Learning Linux Binary Analysis

by Ryan "Elfmaster" O'Neill

dynamically linked executable will always retain .dynsym but will discard .symtab if it is stripped, so only the imported library symbols will show up.