In the main function, program authors can choose to receive the char * array as a parameter to main that points to the environment variablesint main(int argc, char **argv, char **envp) {...}The point being here is the envp pointer is wanted, but not from the perspective of the program author with the source. The question is, at runtime, how can one know the location of the environment variables, even if the binary being run is stripped?Basically, I've figured out how to do this reliably on 32 and 64 bit linux for argv; I can know how many command arguments there are, where they are and what they are. And I can do this for envp on 32 bits, but not 64 bits. Does anybody know a technique to do this reliably for 64 bits at runtime in linux on stripped binaries? 
How to find location of environment variables in 64 bit binaries at runtime?
linux;dynamic analysis;x64