2 个仓库
Observing and analyzing a compiled program's behavior during runtime to debug logic and visualize execution flow.
Distinguishing note: Candidates focus on dynamic programming algorithms or forensic artifact analysis, not runtime binary observation.
Explore 2 awesome GitHub repositories matching operating systems & systems programming · Dynamic Binary Analysis. Refine with filters or upvote what's useful.
Qira 是一个为 QEMU 模拟器设计的运行时分析工具和交互式二进制调试器。它作为一个二进制执行跟踪器,记录指令调用的完整时间线,并提供一个用于监视客户进程内内存操作的系统。 该项目通过跟踪指令级执行并将原始内存地址映射到用户定义的注释,实现了对编译二进制文件的分析。它包括用于管理执行分支的状态快照功能,允许导航不同的逻辑路径,并在记录的时间线上的任何单点检查 CPU 寄存器状态和系统调用参数。 该系统涵盖了广泛的动态程序分析和二进制逆向工程任务。这包括监视内存访问模式以识别修改特定数据的指令、在受控环境中分析恶意软件行为以及进行软件漏洞研究。
Observes programs while they run to debug logic errors and visualize the flow of execution through different forks.
This project is a cybersecurity educational resource and courseware designed for malware analysis and reverse engineering. It provides a structured curriculum of lessons, labs, and guided projects focused on detecting and understanding the behavior of malicious software. The resource includes a lab guide for building isolated virtual machine environments to safely execute and study malware. It covers the setup of a specialized toolchain consisting of disassemblers and debuggers used to analyze compiled machine code. The training material covers both static analysis, which examines binary cod
Implements methods for observing and analyzing compiled program behavior during runtime.