pwnable

A lightweight ELF security checker built for CTF players who like their tools fast, clean, and to the point.

What is this?

pwnable is a standalone C tool that analyzes ELF binaries and tells you exactly what security features are enabled. Think of it as checksec but written from scratch in pure C, with zero dependencies, and a few extra tricks up its sleeve.

Perfect for when you're knee-deep in a CTF challenge and need to quickly figure out what protections you're dealing with.

Features

Security Analysis

• 🛡️ Stack Canary detection
• 🚫 NX (Non-Executable) stack
• 🎲 PIE (Position Independent Executable)
• 🔒 RELRO (Full/Partial/Disabled)
• 💪 FORTIFY_SOURCE detection

Binary Info

• Architecture detection (x86, x86-64, ARM, MIPS, AArch64)
• 32/64-bit identification
• Stripped vs symbol information
• Dynamic/static linking status
• Full libc path resolution
• Interpreter path
• RPATH/RUNPATH detection

Section Analysis

• Complete section dump with addresses, sizes, and permissions
• Color-coded by permission type (RWX flags)
• Helpful for finding gadgets and planning exploits

Usage

Check security features (default)

./pwnable /bin/cat

Show sections only

./pwnable /bin/cat -s

Show everything

./pwnable /bin/cat -a

---

"Happy pwning!"