Skip to main content

Usage

kong info ./path/to/binary
kong info opens the binary in Ghidra and displays metadata without running the analysis pipeline. It’s useful for checking architecture, format, and function count before committing to a full analysis.

Example output

Binary: libc.so.6
Path: /lib64/libc.so.6
Arch: x86-64
Format: ELF
Endianness: little
Word Size: 64-bit
Compiler: GCC
Functions: 2842
  imported: 156
  thunk: 89
  trivial: 220
  small: 987
  medium: 1203
  large: 187

Classification breakdown

The function count is broken down by size classification:
ClassificationDescription
importedExternal library functions (linked dynamically)
thunkSingle-instruction wrappers (jump stubs)
trivial≤16 bytes — too small for meaningful analysis
small≤64 bytes
medium≤256 bytes
large>256 bytes
Imported and thunk functions are skipped during analysis. Trivial functions are usually skipped as well. The remaining functions (small + medium + large) make up the analysis queue.

Options

FlagDescription
--ghidra-dirOverride Ghidra installation path

Further reading

Last modified on March 20, 2026