---
id: 1928
title: "Reverse Taint Analysis Using Binary Ninja"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2019/08/29/reverse-taint-analysis-using-binary-ninja/"
published_at: "2019-08-29T10:50:20Z"
tags: ["open-source", "fuzzing", "reverse-engineering", "fault-injection", "triage", "static-analysis", "taint-analysis", "binary-ninja", "reverse-taint-analysis", "krf", "crash-analysis"]
phying_url: "https://phying.com/item/1928"
lang: en
---

# Reverse Taint Analysis Using Binary Ninja

## Summary

KRFAnalysis uses Binary Ninja's MLIL SSA form for reverse taint analysis, tracing crashes from the KRF syscall fault injection tool back to the responsible arguments and code paths.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2019-08-29T10:50:20Z
- **Original:** https://blog.trailofbits.com/2019/08/29/reverse-taint-analysis-using-binary-ninja/
- **Phying News:** https://phying.com/item/1928