Edit: /usr/lib64/xtables/libxt_string.so (16416B)
ELF > @ 8 @ 8 @ + + + P- P- P- 8 8 8 $ $ x x x Std x x x Ptd l l Qtd Rtd + + + 8 8 GNU &꺷Uoȣ @" BE|qXQ\d U j q , F " y 1 ( 1 1 __gmon_start__ _ITM_deregisterTMCloneTable _ITM_registerTMCloneTable __cxa_finalize xtables_option_parse strlen strnlen __ctype_b_loc sscanf xt_params __stack_chk_fail puts __printf_chk putchar stdout putc libxt_string_init xtables_register_matches libxtables.so.12 libc.so.6 _edata __bss_start _end GLIBC_2.3 GLIBC_2.3.4 GLIBC_2.4 GLIBC_2.2.5 ii
- ti 7 ii
C ui M + P
+
+ + , 0, `, , & , , O 0 0 & 80 P @0 `
X0 0 `0 x0 p
0 P 0 , 0 0 & 0 P 1 `
1 0 1 81 p
@1 P H1 , + / / / / / / X/ `/ h/ p/ x/ / /
/ /
/ / / HH$ HtH 5R$ %S$ h h h h h h h h qh ah Qh
Ah 1%# D %# D %}# D %u# D %m# D %e# D %]# D %U# D %M# D %E# D %=# D %5# D H=p# [f. H=$ H$ H9tH# Ht H=$ H5$ H)HHH?HHtH" HtfD =e$ u+UH=" HtH= )d=$ ] w fG"fAWIAVAUATUSHXLwdH%( HD$H1HGPH @D$$3IG@t7 HD$HdH3%( HX[]A\A]A^A_fIHH= # o HAFoKAN$oS AV4o[0A^Doc@AfTokPAndos`Avto{pA A A$ ST$$| AƆ : D$$P A M/L=AA HD$@L|$811HD$(HD$EE1EHD$0Lt$ AD$@| f EA9n EfE9 2McO\ H0IHDF$ K|D~ T$EHT$(1H5h @|$FH|$0L\$LT$D$G LT$L\$ D$@HL$ DC| HH / IcԉA| @\f H H5 H1R(fD f A9 HAA| HD$1@|E9zLt$L|$8A A$ Yf AD$A9 ADHL$ADf. Eff. A| uh HA| tDpE9~a4AF A H L H5j H1Q(fA9~AAD$fD Lt$L|$81 HQ H5 H1R(@H2 H5C H1Q(H H5 H1R(H A H5 H1Q(H H5 H1R(H H5& H1R(H H5 H1R(H Hڿ H5P H1Q( H= pAT1UH5 SH ft2H-x LdD H 1HL9u[H5M ] 1A\fD U1H5/ SH HbftEŃHlHH9t'<"t<\uH \ H0 H" []x G0tPHU H5> H1R(f ATUHSftADAT$HHtHfD HH9tHDQ@u[ ]A\f1|\[]A\ÐAULn4ATLUSHH Df EEef| H H HDH5 1 LHS$H5 1S fu~S"fu]Et uH[]A\A]@ Hg H^ HDH5a 1 LD H5\ 1] H59 1EjHH51 1[]A\A]# AULn4ATLUSHH Df EEf| H H HDH5 1 LHS$H5 1S fu~S"fu]Et uH[]A\A]@ H H HDH5E 19 LD H5F 1
H5% 1jHH5 1[]A\A] HH STRING too long "%s" Odd number of hex digits Invalid hex block Invalid hex char '%c' %x Invalid hex char `%c' "| %02x |" " ! %s --hex-string %s --string --algo %s --from %u --to %u --icase STRING match %s ALGO name %s FROM %u TO %u ICASE libxtables.so.12 from to algo STRING must contain at least one char Cannot include literals in hex data Bad literal placement at end of string Kernel doesn't support --icase string match options:
--from Offset to start searching from
--to Offset to stop searching
--algo Algorithm
--icase Ignore case (default: 0)
[!] --string string Match a string in a packet
[!] --hex-string string Match a hex string in a packet STRING match: You must specify `--string' or `--hex-string' ;l t x h( x< h h H( zR x $ x FJw ?:*3$" D \ H p FEB B(A0A8D^
8A0A(B BBBC 8 ( 4j BCJ EHI $ xx ALL SFA $ ' L4 8 _ BAD ~
FBCHDB H p M FFD A(G0
(A ABBEt(O ABB H M FFD A(G0
(A ABBEt(O ABB GNU P
+
&
O
+ + o `
Y @/ 0 o o 0 o o o P- 0 @ P ` p & P `
0 p
P , & P `
0 p
P , GA$3a1
GA$3p1067 } GA* GA$annobin gcc 8.5.0 20210514 GA$plugin name: gcc-annobin GA$running gcc 8.5.0 20210514 GA* GA* GA!
GA*FORTIFY GA+GLIBCXX_ASSERTIONS GA*GOW * GA*cf_protection GA+omit_frame_pointer GA+stack_clash GA!stack_realign
GA*FORTIFY `
} GA+GLIBCXX_ASSERTIONS libxt_string.so-1.8.8-6.el8.2.imh.x86_64.debug Dd7zXZ ִF ! t/Ow] ?Eh=ڊ2Na j
$R(:.;Soq-y~t']7ax` ã[-җ~Wi]Z+aKk:{anfgخv1gpils&Zinъ@]%J:pf耪,t00,̭6h:R] Yޗ#%ZU
(^vWbTG^P 0*J>I# Bo~\=Ғ̐YSNᨂu{P%EAm:zPCMOjaU,5=(59]G1EQ82V*Gʛna%+-6L\wAG=.jݸ˶>*ǩ`㓚}?QV|ZJN $uj
~9s4bDu`btskhd,Z{rLr%[%)MR˹QLfj
ї.k0^ pv{,*u>fGpvvwJ̡. 'Oducb
x҆aa 4ϬXۃwl6snrJ5YM%:,)>TOX*)-/zj'0V#x)կ_JJK);Ts<PQW6$8qEO_ÄlR< I;TypM/ĄG'*Ũ]mRoP-]rz)tpb]=1!dfnJv`dգ :4$2 [kڱg YZ .shstrtab .note.gnu.build-id .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt.sec .text .fini .rodata .eh_frame_hdr .eh_frame .note.gnu.property .init_array .fini_array .data.rel.ro .dynamic .got .data .bss .gnu.build.attributes .gnu_debuglink .gnu_debugdata 8 8 $ o ` ` 4 ( 0 Y 8 o , E o 0 0 P T 0 ^ B h
c
n w }
2 X l X X x x + + + + + + p P- P- @/ @/ 0 0 1 1 1` 1 H
3 4 3 7 (