LOADING N0PERM…
Dynamic library call interception tool that records calls made to shared libraries by a process, providing rapid visibility into binary behavior.
A standard LINUX utility used across offensive reconnaissance, packet forensics, and defensive system administration.
Direct visibility into network interfaces, protocol frames, access controls, or filesystem structures without graphical overhead.
During live system triage, initial reconnaissance, forensic capture inspection, or baseline configuration auditing.
# Debian / Ubuntu
sudo apt install ltraceLibrary call inspection:
- Trace library calls of executed command: ltrace ./binary
- Trace string comparison calls: ltrace -e strcmp,strncmp ./binary
- Attach to running process: ltrace -p <PID>