Name: examiner Version: 0.5 Release: 2%{?dist} Summary: Utility to disassemble and comment foreign executable binaries Group: Development/Tools License: GPLv2 URL: http://www.academicunderground.org/%{name}/ Source0: http://www.academicunderground.org/examiner/%{name}-%{version}.tar.gz BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildArch: noarch BuildRequires: perl %description The Examiner is an application that utilizes the objdump command to disassemble and comment foreign executable binaries. This app was designed to analyze static compiled binaries but works ok with others. The intention is for forensic research but could also be used in general reverse engineering. This program can only handle basic dissassembly. If the binary has been modified to resist debugging then the Examinier probably will not be able to analyze the code. Also the Examiner will not analyze live running code. %prep %setup -q -n %{name}-%{version} %build # empty build chmod 644 utils/* %install rm -rf $RPM_BUILD_ROOT mkdir -p $RPM_BUILD_ROOT/%{_bindir} mkdir -p $RPM_BUILD_ROOT/%{_mandir}/man1/ sed -i -e 's@cp @cp -p @' Makefile # Save timestamp make install BIN=$RPM_BUILD_ROOT/%{_bindir}/ \ MAN=$RPM_BUILD_ROOT/%{_mandir}/man1/ \ SHARE=${RPM_BUILD_ROOT}/%{_datadir}/%{name} \ DOC=${RPM_BUILD_ROOT}/%{_datadir}/doc/%{name}-%{version} %clean rm -rf $RPM_BUILD_ROOT %files %defattr(-,root,root,-) %dir %{_datadir}/doc/%{name}-%{version}/ %{_datadir}/doc/%{name}-%{version}/* %{_bindir}/%{name} %{_mandir}/man1/%{name}.1.gz %dir %{_datadir}/%{name}/os %{_datadir}/%{name}/os/* %changelog * Sat Nov 08 2008 Rakesh Pandit 0.5-2 - Cleaned up sed mess. * Tue Nov 04 2008 Rakesh Pandit 0.5-1 - Initial package