hasherezade
|
f1a302e0c7
|
[VERSION] 4.0
|
2026-05-28 01:30:24 +02:00 |
|
hasherezade
|
4ef5ec1dfd
|
[BUGFIX] Fixed the order of initializing the debug symbols
|
2026-05-27 19:37:08 +02:00 |
|
hasherezade
|
0dde72e777
|
[BUGFIX] Fixed counting loaded entries (params and exclusions)
|
2026-05-25 20:00:54 +02:00 |
|
hasherezade
|
46f5080d3e
|
[FEATURE] Implemented local watch and exclusion lists
|
2026-05-25 17:35:14 +02:00 |
|
hasherezade
|
434bbf6576
|
[FEATURE] Define stop offsets per executable rather than globally
|
2026-05-25 16:48:46 +02:00 |
|
hasherezade
|
82548f11cb
|
[FEATURE] Refactored loadInt to a template. Added ini parameter: flush interval
|
2026-05-25 15:16:51 +02:00 |
|
hasherezade
|
b6950c33f9
|
[FEATURE] Force autoflushing of log on pause and resume
|
2026-05-24 09:41:49 -08:00 |
|
hasherezade
|
35d133abaa
|
[REFACT] Refactored for compatibility with Pin 4+
|
2026-05-23 21:08:50 +02:00 |
|
hasherezade
|
bc5f9631e1
|
[FEATURE] In case of indirect branching, log instruction
|
2025-11-24 04:54:17 -08:00 |
|
hasherezade
|
991cafa2bc
|
[FEATURE] Changes in Disasm follow rules: allow to follow threads
|
2025-11-12 23:14:43 +01:00 |
|
hasherezade
|
662827a9ba
|
[FEATURE] Allow for two modes of disassembly logging: inner and outer
|
2025-10-04 03:27:34 -07:00 |
|
hasherezade
|
7e94961828
|
[FEATURE] Load disasm ranges from a file ([module].disasm_range.csv),
per module
|
2025-10-03 14:16:44 -07:00 |
|
hasherezade
|
2410d741a9
|
[FEATURE] Allow for naming ranges
|
2025-10-02 15:38:11 -07:00 |
|
hasherezade
|
746e483d59
|
[FEATURE] Define disasembly fragments as ranges
|
2025-10-02 14:27:29 -07:00 |
|
hasherezade
|
4dca64ea64
|
[FEATURE] Allow to exclude DLLs by name
|
2025-10-01 15:31:38 -07:00 |
|
hasherezade
|
787dc8b580
|
[REFACT] Print the banner after setup finished
|
2025-06-12 09:32:29 -07:00 |
|
hasherezade
|
631a7487b4
|
[REFACT] Small cleanup
|
2025-06-06 08:27:33 -07:00 |
|
hasherezade
|
e8d6ad442e
|
[FEATURE] Changed extension of the custom definitions file to: .func.csv
|
2025-06-06 08:21:15 -07:00 |
|
hasherezade
|
f3425c06fa
|
[REFACT] Moved function makePath to Util
|
2025-06-06 07:50:23 -07:00 |
|
hasherezade
|
d9d62e4f7a
|
[BUGFIX] Added missing const qualifier
|
2025-06-05 17:35:01 -07:00 |
|
hasherezade
|
75ad083b54
|
[BUGFIX] In getReadableMemSize: added boundary check
|
2025-06-05 17:34:06 -07:00 |
|
hasherezade
|
dbdedea9ac
|
[REFACT] Removed unused variable. Cleanup
|
2025-06-05 16:12:42 -07:00 |
|
hasherezade
|
5249c2cf51
|
[FEATURE] Allow to watch defined functions witin the traced module
|
2025-06-05 12:36:34 -07:00 |
|
hasherezade
|
ff810bcf38
|
[REFACT] Use the new function to check if pointer is readable
|
2025-06-05 09:48:21 -07:00 |
|
hasherezade
|
facbf4a450
|
[FEATURE] Allow to replace volume serial ID with a value from the INI file
