Where can someone interested in the topic learn more about Dynamic binary instrumentation?

Question

Generally, it's a complex topic. There seems to be very little in the way of example or linear progression in to non-trivial examples.

It's possible my google-fu is weak, but I can't seem to locate decent tutorials on using binary instrumentation frameworks (Pin, DynamoRIO, other).

What resources could someone who is interested use beyond stumbling around until they get it working?

After some of the answers, I thought I should tack on that dynamorio.org is sometimes non-responsive. The project is on googlecode here.

score 8 · Accepted Answer · answered Apr 05 '13 at 05:06

There is a nice introduction on PIN at http://www.slideshare.net/null0x00/nullcon-2011-automatic-program-analysis-using-dynamic-binary-instrumentation also a nice tutorial on Skype for Linux simple unpacking using Pin http://joxeankoret.com/blog/2012/11/04/a-simple-pin-tool-unpacker-for-the-linux-version-of-skype/

Finally an old presentation that you might like also, "Using the Pin Instrumentation Tool for Computer Architecture Research" http://www.jaleels.org/ajaleel/Pin/slides/1_Intro.ppt

Plus one for the Skype example, which is really the thing for which I was looking (non-all-theory non-contrived example). — RobotHumans, Apr 05 '13 at 11:41

score 5 · Answer 2 · answered Apr 05 '13 at 07:56

5

Jurriaan Bremer wrote at least two articles that can be quite informing regaring Pin which can serve as a nice introduction.

answered Apr 05 '13 at 07:56

0xea

4,904
1
23
30

score 5 · Answer 3 · answered Apr 05 '13 at 08:45

5

If you've never touched DBI before, I found this book to be a good use of $17. Written by a long-time researcher in the field, it describes the theory and practice behind DBI, including multiple DBI platforms, exotic DBI tools, etc.

answered Apr 05 '13 at 08:45

Rolf Rolles

9,198
1
23
33

Plus one for a full text. It would be more convenient as a kindle edition though. – RobotHumans Apr 05 '13 at 11:42
@RolfRolles: thanks for the tip. It's now on my shopping list for next month :) – 0xC0000022L Apr 05 '13 at 17:00

score 0 · Answer 4 · edited Apr 05 '13 at 14:05

0

PIN and DynamoRIO both have complete documentation with many examples that are fully commented. I think best place to start is to play with examples, modify them and see the result.

edited Apr 05 '13 at 14:05

perror

19,083
29
87
150

answered Apr 05 '13 at 08:04

Arash

229
1
8

Where can someone interested in the topic learn more about Dynamic binary instrumentation?

4 Answers4