security enabled verified low v1.0.0

checksec

Binary hardening checker that reports PIE, NX, RELRO, Stack Canary, and other security mitigations on ELF binaries.

📋 Live Preview 
checksec --file={binary}
🌍 binary → 
checksec --file={binary}

Sandbox: execFile · Timeout: 30s

Capabilities

binary.security.check
hardening.analysis
mitigation.detection

Parameters

Name Type Required Default Description Aliases
file string No - Check security on a specific binary file --file
elf integer No - Check security of a process by PID --elf
proc integer No - Check /proc/PID/exe security --proc
debug boolean No - Enable debug output --debug
kernel boolean No - Check kernel security mitigations --kernel
output string No - Write output to file --output
format string No - Output format (json or csv) --format
listCheck boolean No - List all available checks --list-check
help boolean No - Show help message --help
version boolean No - Show version information --version

Contract

Inputs

file.binary

ELF binary to check

Outputs

report.security

Security mitigation analysis

report.json

Security report in JSON

Side effects:

Workflow Edges

Produces

report.securityreport.json

Consumes

file.binary

Resource Profile

ResourceValue
CPUlow
Memory32 MB
Networklow
Disk I/Olow

Examples

Check security of a binary

checksec --file=/bin/ls

Check running process security

checksec --proc 1234

Output JSON format

checksec --file=/bin/ls --format=json

Check kernel security mitigations

checksec --kernel

Check multiple binaries

checksec --file=/bin/ls --file=/bin/bash --format=json

Documentation

checksec — Binary Security Hardening Checker

checksec analyzes ELF binaries and reports on the security mitigations they employ. It is essential for understanding which exploitation techniques may be viable against a given target.

Mitigations Checked

Mitigation Description Bypass Difficulty
PIE Position Independent Executable Medium
NX Non-Executable Stack Medium
RELRO Relocation Read-Only Low-High
Stack Canary Stack Overflow Protection Medium
FORTIFY Fortified Source Functions Low

Example Output

RELRO           STACK CANARY      NX            PIE             RPATH    RUNPATH    Symbols         FORTIFY    Fortified    Fortifiable    FILE
Full RELRO      Canary found      NX enabled    PIE enabled     No RPATH No RUNPATH   76) Symbols      Yes       5            18             /bin/ls

Related Tools

pwntoolsropgadgetgdb