Finding main() in Stripped Binary - bin 0x2C

Stripped binaries miss the symbol information of functions and variables. Debugging such a binary is a little bit more tricky, but there is a simple method to find the main() function of the program.

-=[ ❤️ Support ]=-

-=[ 🐕 Social ]=-

-=[ 📄 P.S. ]=-

All links with "*" are affiliate links.
LiveOverflow / Security Flag GmbH is part of the Amazon Affiliate Partner Programm.

[rattatteb]

I'm really looking forward to every single haxember video! I love the style of these videos.

[EvilSapphireR]

I was breaking my head trying to understand how to figure out the start of the main function in a C compiled windows binary for the last 2 days and you come up with this video today. The coincidence is crazy lol.

[allurbase]

echo "set disassembly-flavor intel" >> ~/.gdbinit

[VaradMahashabde]

YouTube : LiveOverflow last uploaded 2 days ago
LifeOverflow : I am speed

[asanz]

Really helpful dude. Reversing is becoming my hobby and this helps a lot.
Keep it 1337!

[priyasrikumar]

Thanks so much for uploading so many interesting videos recently! It's always nice to come home and learn something new.

[strykerk]

Whooaaa! I ran across this issue before but just thought I compiled it wrong! I switched to gcc and didn't give it a second thought.

NOW, here I am, just cruising your content because you rock... and BAMM! I found the answer to a problem I didn't know I had!

You rock!

[omardarwish]

4:13 RIP will be pointing at the next instruction after 0x50d so it is 0x514. 0x514+0xe6 = 0x5fa

[lilendian]

That reaction when you saw the AT&T syntax, relatable :D

[snomad]

you seem to be talking rather calmly in this new format, not sure if it was always like this but you seemed more enthusiastic when you only did voice over. not complaining, just an observation, I still love the videos!

[Guysudai]

4:11 you said RIP is 0x50d but it actually points at the next line so 0x514 is RIP, great video overall though, thank you!

[waSWglu]

Love the shorter, simpler videos. Also that hoodie is glorious, where would one acquire such a piece?

[MephistoMods]

I see you also like to follow Ben Eater projects ;)

[Sonyim]

Teddy fresh 😎 Very interesting video! Definitely useful. Does this work for windows binaries as well?

[ln]

My God! This was exactly what I needed, thanks LO :)

[verticallife]

Great video, I love content you are putting out lately! Although I prefer old-style videos of yours, with hand-drawn black on white drawings instead of face cam.

[Handskemager]

Loooovvveee that pastel coloured hoodie!

[stewiegriffin]

once I wrote int x="cat"; and it compiled. Take that LiveOverflow

[mathlover]

these are the kind of tutorials newbs like me need

[Adowrath]

Quick question: How would you go about creating a separate symbol file? Like, in GDB, say "this address is now the function 'main', interpret it as such" and possibly export it later in the session.