strings

Extract printable strings from binaries.

KaliParrotLinuxpassive

pkg: binutils

strings prints sequences of printable characters from files — a fast first look for URLs, keys, paths and messages.

Syntax

strings [-n len] {file}

Example

strings -n 8 ./binary | grep -i http

Lists strings of ≥8 chars and filters for URLs/hosts.

Options & flags

What each switch does. Toggle them in the builder below to assemble a command.

-n <8>Minimum string length.
-aScan the whole file (incl. non-data sections).
-t <x>Print the offset (d=dec, x=hex).
-eEncoding (l=16-bit little-endian, etc.).

Command builder

Tick options (and fill any values) to build a ready-to-copy command.

strings

Usage examples

strings -n 8 ./binary | grep -i http

Find URLs/hosts of length ≥8.

strings -t x ./binary

Show strings with hex offsets.

Advantages
  • Instant, zero-setup triage
  • Reveals secrets/URLs/paths
  • Pipes well into grep
Disadvantages
  • No structure/context
  • Misses encoded/encrypted data
  • Noisy on large binaries
Tags
#triage#binary

Official docs: binutils

Related commands

Frequently asked questions

What is strings used for?
strings prints sequences of printable characters from files — a fast first look for URLs, keys, paths and messages.
What is an example strings command?
A common example is: strings -n 8 ./binary | grep -i http — Lists strings of ≥8 chars and filters for URLs/hosts.
Is strings part of Kali Linux?
Yes. strings ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install binutils.
What category of security tool is strings?
strings is a Reverse Engineering tool with a passive-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →