• Stars
    star
    578
  • Rank 76,642 (Top 2 %)
  • Language
    C++
  • Created almost 10 years ago
  • Updated over 2 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Pintool example and PoC for dynamic binary analysis

Pin Tools

I just decided to centralize my old and next Pin tools about program analysis in this repo. Be careful, these pintool are not reliable. They are here just as PoC and to provide some ideas.

Timeline

Timeline
Name date
Talks/SSTIC-2015 Triton a Pin-based DSE framewok Jun 03, 2015
Talks/StHack-2015 Dynamic Behavior Analysis using DBI Mar 27, 2015
Talks/SecurityDayLille-2015 Dynamic Symbolic Execution Jan 17, 2015
FormatStringDetection Nov 11, 2014
OverflowDetection Oct 10, 2013
ConcolicExecution Aug 28, 2013
InMemoryFuzzing Aug 17, 2013
LoopDetectionInstCounter Aug 13, 2013
ObsoleteStackFrameAccessDetection Aug 08, 2013
ClassicalUseAfterFreePatternMatching Aug 08, 2013
PointerWithoutCheckDetection Aug 08, 2013
TaintAnalysis Aug 08, 2013

Related blog post

Talks/SSTIC-2015 Triton a Pin-based concolic execution framework

Talks/StHack-2015 Dynamic Behavior Analysis Using Dynamic Binary Instrumentation

  • n/a

Talks/SecurityDayLille-2015 Dynamic Symbolic Execution

FormatStringDetection

  • n/a

OverflowDetection

ConcolicExecution

InMemoryFuzzing

LoopDetectionInstCounter

  • n/a

ObsoleteStackFrameAccessDetection

ClassicalUseAfterFreePatternMatching

PointerWithoutCheckDetection

TaintAnalysis

More Repositories

1

ROPgadget

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
Python
3,841
star
2

Triton

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
C++
3,455
star
3

VMProtect-devirtualization

Playing with the VMProtect software protection. Automatic deobfuscation of pure functions using symbolic execution and LLVM.
Roff
1,151
star
4

Tigress_protection

Playing with the Tigress software protection. Break some of its protections and solve their reverse engineering challenges. Automatic deobfuscation using symbolic execution, taint analysis and LLVM.
LLVM
798
star
5

binary-samples

Samples of binary with different formats and architectures. A test suite for your binary analysis tools.
Makefile
243
star
6

abf

Abstract Binary Format Manipulation - ELF, PE and Mach-O format
Python
114
star
7

stuffz

Some low-level stuff
C++
103
star
8

ttexplore

TTexplore is a library that performs path exploration on binary code using symbolic execution
C++
72
star
9

X-Tunnel-Opaque-Predicates

IDA+Triton plugin in order to extract opaque predicates using a Forward-Bounded DSE. Example with X-Tunnel.
Python
51
star
10

Kaminou-Kernel

Just another (unfinished) kernel from scratch...
C
41
star
11

VMNDH-2k12

Emulator, debugger and compiler for the NDH architecture - Emulator for CTF NDH 2k12
C
36
star