JonathanSalwan / PinTools

Pintool example and PoC for dynamic binary analysis

Pin Tools

I just decided to centralize my old and next Pin tools about program analysis in this repo. Be careful, these pintool are not reliable. They are here just as PoC and to provide some ideas.

Timeline

+-------------------------------------------------------------------------------+ | Timeline | +----------------------------------------------------------------+--------------+ | Name | date | +================================================================+==============+ | Talks/SSTIC-2015 Triton a Pin-based DSE framewok | Jun 03, 2015 | +----------------------------------------------------------------+--------------+ | Talks/StHack-2015 Dynamic Behavior Analysis using DBI | Mar 27, 2015 | +----------------------------------------------------------------+--------------+ | Talks/SecurityDayLille-2015 Dynamic Symbolic Execution | Jan 17, 2015 | +----------------------------------------------------------------+--------------+ | FormatStringDetection | Nov 11, 2014 | +----------------------------------------------------------------+--------------+ | OverflowDetection | Oct 10, 2013 | +----------------------------------------------------------------+--------------+ | ConcolicExecution | Aug 28, 2013 | +----------------------------------------------------------------+--------------+ | InMemoryFuzzing | Aug 17, 2013 | +----------------------------------------------------------------+--------------+ | LoopDetectionInstCounter | Aug 13, 2013 | +----------------------------------------------------------------+--------------+ | ObsoleteStackFrameAccessDetection | Aug 08, 2013 | +----------------------------------------------------------------+--------------+ | ClassicalUseAfterFreePatternMatching | Aug 08, 2013 | +----------------------------------------------------------------+--------------+ | PointerWithoutCheckDetection | Aug 08, 2013 | +----------------------------------------------------------------+--------------+ | TaintAnalysis | Aug 08, 2013 | +----------------------------------------------------------------+--------------+

Related blog post

Talks/SSTIC-2015 Triton a Pin-based concolic execution framework

• http://shell-storm.org/blog/Triton-under-the-hood/

Talks/StHack-2015 Dynamic Behavior Analysis Using Dynamic Binary Instrumentation

• n/a

Talks/SecurityDayLille-2015 Dynamic Symbolic Execution

• http://securitydaylille1.github.io/#djo

FormatStringDetection

• n/a

OverflowDetection

• http://shell-storm.org/blog/Stack-and-heap-overflow-detection-at-runtime-via-behavior-analysis-and-PIN/

ConcolicExecution

• http://shell-storm.org/blog/Binary-analysis-Concolic-execution-with-Pin-and-z3/

InMemoryFuzzing

• http://shell-storm.org/blog/In-Memory-fuzzing-with-Pin/

LoopDetectionInstCounter

• n/a

ObsoleteStackFrameAccessDetection

• http://shell-storm.org/blog/Taint-analysis-and-pattern-matching-with-Pin/#5.1

ClassicalUseAfterFreePatternMatching

• http://shell-storm.org/blog/Taint-analysis-and-pattern-matching-with-Pin/#5.2

PointerWithoutCheckDetection

• http://shell-storm.org/blog/Taint-analysis-and-pattern-matching-with-Pin/#6

TaintAnalysis

• http://shell-storm.org/blog/Taint-analysis-and-pattern-matching-with-Pin/