String & Cross-Reference Analysis
Use strings and cross-references (xrefs) as a fast-track to understanding a binary's purpose and navigating between code and data.
Strings Are Clues
You can disassemble code, identify functions, and read control flow graphs. One of the fastest ways to orient yourself in an unknown binary is to read its strings.
Error messages, URLs, file paths, and format specifiers reveal intent before you read a single instruction.
Extracting Strings
The classic command-line tool dumps printable sequences. Disassemblers like Ghidra and IDA have a dedicated Strings window with addresses.
strings -a -n 5 target.bin
strings -e l target.bin # 16-bit little-endian (UTF-16)All lessons in this course
- Introduction to Disassemblers
- Identifying Functions and Data
- Control Flow Graph Analysis
- String & Cross-Reference Analysis