Miss Identify (missidentify) is a program to find MS Windows type win32 applications. By default, it displays the filename of any executable that does not have an extension, as exe, dll, com, sys, cpl, hxs, hxi, olb, rll or tlb. It can also display all the executables regardless the extension. Miss Identify is useful in forensics investigations.
sudo apt install missidentify (47 KB)
Dependências: libc6
Escolha um comando ao lado para ver a descrição e a ajuda completa.
missidentify
Find executable files without an executable extension
root@kali:~# missidentify -h
missidentify version 1.0 by Jesse Kornblum
Usage: missidentify [-Vh] [-rablv] [-s|-S len] [FILES]
-r Recursive mode. All subdirectories are traversed
-q Silent mode. No error messages are displayed
-a Display all executable files regardless of extension
-b Bare filename. No path information displayed
-l Relative paths in filenames
-v Verbose mode. Displays the filename for every 10th file processed
-s|-S Display strings
-V Display version number and exit
-h Display this help message