strings: pull readable text out of any binary
List printable strings inside executables and data files on Linux with binutils strings.
Run strings FILE to print every run of printable characters, using -n 8 to raise the minimum length and -t x to show offsets.
01Command
Command
$ strings -n 8 suspicious.bin | sort -u | head -5002What it does
Every binary leaks information: URLs, error messages, library names, embedded paths, config keys. strings scans the file for runs of printable characters (default 4+) and prints them line by line, making it the standard first step of quick binary triage — from figuring out what a mystery executable links against to recovering text from corrupted files. -t x prefixes each hit with its hex offset so you can locate it in xxd, and -e l catches UTF-16 strings Windows binaries use.
03Risk
!Warning: The default minimum length of 4 produces heavy noise on large files; raise -n and pipe through sort -u or grep to filter.
04Undo
✓No undo needed — this command does not change persistent state.
05Sources
- strings(1) — Linux manual pageEvidence: strings prints sequences of printable characters of at least -n length from files; -e selects encodings (S, b, l, B, L)
- strings(1) — Arch Linux manualEvidence: Documents -n minimum length, -t offset display and -e multi-byte encoding options
Last verified: 2026-09-17 · Category: Developer