Binary inspection tooling

Two builds, one instruction stream: where GCC actually records a non-executable stack

A dev.to walkthrough compiles the same vulnerable socket server with -z execstack and -z noexecstack. The code does not change, the linked image does, and the script reads the wrong file.