15.1.2. 动态分析

15.1.2.1. 动态插桩

• DynamoRIO Dynamic Instrumentation Tool Platform

• pintools Pintool example and PoC for dynamic binary analysis

• frida

• QBDI A Dynamic Binary Instrumentation framework based on LLVM

• TinyInst A lightweight dynamic instrumentation library

15.1.2.2. 符号执行

• Z3

• manticore Symbolic execution tool

15.1.2.3. gdb插件

• peda

• pwndbg Exploit Development and Reverse Engineering with GDB Made Easy

• GEF GDB Enhanced Features for exploit devs & reversers

15.1.2.4. 调试工具

• bcc

• openresty systemtap toolkit

• dtrace

• uftrace

• qira QEMU Interactive Runtime Analyse

15.1.2.5. 模拟执行

• qemu

• unicorn

• OpenEmu

• panda Platform for Architecture-Neutral Dynamic Analysis

• avatar2

15.1.2.6. 进程分析

• Process Explorer

• PeDoll Application behavior monitor based on inline hook

• libunwind

15.1.2.7. hook

• plthook Hook function calls by replacing PLT(Procedure Linkage Table) entries.

• funchook Hook function calls by inserting jump instructions at runtime

15.1.2.8. 污点分析

• Triton

• bap Binary Analysis BinaryAnalysisPlatform