admin/hasherezade-tiny_tracer
1
0
Fork 0
mirror of https://github.com/hasherezade/tiny_tracer synced 2026-06-08 14:36:37 +00:00
Code Issues Packages Projects Releases Wiki Activity
663 Commits 6 Branches 32 Tags
master
Commit Graph

54 Commits

Author SHA1 Message Date
hasherezade 0dde72e777 [BUGFIX] Fixed counting loaded entries (params and exclusions) 2026-05-25 20:00:54 +02:00
hasherezade 46f5080d3e [FEATURE] Implemented local watch and exclusion lists 2026-05-25 17:35:14 +02:00
hasherezade 434bbf6576 [FEATURE] Define stop offsets per executable rather than globally 2026-05-25 16:48:46 +02:00
hasherezade 82548f11cb [FEATURE] Refactored loadInt to a template. Added ini parameter: flush interval 2026-05-25 15:16:51 +02:00
hasherezade 991cafa2bc [FEATURE] Changes in Disasm follow rules: allow to follow threads 2025-11-12 23:14:43 +01:00
hasherezade 792a1102ae [BUGFIX] Fixed missing return value 2025-10-27 16:21:46 -08:00
hasherezade 662827a9ba [FEATURE] Allow for two modes of disassembly logging: inner and outer 2025-10-04 03:27:34 -07:00
hasherezade 7e94961828 [FEATURE] Load disasm ranges from a file ([module].disasm_range.csv), 
per module
 2025-10-03 14:16:44 -07:00
hasherezade 2410d741a9 [FEATURE] Allow for naming ranges 2025-10-02 15:38:11 -07:00
hasherezade e36cc4c1c6 [BUGFIX] Fixed definition of disasm ranges 2025-10-02 14:46:56 -07:00
hasherezade 746e483d59 [FEATURE] Define disasembly fragments as ranges 2025-10-02 14:27:29 -07:00
hasherezade 4dca64ea64 [FEATURE] Allow to exclude DLLs by name 2025-10-01 15:31:38 -07:00
hasherezade 5249c2cf51 [FEATURE] Allow to watch defined functions witin the traced module 2025-06-05 12:36:34 -07:00
hasherezade facbf4a450 [FEATURE] Allow to replace volume serial ID with a value from the INI file 2025-06-04 16:38:32 -07:00
hasherezade 9c7da6a2bf [FEATURE] Added manual exports parsing (for PE) 2025-06-01 17:26:27 -07:00
maxspl fba4569d50 [FEATURE] Log return value + follow args and returns 2025-04-26 14:19:17 +02:00
hasherezade d3426ba4f2 [FEATURE] Reverted: INI option regulating whether or not the child process will be followed 2024-12-15 16:13:52 -08:00
hasherezade b76d6b134c [FEATURE] Followed the child process unconditionally (whenever enabled from commandline). Changed the name of the log file 2024-12-15 15:16:47 -08:00
cecio f7421e1ee1 [FEATURE] Added new option: follow child processes 2024-12-10 21:33:34 +01:00
hasherezade d6244cd079 [REFACT] Pass argument as constant reference 2024-12-01 04:09:20 +01:00
hasherezade b5358bca57 [FEATURE] Added new option: show context in a disasm mode 2024-11-29 09:04:08 -08:00
hasherezade 1830d5da49 [FEATURE] Save boolean values as strings 2024-11-29 08:16:48 -08:00
hasherezade 888c538dea [FEATURE] Allow logging all instructions in a defined range 2024-08-24 06:30:53 -08:00
hasherezade ffd40f0d9e [FEATURE] New option in Settings: EMULATE_SINGLE_STEP - allow to enable or disable exception on trap flag 2024-08-24 04:19:15 -08:00
hasherezade 5bc1ad2c0f [FEATURE] Define how many times the wait at offset should be executed 2024-08-20 12:28:34 -07:00
hasherezade 1f94e542c2 [FEATURE] Define stop time by the ini file 2024-08-20 10:55:38 -07:00
hasherezade d51c784fa7 [BUGFIX] Fixed variable type (backward compat.) 2024-08-12 13:04:13 -07:00
hasherezade 3312c1bfcd [REFACT] Moved AntiDbg/AntiVm common parts to EvasionWatch 2024-08-09 12:57:27 -07:00
hasherezade 30a513ad9e [FEATURE] Allow to clear hypervisor or emulate HyperV (may be useful for VMProtect tracing) 2024-08-08 16:08:17 -08:00
hasherezade ad02515b7c [FEATURE] Allow to define offset where the execution should pause 2023-11-25 09:45:52 -08:00
Andrea Naspi 8bdd5e3eed AntiVM implementation: WMI query parameters tracing (#41) 
* [FEATURE] AntiVM: added initial files

* [FEATURE] AntiVM: bug fix

* [FEATURE] AntiVm: WMI query hooking

* [FEATURE] AntiVm: WMI parameters tracing

* [FEATURE] AntiVm: removed redundant types/arguments

* [FEATURE] AntiVm: updated TinyTracer project files

* [FEATURE] AntiVm: resetted VS platform toolset

* Merge Anti-VM feature
 2023-08-16 16:51:20 +02:00
hasherezade 7382bf91d0 [FEATURE] Added INI option: select if debug symbols should be used 2023-08-14 07:13:01 -07:00
hasherezade fb3bb2bf49 [REFACT] Define stripComments in Settings class 2023-08-12 06:13:08 -07:00
hasherezade ee3b302b2d [FEATURE] Configurable INT instruction tracing 2023-08-08 13:36:51 -07:00
cecio b1ce344e29 AntiDebug detection initial implementation 2023-08-04 22:44:36 +02:00
hasherezade cfcd1b579b [BUGFIX] Fixed removing inline comments from Settings 2023-05-05 17:04:27 -07:00
hasherezade e805fa0dc6 [REFACT] Code cleanup following Codacy warnings 2023-05-04 09:35:31 -07:00
hasherezade 940f10200a [BUGFIX] Backward compat: use cstring name to open ifstream 2023-04-06 21:44:56 +02:00
hasherezade 4f439f4c7e [FEATURE] Supply the syscalls table from commandline. Added automatic syscalls extraction by a helper tool 2023-03-19 16:04:28 -07:00
hasherezade d1553524be [REFACT] Removed a redundant variable 2023-03-18 18:31:39 -07:00
hasherezade 28dcea5665 [W-I-P] Load syscalls table from a file 2023-03-17 18:21:59 -07:00
ergrelet f94c01f419 [FEATURE] Add logging SYSCALL 2022-02-14 22:16:20 +01:00
hasherezade b4d5a87035 [FEATURE] Added logging of indirect call/jmp 2021-10-14 13:02:37 +02:00
hasherezade 932fe12ece [FEATURE] Added an option of hooking sleep 2021-09-20 00:40:46 +02:00
hasherezade a38128de2a [NOBIN] Fixed spacing 2021-09-04 12:03:34 +02:00
hasherezade 8efa03e55f [FEATURE] In params dump: configure hexdump size by the INI file 2021-07-26 03:53:12 +02:00
hasherezade 4d4d585ad8 [REFACT] Removed warning in converting int to bool 2021-07-26 03:38:48 +02:00
hasherezade ddefd88644 [FEATURE] Support booleans defined as keywords 2021-03-20 19:02:24 +01:00
hasherezade 99bb02122e [FEATURE] If INI file not found, generate a new one 2021-03-20 18:42:07 +01:00
hasherezade f872f7d104 [FEATURE] Show info if could not load the INI file 2021-03-20 18:24:09 +01:00