TinyDBR
What is TinyDBR?
TinyDBR is meant for tiny dynamic binary rewriter fox x86 instruction set.
This is a port to the TinyInst by Google Project Zero team to fit my own needs.
The original TinyInst works as a debuuger and the target process runs seperately as a debuggee.
While TinyDBR runs inter the target process and translate instructions right there.
How TinyDBR works?
Currently, TinyDBR only support Windows and X64.
Both TinyInst and TinyDBR will protect the target's code to non-executable property, then an attempt to execute the target code will raise an execute exception.
But compared to TinyInst, which catch the exception and translate instructions in debug event loop of the debugger process, TinyDBR registers a VEH handler at the target process, and does all tranlation steps within the VEH handler.
Other parts are almost the same as the original TinyInst.
TODO List:
- Refactory the public interface for easy usage.
- Remove remote memory backup as we now have only one process.
- Support rewrite shellcode without modules.
- Support rewrite multiple modules.
- Support other platform.
358 Dec 26, 2022
39 Nov 9, 2022
23.5k Jan 4, 2023
43 Dec 15, 2022
166 Jul 27, 2022
28 Dec 24, 2022
193 Dec 9, 2022
39 Dec 28, 2022
2 Jan 3, 2022
4 Apr 29, 2022
3 Dec 23, 2021
4 Mar 19, 2022
42 Nov 9, 2022
1.3k Jan 1, 2023
525 Dec 27, 2022
198 Dec 1, 2022
2 May 7, 2022
11 Dec 20, 2022
71 Nov 20, 2022