Ole André Vadla Ravnås (@oleavr)

http://frida.github.io/

Frida IRE (Interactive Reverse-engineering Environment) is an open source reversing tool focusing on scriptable dynamic instrumentation in userland.

cryptoshark
Lobotomy
Frida PluginFor Ida Pro
frida-tracer
frida-cfg-hook

Video from talks about Frida (1)
Video from talks about Frida (2)
Instrumenting Android Applications with Frida
Hooking Firefox with Frida
Objective-C Instrumentation with Frida

Romain Gaucher (@rgaucher), Haris Andrianakis (@tl0gic)

https://github.com/neuroo/pinpy

PIN

PinPy essentially allows you to to run Python scripts inside whatever programs, just educate it using the XML config file, what you want to hook. You'll need to get some information so that pin can properly install the hooks such as signature, etc. This is done by embedding a Python runtime in a pin tool.

???

???

Roberto Paleari (@rpaleari)

Lorenzo Martignoni (@martignlo)

Lorenzo Cavallaro (http://www.few.vu.nl/~sullivan/)

http://code.google.com/p/processtap/

PinTool, (Valgrind, QEMU, DinamoRIO)

ProcessTap is a dynamic tracing framework for analyzing closed sourceapplications. ProcessTap is inspired by DTrace and SystemTap, but it is specific for analyzing closed-source user-space applications. ProcessTap leverages dynamic binary instrumentation to intercept the events of interest (e.g., function calls, system call, memory accesses, and conditional control transfers). Although the current implementation relies on PinTool, alternative back-ends for instrumentation (e.g., Valgrind, Qemu, or DynamoRIO) can be used. The language used in ProcessTap for writing scripts to instrument applications is Python.

???

examples

Adrián Manrique (@n0km, adrian@coresecurity.com)

Andrés López Luksenberg (aluksenberg@coresecurity.com)

http://corelabs.coresecurity.com/index.php?module=Wiki&action=view&type=...

QEMU

PyCodin is an open source Python library that allows instrumentation of low-level code for different architectures. It came out from the necessity of developing a testing environment for low-level code that exploits vulnerabilities (a.k.a. shellcode). The library provides a virtual CPU front-end, allowing the manipulation of a virtualized memory space and creating different
scenarios, giving the developer new tools to control the execution. PyCodin also allows runtime inspection and modification of the execution context of the instrumented program. The first version of the tool uses Qemu as the virtualization back-end.

???

"Pycodin: Instrumentando código sin dolor" presentation (spanish)

Jurriaan Bremer (@skier_t)

https://github.com/jbremer/pyn

PIN

Awesome Python bindings for Pintool. Pyn aims to offer an extremely easy API for quickly writing Pintools.
Pyn features a raw API close to the original Pintool API as well as a more Pythonic API. It's important to understand that Pyn hides various aspects of regular Pintools, allowing one to make full-featured Pintools in just a handful lines of code.

???

???

blankwall

https://github.com/blankwall/Python_Pin

PIN

Python bindings for pin.

???

Video

Jonathan Salwan

https://github.com/JonathanSalwan/Triton

PIN

Triton is a concolic execution framework based on Pin. It provides components like a taint engine, a dynamic symbolic execution engine, a snapshot engine, translation of x64 instructions into the SMT2-LIB representation, a Z3 interface to solve constraints and Python bindings.

???

Code coverage using a dynamic symbolic execution
Dynamic Binary Analysis and Obfuscated Codes