PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

QBDI 0.8.0

blog.quarkslab.com | research | #release | #instrumentation | #llvm | #simd | #qbdi | #dbi
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

QBDI 0.8.0 adds SIMD memory access support, a new InstrRuleCallback for advanced instrumentation, and performance improvements; the notes also cover LLVM 10-related analysis changes.
Published
Collected

Related coverage

research · blog.quarkslab.com
QBDI 0.7.0
QBDI 0.7.0 adds x86 support; the post walks through a Tencent packer use case where QBDI and LIEF instrument the decoding routine to recover a protected .text section on Android.
research · blog.quarkslab.com
Slaying Dragons with QBDI
Solving the CSAW CTF 2015 'Wyvern 500' crackme with QBDI and its Frida bindings: tracing basic blocks to locate the password check and inject valid inputs without a full reverse engineering effort.
research · blog.quarkslab.com
Bypassing Android Hardware Attestation from the Analyst's Chair
Hardware key attestation lets an Android app prove to its backend that a key lives in secure hardware on a locked, verified device. It is also the wall that stops a security analyst working on a rooted phone. This article opens the mechanism from the analyst's chair, from the certificate chain and the attestation extension down to the root of trust, then shows a simple bypass that never touches the secure hardware. We relay the attestation to a clean device and splice a genuine chain back into the target app with a Frida hook. A companion repository ships the validation backend, the demo apps and the instrumentation, so the whole setup can be run and inspected rather than taken on faith.
research · blog.quarkslab.com
Extending LLVM's BOLT-based Binary Analyser to Validate Stack Variable Initialisation
Quarkslab extended LLVM's BOLT-based binary analyser for OSTIF with a scanner that validates -ftrivial-auto-var-init at the binary level, verifying stack-variable initialisation hardening.
research · blog.quarkslab.com
Obfuscation vs the Optimizer: An LLVM Middle-End Arms Race
A Quarkslab post on the tug-of-war between obfuscators and compiler optimizers: through LLVM's middle-end IR and passes, it shows how a single upstream commit can unravel an obfuscation.
research · blog.quarkslab.com
QBDI vs TritonDSE against a VM: who will be the fastest?
Quarkslab solves a custom-VM CTF challenge twice — with symbolic execution engine TritonDSE and instrumentation framework QBDI — and compares which approach gets to the solution fastest.
Back