libdft64
libdft64 copied to clipboard
libdft for Intel Pin 3.x and 64 bit platform. (Dynamic taint tracking, taint analysis)
Hi, I tried to attach the program by using the following command: ``` pin -follow-exec -t libdft.so -- /path/to/my/exec ``` Specifically, my traced program is a nginx web server and...
Hi, I tried to print the instructions using taint tracked data by uncommenting the following code: https://github.com/AngoraFuzzer/libdft64/blob/master/src/libdft_api.cpp#L302 But it seems to print all the instructions which are executed after `tainted...
Hi, I encountered several compilation errors when building libdft-dta, while track, nullpin, libdft were built without any errors. I used pin-3.7-97619-g0d0c92f4f-gcc-linux, which was downloaded using the install_pin.sh script, on Ubuntu...
I got these errors while installing libdft64 from source: ~/libdft64$ make cd src && CPPFLAGS= DFTFLAGS= make make[1]: Entering directory '/home/admin/libdft64/src' Makefie:20: ../Config/makefile.config: No such file or directoryl Makefile:22: /Config/makefile.default.rules:...
I found that the Intel pin can't check the program running in the kernel mode. so, most of the kernel modules running in kernel mode. I think the libdft64 can't...
Could this be updated to point a slightly newer version of the pin tool such as version 3.8? I would pull this tar.gz file myself but cannot find the exact...
I noticed that MUL instruction was treated as ins_unitary_op. However, if rax/rdx is not tainted before, MUL instruction might taint them. I am wondering how to solve this. :)
in libdft_api.cpp, I think "int ins_clr_post(syscall_desc_t *desc)" should be "int ins_clr_post(**ins_desc_t** *desc)"
Hi, looks like at line:472 & 480 in https://github.com/AngoraFuzzer/libdft64/blob/master/src/ins_xfer_op.cpp We are giving the wrong callback, it should be r2m_xfer_opl & r2m_xfer_opq respectively. please confirm and fix. Thanks
Good day. I have a common question. How can I use your taint engine for tracking arbitrary data in common case? For example I don't know which function will touch...