crack

CRACK - Compiler Hardening Checker

Work in Progress: This project is currently unstable and under active development. APIs, rules, and output formats may change without notice. Do not use in production workloads.

A tool to analyze ELF binaries for security hardening features.

Based on recommendations from:

• OpenSSF Compiler Options Hardening Guide for C and C++
• Gentoo Hardened Toolchain
• Debian Hardening
• Ubuntu Toolchain Compiler Flags

Usage

crack analyze /usr/bin/ls
crack analyze --rules=pie,relro,stack-canary /usr/bin/ls
crack analyze --debuginfod /usr/bin/ls

Documentation

• Rules Reference

License

MIT License - see LICENSE for details.