Exam PT0-002 All QuestionsBrowse all questions from this exam
Question 217

Penetration tester has discovered an unknown Linux 64-bit executable binary. Which of the following tools would be BEST to use to analyze this issue?

    Correct Answer: C

    The best tool to analyze an unknown Linux 64-bit executable binary is GDB (GNU Debugger). GDB is a versatile and powerful debugger specifically designed for UNIX-like systems, including Linux. It supports debugging programs written in various languages and can handle both 32-bit and 64-bit executables. This makes it the most suitable choice for examining and manipulating the execution of an unknown Linux binary.

Discussion
zimuzOption: C

gdb for linux

ronniehaangOption: C

GNU Debugger (GDB) is a widely used open source debugger for Linux that works with a variety of programming language

kycuguOption: C

C - if you are malware analyst you will understand that GDB is Linux specific

cy_analystOption: C

GDB can be used to debug both user space and kernel space code, and can provide various features such as breakpoint management, source-level debugging, and memory examination. Peach is a tool used for fuzz testing, WinDbg is a debugger for Windows, and OllyDbg is a debugger for x86 Windows binaries.

nickwen007Option: C

C. GDB would be the best tool to use to analyze this issue. GDB (GNU Debugger) is a command-line debugger that can be used to debug programs written in any language that supports the debugging format, including C and C++. GDB can be used to debug Linux 64-bit executables and is often used by penetration testers when analyzing malicious binaries. OllyDbg is a Microsoft Windows debugger that can be used to analyze executable binaries. It is often used by software developers and penetration testers to reverse engineer compiled applications, understand what they are doing, and look for potential security vulnerabilities. OllyDbg can be used to examine and modify code, set breakpoints and trace code execution, analyze functions, debug multi-thread programs, and more.

Random_ManeOption: C

C. OLLYDBG, WinDBG, and IDA are all debugging tools that support Windows environments. GDB is a Linux‐specific debugging tool.

[Removed]Option: C

lol olldbg isn't even on Linux. much like windbg. Peach, I couldn't find much info on it. The only thing I could find is a desktop app for Win10? I'm going with C as well GDB.

ppsilva

Peach is a fuzzing framework https://github.com/MozillaSecurity/peach

masso435Option: C

Answer is C. It's for Linux and even more, it's unknown. GDB handles multiple programming languages.

Etc_Shadow28000Option: C

C. GDB Explanation: GDB (GNU Debugger): • GDB is a powerful debugger for programs written in C, C++, and other languages. It is widely used for debugging and analyzing executable binaries on Linux systems. GDB supports both 32-bit and 64-bit binaries and provides extensive functionality to inspect and manipulate the execution of programs.

Etc_Shadow28000

A. Peach: • Peach is a fuzzing platform for testing the security of various software. While it is useful for finding vulnerabilities, it is not primarily a tool for analyzing unknown binaries. B. WinDbg: • WinDbg is a debugger for Windows operating systems. It is used for debugging Windows executables and is not suitable for analyzing Linux binaries. D. OllyDbg: • OllyDbg is a 32-bit assembler-level debugger for Windows. It does not support 64-bit binaries and is not suitable for analyzing Linux executables.

pepguaOption: C

The BEST tool to analyze an unknown Linux 64-bit executable binary is: C. GDB GDB (GNU Debugger) is a powerful and versatile command-line debugger that can be used on various platforms, including Linux. It allows penetration testers to: Disassemble the binary: GDB can disassemble the machine code instructions of the binary, revealing its underlying functionality. Set breakpoints: The tester can set breakpoints to pause the execution of the program at specific points and examine the program state (registers, memory). Step through the code: GDB allows stepping through the code line by line, analyzing its behavior and potential security implications.

AlizadeOption: C

C. GDB (GNU Debugger).

solutionzOption: C

GDB is a popular debugger for the Unix-like systems, and it can be used to analyze binaries, including stepping through code, inspecting variables, and much more. Other options like Peach (a fuzzing tool), WinDbg (a Windows debugger), and OllyDbg (a 32-bit assembler level analyzing debugger for Microsoft Windows) wouldn't be suitable for analyzing a 64-bit Linux binary.

[Removed]Option: C

The best tool to analyze an unknown Linux 64-bit executable binary is GDB (GNU Debugger), option C. Explanation: Peach, option A, is a framework to write and generate unit tests for software, it is not intended for analyzing unknown executables. WinDbg, option B, is a Windows-specific debugger, and it cannot be used for analyzing Linux executables. GDB, option C, is a popular and powerful debugger for Linux systems, and it supports a variety of programming languages such as C, C++, and Assembly. It allows the user to execute the program step-by-step, set breakpoints, inspect memory and registers, and analyze the behavior of the program. This makes it an excellent choice for analyzing unknown Linux executables. OllyDbg, option D, is a debugger designed for analyzing Windows executables, and it cannot be used for analyzing Linux executables.