Packages and Binaries:
Miss Identify (missidentify) is a program to find MS Windows type win32 applications. By default, it displays the filename of any executable that does not have an extension, as exe, dll, com, sys, cpl, hxs, hxi, olb, rll or tlb. It can also display all the executables regardless the extension.
Miss Identify is useful in forensics investigations.
How to install:
sudo apt install missidentify
Find executable files without an executable extension
root@kali:~# missidentify -h missidentify version 1.0 by Jesse Kornblum Usage: missidentify [-Vh] [-rablv] [-s|-S len] [FILES] -r Recursive mode. All subdirectories are traversed -q Silent mode. No error messages are displayed -a Display all executable files regardless of extension -b Bare filename. No path information displayed -l Relative paths in filenames -v Verbose mode. Displays the filename for every 10th file processed -s|-S Display strings -V Display version number and exit -h Display this help message
Updated on: 2023-Mar-08