ICPin

ICPin 一个完整性检查监控 Pintool 是什么 一个用于记录可执行文件在内存中读取和写入的 pintool。它还跟踪动态执行的代码，处理一些反调试检查（由于 pintool 的设计，它对大多数反调试手段免疫），并输出被监视行为的回溯。 如何 构建 从 https://software.intel.com/en-us/articles/pin-a-binary-instrumentation-tool-downloads 下载 MSCV 版本 在 Visual Studio 中打开 MyPinTool.sln 调整 include 和 link 目录以匹配你的 pintool 安装...

[Malwasm] Offline debugger for malware's reverse engineering

Malwasm is a tool based on Cuckoo Sandbox available here. Malwasm was designed to help people that do reverse engineering. Malwasm step by step: the malware to analyse is executed through Cuckoo Sandbox during the execution, malwasm logs all activites of the malware with pintool all activities ar...