Strings extractor for binaries and blobs
Pull printable ASCII and UTF-16 strings out of any file, filtered by length, with flag-pattern highlighting.
Open in ctfpalRunning strings is the cheapest possible move on any binary, and it solves a genuinely surprising number of challenges outright. Flags get left in the data section, debug messages explain the check the program performs, and hardcoded passwords sit in plain view.
Two details people miss
- UTF-16. Windows binaries store strings as two-byte characters, so a naive ASCII scan sees
H\0e\0l\0l\0o\0and finds nothing. Always scan both encodings - it is the reasonstrings -elexists. - Minimum length. The default of 4 buries the signal in noise. Raising it to 8 or 10 cuts the output dramatically while keeping anything flag-shaped, and lowering it to 3 is worth one pass in case the flag was split.
If strings turns up nothing at all, that is informative: the file is compressed, encrypted, or packed. Check the entropy and the file signature before assuming there is nothing there.
Part of a module
7. File forensics and carving
Identify files by their bytes, find data appended past a format’s end marker, and pull evidence out of images and documents.
Practise on real challenges
Go deeper
- The first ten minutes: a triage playbook for any CTF challengeMost challenges are lost to flailing, not to difficulty. Here is a repeatable order of operations for an unknown blob, an unknown file, and an unknown service - and the point at which you should stop guessing and start reading.
Related tools
File type identifier by magic bytes
Drop a file and identify what it really is from its signature, regardless of extension. Also finds file headers embedded inside other files.
Hex viewer and hexdump
Inspect any file byte by byte with a side-by-side hex and ASCII view, offsets, and structure highlighting.
ELF, PE and Mach-O binary analyzer
Parse headers, sections, imports, and symbols from Linux, Windows, and macOS binaries, with C++ symbol demangling and gadget discovery.
Automatic steganography solver
Throw every applicable steganography technique at a file at once - image, audio, archive, text, and document - recursively unpack what falls out, and surface flag matches.