Poppy – Dynamic Instrumentation Pipeline for macOS Security Research
Poppy는 macOS 데몬과 XPC 서비스의 동적 분석, 관측성, 결함 주입을 위한 툴킷입니다. Frida, DTrace, 커스텀 인젝터를 결합해 데몬의 런타임 동작과 권한 검사, 호출 경로 등을 실시간으로 관찰하고 결함을 주입할 수 있습니다. 특히 PAC, Swift/Objective-C 동적 디스패치로 인한 정적 분석 한계를 극복하며, JSONL 로그 포맷으로 후처리와 자동화 분석에 용이합니다. macOS 보안 연구 및 취약점 분석에 즉시 활용 가능한 오픈소스 도구입니다.
soSaver — Frida-based .so library dumper
A tool that dynamically extracts native .so libraries from an Android app’s memory by hooking loader calls and scanning process memory via Frida, useful in dynamic analysis and reverse engineering.
Dynamic instrumentation frameworks such as Frida, Intel PIN, and DynamoRIO allow reverse-engineers to observe and modify program behaviors at runtime, but are difficult for non-experts to use. This talk introduces Pyda — a framework for writing dynamic instrumentation tools in a few short lines of Python. Pyda extends the familiar pwntools-style interface with runtime “hooks” that can modify registers and memory or redirect execution. We describe how we built performant and user-friendly dynamic instrumentation on top of DynamoRIO — and how you can use it to analyze complex, multithreaded applications on X86 and ARM64. We show how to replace existing debugging (e.g. GDB scripting) and instrumentation workflows with Pyda scripts, and how we used Pyda to solve a recent CTF challenge. Finally, we show how Pyda’s built-in compiler can inline complex, performance-sensitive instrumentation.
Finding and writing 0day with Microsoft's fuzzer: https://www.vdalabs.com/2019/04/25/microsoft-security-risk-detection-0day-in-verypdf-reader-part-1/ #fuzzing #appsec #softwaresecurity #dynamicanalysis
sayzard
kriware 
RE//verse Conference
ITSEC News
buherator