Flag: Tornado! Hurricane!

Blogs >> oleavr's Blog

Created: Friday, October 24 2014 07:33.24 CDT Modified: Friday, October 24 2014 07:34.30 CDT
Direct Link, View / Make / Edit Comments
Anatomy of a code tracer
Author: oleavr # Views: 50089

Just wrote a blog post about the code tracer behind CryptoShark:
https://medium.com/@oleavr/anatomy-of-a-code-tracer-b081aadb0df8

This blog post is an attempt to demystify the implementation and make it easier for others to dive in.

Enjoy!

Created: Wednesday, August 27 2014 17:10.54 CDT  
Direct Link, View / Make / Edit Comments
CryptoShark: code tracer based on dynamic recompilation
Author: oleavr # Views: 67763

Here's a 43 second screencast showing it in action:
https://www.youtube.com/watch?v=hzDsxtcRavY

Source code and links to binaries available here:
https://github.com/frida/cryptoshark

Enjoy!

Created: Wednesday, June 25 2014 18:38.51 CDT  
Direct Link, View / Make / Edit Comments
Build a debugger in 5 minutes
Author: oleavr # Views: 32845

Just wrote a tutorial showing how to use Frida and Qml to build a debugging tool:

https://medium.com/@oleavr/build-a-debugger-in-5-minutes-1-5-51dce98c3544

Created: Thursday, April 17 2014 11:18.20 CDT  
Direct Link, View / Make / Edit Comments
frida.re 1.2.0 is out, with brand new ARM64 support
Author: oleavr # Views: 89874

Have a look at the release notes here, or just go ahead and get it at www.frida.re. Enjoy!

Created: Saturday, December 21 2013 13:15.29 CST Modified: Wednesday, January 29 2014 12:30.37 CST
Direct Link, View / Make / Edit Comments
frida.github.io: scriptable reversing tool for Windows, Mac, Linux and iOS
Author: oleavr # Views: 121791

Have a look here to get a rough idea what it's all about. Full JavaScript API reference here. Get the latest binaries here (updated automatically by Frida's buildbot).


Archived Entries for oleavr
Subject # Views Created On
Live x86 Code Instrumentation with Frida 17203     Monday, July 19 2010
oSpy is back 11990     Thursday, August 20 2009
Stressful but interesting days 15650     Wednesday, September 27 2006
MSNP15 authentication scheme REd 79688     Sunday, September 24 2006
oSpy 1.8.2 -- all your hashes are belong to us 11114     Saturday, September 23 2006
oSpy 1.8.1 released 11164     Friday, September 15 2006
oSpy released 9843     Wednesday, September 13 2006

There are 31,310 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
hi!
Jul/01
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit