ELF 4 4 ( * * T \ T T+ T+ $ $ Ptd T T Qtd GNU ! Ai~pM " @ |CEqX Q\d 9 U % n { " - - - O 8 C 0 __gmon_start__ _fini __cxa_finalize _Jv_RegisterClasses xt_params libxt_string_init xtables_register_matches __printf_chk __ctype_b_loc optarg strlen strncpy optind xtables_check_inverse strtol strnlen sscanf libc.so.6 _edata __bss_start _end GLIBC_2.1.3 GLIBC_2.3 GLIBC_2.0 GLIBC_2.3.4 s i ii
ii
ti * * + + + 0+ P+ , , , , , , , , , , , , , , , , , , * , , , , $,
(, 8, <, @, D, H, L, P,
T, X, \, `, US [x& t. a , X[ h h h h h h( $ h0 ( h8 p, h@ `0 hH P4 hP @ UVS Â% d$ u\t$$) 9s t& 9rƃ d$[^]
US0 $ d$싓tt $Ѝd$[]Ë $ÐUE@ fx uf@]Ð& USÓ$ d$Et t#d$[]Ë( T$$ Pd T$$ Pv USp3$ d$썃T D$ $d$[]UWVS:# d$ԍ$ D$DžtouU1ƉU(& D$E܉D$$ s9v,U:<vUD$T$$ G9wԍ$ D$-d$,[^_]Í UWVSg*# d$ԍ$ D$}t_1E$f$ D$ED$;}s.><"uED$\ D$$ >뵐t& $ D$jd$,[^_]É' UWVSq" d$ԋE u @ E; U =1& @9 TDQ@u}$ ED$D$ FF$ D$D$U B f Ff Mt t $ D$Ld$,[^_]Ív |>\LUҍ$ DD$D$ FGv E $ D$D$D $ D$D$ UWVSá d$ԋE u @ E; U m1& @9 TDQ@u}$ ED$D$ FF$ D$'D$U B f Ff Mt tE$ D$|d$,[^_]Ív |>\LUҍ$ DD$D$7 FGv E $ D$>D$D $ D$5D$ US d$썃$ D$d$[]UWVSá $dE M 0F EV 1UU1w^Dv U 04$d ED$ t$$M $ [^_]Ít& E L$D$D$ ED$$$U EԋU| 1MMfE EMM21<\ ff} T T$$ PE Uи M $ [^_]Ít& M D$
D$ $fF E$ [^_]ÐUM D$
D$ $MfAE$ [^_]Í E L$D$D$ ED$$64$e= ' ED$ t$$D$ 4$@UЈ Et} MƁ U
$ [^_]Ít& F9E MD2vD9u E9Eԍ 2<\<| f} F9EԉE N9MԉM U`U Eč2EMËMĉEDA EЉEEĉMDH EMÈMEMML$MUE D$ $ U MED9F|2 EEE fM2vD9uff} tLfE v9u& UЈ utMu>Ƃ E 8v|2 tfE 뫍 EЀ 6MЀ 뽐t& T$$ T$P1sx T$$ PM $ T$
T$P T$$ P T$$ P L$T$$ PD$$ D$R, T$$ P t$T$$ P T$$ P T$$ P t$T$$ P T$$ Pj T$$ PL T$$ P T$$ PUVS_" t& vЋu[^]US [ PY[STRING match: You must specify `--string' or `--hex-string' STRING match: You must specify `--algo' string match options:
--from Offset to start searching from
--to Offset to stop searching
--algo Algorithm
--icase Ignore case (default: 0)
[!] --string string Match a string in a packet
[!] --hex-string string Match a hex string in a packet
Can't specify multiple --string Can't specify multiple --hex-string STRING must contain at least one char Cannot include literals in hex data Bad literal placement at end of string Kernel doesn't support --icase "| 0%x |" %c ! %s--hex-string %s--string --algo %s --from %u --to %u --icase ! STRING match %s ALGO name %s FROM %u TO %u ICASE Can't specify multiple --from Can't specify multiple --to Can't specify multiple --algo ALGO too long "%s" STRING too long "%s" Odd number of hex digits Invalid hex block Invalid hex char '%c' Invalid hex char `%c' libxtables.so.4 hex-string icase $t;P l h h (8 h zR | t AB
T $ < t] AB
A_
A A d 0 AB
AjA , AB
CCAAAA , X AB
CFAAAA , AB
C
AAA D , AB
C
AAA D H (0 AB
AjA h l 4} AB
C
AAA E
AAA E C
AAA B F
AAA G
AAA E 1 2 3 c 4 _ 5 j 6 P+
8 o T
,, X P P o o o o T+ . > N ^ n ~ O c P
p
* O c P
p
* libxt_string.so.debug Z .shstrtab .note.gnu.build-id .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rel.dyn .rel.plt .init .text .fini .rodata .eh_frame_hdr .eh_frame .ctors .dtors .jcr .data.rel.ro .dynamic .got .got.plt .data .bss .gnu_debuglink $ o < ( T T ` 0 8 o , E o P T P P ] P P X
f 0 a l
r 8 8 x T T 4 T * * * * t T+ T , ,, , 8 , - $
y~or5J ={Eeu磝Qk ᯘG{?+]ן?wM3X^歌>{7پK>on\jy R g/=fOroNVv~Y+ NGuÝHWyw[eQʨSb> >}Gmx[o[<{Ϯ_qF vM IENDB`
