Questions tagged [instrumentation]

Question 1

What I want to do What I want to do is inject an existing ELF binary with additional code that runs before the original .text section and then transfers control back to it. What I can already do Now, ...

Question 2

I want to trace the mutex variables in my rust program(e.g. which mutex called lock() and unlock() methods). And I think there're static methods.

Question 3

I am studying PinTools multithread example inscount_tls.cpp. When I change the number of thread to 3, only 1 thread outputs the result. Is anyone familiar with Intel Pintools instruments that can give ...

Question 4

I'm not sure about all tools. But afaik at least with Frida functions are patched and new code is added to other memory regions and then jumped to. The rest of the code layout stays the same. Is there ...

Question 5

I hope someone can help me out with my problem. Currently I'm working with C# and use the library Mono.Cecil to add Instruction Code before a method exits. There is this one case, when a if statement ...

Question 6

My research requires processing memory traces of applications. For C/C++ programs, this is easy using Intel's PIN library. However, as suggested here https://stackoverflow.com/questions/51835532/use-...

Question 7

I'm starting to learn Intel's Pin framework and I can't figure out if it's possible to create an executable. I mean, rather than creating a module and forcing people to download Pin + the module, is ...

Question 8

Hello and thank you for reading my question, I was wondering, which is the right tool for me to choose according to the following: I will be using it mainly for Malware analysis and for exploit ...

Question 9

i am really glad i found this great site and wanted to ask from your expertise regarding the following issue: i have been doing malware analysis and researching for a few years, and i want to learn ...

Question 10

Do you know an instrument equivalent to Intel Pin (https://software.intel.com/en-us/articles/pin-a-dynamic-binary-instrumentation-tool) for AMD processors, which helps me especially for reverse of ...

Question 11

I have a heavily obfuscated Windows service binary. Fields, types and methods are renamed. While it is possible to decompile the binary using dnSpy, it is still very cumbersome to identify important/...

Question 12

I am writing a Pin tool with the following functionality: It has to record instructions with arguments. (works well) It has to record memory access operations associated with instructions. (works well)...

Question 13

Do you known any dbi tool that support instrumentation of application that use far jump 0x33? P.S. pin, dymanoRIO don't support far jump 0x33.

Question 14

I am doing a university project about performing malware analysis on binary files. The end goal would be to analyze real world executables(Microsoft Office installation file for example). If I use DBI,...

Question 15

Suppose I have a ton of test cases and my target is closed-source. Well, I need to know which test cases discover new path in the execution of my target and which are duplicated. I know I have to use ...

Stack Exchange Network

Questions tagged [instrumentation]

Inject ELF with an entierly self-contained code section that can statically call standard library functions

In Pintool, How to find the name of an routine's caller?

PinTools Multi-threaded example (inscount_Tls.cpp): only one thread outputs

Dynamic instrumentation tool for injecting assembly

How to add Instructions (OpCodes) after a If Statement in C#?

Instrument memory accesses of python scripts

Pin DBI tool - Create executable

Miasm VS Triton - which to choose? [closed]

modern instrumentation for reversing and researching [closed]

Do you know the equivalent of the Intel Pin utility for AMD processors

Trace Method Calls in .NET/C# Binary

Tracing calls, rets and instructions with Intel Pin

Instrumentation fail when app use far jump 0x33 crash

Is Dynamic Binary Instrumentation legal in UK/EU for malware analysis?

Detect interesting testcases

Hot Network Questions