LOADING N0PERM…
Diagnostic and debugging utility for Linux that monitors system calls and signals received by a process. Essential for reverse engineering and behavior triage.
A standard LINUX utility used across offensive reconnaissance, packet forensics, and defensive system administration.
Direct visibility into network interfaces, protocol frames, access controls, or filesystem structures without graphical overhead.
During live system triage, initial reconnaissance, forensic capture inspection, or baseline configuration auditing.
# Debian / Ubuntu
sudo apt install strace
# RHEL / Fedora
sudo dnf install straceProcess syscall tracing:
- Trace executed process: strace -f -o trace.log ./suspicious_binary
- Filter for file open calls: strace -e trace=openat,open ./app
- Filter network socket calls: strace -e trace=network -p <PID>
- Count system call frequency and time: strace -c ./app