Prevent execute-file from dump function name by using `strings` and `class-dump`

Question

I am writing a security app in c++. And when I run strings app.name I found there are many method name appear on the result.

Is there any way to hidden these method names? (I can change these function names manually, but I just wonder are there some flags can be added to compiler to hidden these names easily).

Make sure to strip debug symbols from your final executable. On Linux, use the `strip` command, or pass `-s` to GCC. — Kerrek SB, Mar 16 '12 at 14:29
That, and compile without RTTI. Of course, that doesn't work if you use exception handling. — Simon Richter, Mar 16 '12 at 14:32
@SimonRichter: What will be the issue with RTTI? That will only offer names of classes, or is there any more information there? — David Rodríguez - dribeas, Mar 16 '12 at 15:10

score 0 · Answer 1 · answered Mar 16 '12 at 16:10

0

Security through obscurity can still be overcome, but you could always strip your binary to remove all the debugging symbols and information.

answered Mar 16 '12 at 16:10

Mark B

95,107
10
109
188

Prevent execute-file from dump function name by using `strings` and `class-dump`

1 Answers1