checksec
Show binary exploit-mitigation flags.
KaliParrotpassive
pkg: checksec
checksec reports which protections (NX, PIE, RELRO, canary, Fortify) a binary was built with.
Syntax
checksec --file={binary}
Example
checksec --file=./vuln
Shows NX/PIE/canary/RELRO status to plan an exploit.
Options & flags
What each switch does. Toggle them in the builder below to assemble a command.
Command builder
Tick options (and fill any values) to build a ready-to-copy command.
checksec
Usage examples
checksec --file=./binary
Show NX/PIE/canary/RELRO protections.
Advantages
- Instant mitigation overview
- Guides exploit strategy
Disadvantages
- Info only
- ELF-focused
Tags
#mitigations#exploit-dev
Official docs: checksec ↗
Related commands
Frequently asked questions
What is checksec used for?
checksec reports which protections (NX, PIE, RELRO, canary, Fortify) a binary was built with.
What is an example checksec command?
A common example is: checksec --file=./vuln — Shows NX/PIE/canary/RELRO status to plan an exploit.
Is checksec part of Kali Linux?
Yes. checksec ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install checksec.
What category of security tool is checksec?
checksec is a Reverse Engineering tool with a passive-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.