
His fire and fire is used to determine the type of particular fire.
So to use it, you take the command file, followed by the name of the father and you like to analyze
and hit enter.
And then you would tell you whatever it is in this case, you can see it is a 64 bit executable alpha,
which is in binary file executable for Linux, the second command, which we commonly use his strength
command.
So the strength command is used to list all the strings contained within the file.
So to use it, we take the strength command, followed by the name of the fiscella and hit Enter and
you list all the strings that are found within this file.
Sometimes the strings commands, so can list all the key, all the passports and all the keys, even
the flag that you are trying to capture.
You can see it from here.
So that is how Strings Command is so useful sometimes.
And the third command, let me clear the screen first that we normally use is the Hex editor so we can
open the S1 file with the Hex editor.
So the editor for Linux is accessing these and then you open the file in case I tell you to X1.
Then you hit enter and you open the file and show it to you in a Hex editor.
So this is a Hex editor.
He shows you the entire path in two views on the right is your ASCII representation, the text representation
of all the bytes inside the file.
So as you can see here on the left, you have seven F in hexadecimal, which refers to E.
And then next one is for fire, the house for fire refers to hell, followed by the Hecks falsey, which
refers to F.
So this is useful because you can use this to look into the fire cell to see what is contained in the
fire.
So EAF is the header for Linux executable files you see in here in Afghanistan.
Then you know that this is a Linux executable file.
And you scroll down, you can see other things are the strings within it, like, for example, libraries
and very excited and some functions as well can be seen here.
So and here probably is your quote, your instructions.
But to view your instructions like this is quite confusing.
So normally we will use either this assembler so that either can interpret how this hexadecimal code
shinkle into assembly language, easier to view.
So this is how we can use some of the common tools in finding Linux for doing initial analysis.
So in the next lesson, we are going to start off with IDL.
So thank you for watching.
See you in the next one.