Security Tools News & Tips » Disassembler

Fenris

Niranjan — Thu, 29 Mar 2007 09:23:39 +0000

Fenris is a multipurpose tracer, GUI debugger, stateful analyzer and partial decompiler intended to simplify bug tracking, security audits, code, algorithm, protocol analysis and computer forensics – providing a structural program trace, interactive debugging capabilities, general information about internal constructions, execution path, memory operations, I/O, conditional expressions and much more.

Homepage

OllyDbg

Niranjan — Tue, 13 Mar 2007 01:53:15 +0000

OllyDbg is a 32-bit assembler level analysing debugger for Microsoft Windows. Emphasis on binary code analysis makes it particularly useful in cases where source is unavailable. Special highlights are: intuitive user interface, no cryptical commands, Code analysis – traces registers, recognizes procedures, loops, API calls, switches, tables, constants and strings, Directly loads and debugs DLLs, Object file scanning – locates routines from object files and libraries. OllyDbg is a shareware, but you can download and use it for free

Homepage

SysAnalyzer

Niranjan — Sun, 28 Jan 2007 02:05:39 +0000

SysAnalyzer is an automated malcode run time analysis application that monitors various aspects of system and process states. SysAnalyzer was designed to enable analysts to quickly build a comprehensive report as to the actions a binary takes on a system. SysAnalyzer can automatically monitor and compare: Running Processes, Open Ports, Loaded Drivers, Injected Libraries, Key Registry Changes, APIs called by a target process, File Modifications, HTTP, IRC, and DNS traffic. SysAnalyzer also comes with a ProcessAnalyzer tool which can perform the following tasks: Create a memory dump of target process, parse memory dump for strings, parse strings output for exe, reg, and url references and scan memory dump for known exploit signatures.

Homepage

IDA Pro

Niranjan — Fri, 19 Jan 2007 04:31:21 +0000

The IDA Pro Disassembler and Debugger is an interactive, programmable, extendible, multi-processor disassembler hosted on Windows or on Linux. IDA Pro has become the de-facto standard for the analysis of hostile code, vulnerability research and COTS validation. Disassembly is a big part of security research. The real interest of a disassembler is that it shows the instructions that are actually executed by the processor in a symbolic representation called assembly language. If the friendly screen saver you have just installed is spying on your e-banking session or logging your e-mails, a disassembler can reveal it.

Homepage