PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Exploring Execution Trace Analysis

blog.quarkslab.com | research | #reverse-engineering | #tooling | #dynamic-analysis | #program-analysis | #tracing | #triton
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The post illustrates advantages of off-line execution trace analysis over on-line approaches, through several examples using Quarkslab's internal trace collection and analysis tooling.
Published
Collected

Related coverage

research · blog.quarkslab.com
Triton v0.8 and ARMv7: A Guideline for Adding New Architectures
A follow-up to the Triton v0.8 release explaining how ARMv7 support was added to the symbolic execution framework and outlining a guideline for integrating new architectures.
research · blog.quarkslab.com
Triton v0.8 is Released!
Triton v0.8 is released under Apache 2.0, bringing bug fixes and features: implicit concretization, new path predicate APIs, ARMv7 support and more, highlighted from a large changelog.
research · blog.quarkslab.com
Symbolic Deobfuscation: From Virtualized Code Back to the Original (DIMVA 2018)
A micro-post on joint research with CEA and VERIMAG (DIMVA 2018): symbolically deobfuscating virtualized hash functions by tainting VM inputs and concretizing unrelated instructions.
research · blog.quarkslab.com
Mistreating Triton
Experiments that mistreat the Triton concolic-execution framework with forged C programs: unsupported vector instructions, orchestrated forks and inflated path counts to challenge its CFG recovery.
research · volexity.com
Go Get ‘Em: Updates to Volexity Golang Tooling
# Go Get ‘Em: Updates to Volexity Golang Tooling August 11, 2025 Ivan Mladenov _This blog post was the final deliverable for asummer internship project, which was completed under the direction of...
research · blog.quarkslab.com
BSIM explained once and for all!
Quarkslab finally explains Ghidra's BSIM internals: functions are lifted to normalized P-code, hashed into feature vectors, and compared to find semantically equivalent functions.
Back