OBJDUMP

VIEW ADDRESSES OF PROCEDURE LINKAGE TABLE (.PLT)

root@dev:~$ objdump -M intel --section .plt -d 27_stack_overflow.out
 27_stack_overflow.out:     file format elf32-i386
 
 Disassembly of section .plt:
 
 //this is the default stub
 //this assist in facilitating things sre analyst is trying to find
 00001020 <.plt>:
     1020:  ff b3 04 00 00 00  push DWORD PTR [ebx+0x4]
     1026:  ff a3 08 00 00 00  jmp  DWORD PTR [ebx+0x8]
     102c:  00 00              add  BYTE PRT [eax], al
     
//this is one of the function stub
//the identifiers for each function stub in this example are:
//0x0, 0x8, 0x10, and 0x18
00001030 <gets@plt>:
    1030:
    1036:
    103b:
    
00001040 <puts@plt>:
    1040:
    1046:
    104b:
    
00001050 <exit@plt>:
    1050:
    1056:
    105b:
    
00001060 <__libc_start_main@plt>:
    1060:
    1066:
    106b:

VIEW ADDRESSES OF GLOBAL OFFSET TABLE (.GOT)

root@dev:~$ objdump -M intel --section .got.plt -d 27_stack_overflow.out
 27_stack_overflow.out:     file format elf32-i386
 
 Disassembly of section .got.plt:
 
 00004000 <_GLOBAL_OFFSET_TABLE_>:
     4000:  fc 3e 00 00 00 00 00 00 00 00 00 00 36 10 00 00  .>......... 6...
     4010:  46 10 00 00 56 10 00 00 66 10 00 00              F...V...f...