|
2025-06-04 16:38:32 -07:00 |
|
hasherezade
|
86492df189
|
[REFACT] Changed comparing memory snapshots. Simplified displaying changed args
|
2025-06-04 12:47:06 -07:00 |
|
hasherezade
|
302e1b1736
|
[BUGFIX] Removed empty fini function
|
2025-06-04 11:28:03 -07:00 |
|
hasherezade
|
b31ee67395
|
Merge pull request #75 from maxspl/master
[FEATURE] Return value and follow args - optimization
|
2025-06-04 20:25:37 +02:00 |
|
maxspl
|
cabb035dae
|
[REFACT] Naming and formatting
|
2025-06-04 19:58:53 +02:00 |
|
hasherezade
|
719a50df07
|
[BUGFIX] Build output path basing on the traced app path. Allow for empty
|
2025-06-04 07:02:00 -07:00 |
|
hasherezade
|
f32bb5611c
|
[FEATURE] In string verification: use retrieved length rather than hardcoded
|
2025-06-04 06:57:38 -07:00 |
|
hasherezade
|
4a3a48497e
|
[REFACT] Improved verification of UNICODE_STRING
|
2025-06-04 05:48:06 -07:00 |
|
hasherezade
|
057776437c
|
[REFACT] Retrieve size of readable in-memory buffer
|
2025-06-03 11:53:07 -07:00 |
|
hasherezade
|
0644e63046
|
[BUGFIX] Fixed crash on checking if pointer is readable. Changed implementation of the check
|
2025-06-02 13:03:39 -07:00 |
|
hasherezade
|
fdb77f3cfe
|
[FEATURE] Use the name of the traced module in the target file
|
2025-06-02 10:37:41 -07:00 |
|
hasherezade
|
9c7da6a2bf
|
[FEATURE] Added manual exports parsing (for PE)
|
2025-06-01 17:26:27 -07:00 |
|
maxspl
|
92976a40af
|
[FEATURE] Simplified feature to track args changes
|
2025-05-08 01:43:38 +02:00 |
|
hasherezade
|
f4a33a9ae6
|
[BUGFIX] Ensure that all callbacks are called under global PinLocker
|
2025-04-27 01:34:59 +02:00 |
|
hasherezade
|
8f530b8c37
|
[REFACT] Fixed formattign of a printed buffer
|
2025-04-27 00:40:48 +02:00 |
|
hasherezade
|
74f5eb199e
|
[NOBIN] Fixed code formatting
|
2025-04-27 00:21:21 +02:00 |
|
hasherezade
|
067de8d918
|
[REFACT] Moved return-tracking function into a separate namespace. Added checks
|
2025-04-26 23:04:30 +02:00 |
|
hasherezade
|
350ab51fd5
|
[REFACT] Moved trackign returns into separate files
|
2025-04-26 22:06:53 +02:00 |
|
maxspl
|
d35b56cd85
|
[FIX] Minor fix for logging issue
|
2025-04-26 14:19:38 +02:00 |
|
maxspl
|
fba4569d50
|
[FEATURE] Log return value + follow args and returns
|
2025-04-26 14:19:17 +02:00 |
|
hasherezade
|
a081b8223c
|
[BUGFIX] Fixed retrieving the syscall ID
|
2025-01-24 06:27:11 -08:00 |
|
hasherezade
|
7ac1c004b5
|
[VERSION] 2.9.5
|
2024-12-30 15:03:51 -08:00 |
|
hasherezade
|
863ffdcda3
|
[VERSION] 2.9.1
|
2024-12-29 05:47:12 -08:00 |
|
hasherezade
|
6ea138a549
|
[FEATURE] Hidden the message about not following the child process
|
2024-12-29 05:43:19 -08:00 |
|
hasherezade
|
9b2a559cbd
|
[BUGFIX] Fixed Trap Flag simulation (Issue #69)
|
2024-12-29 05:39:31 -08:00 |
|
hasherezade
|
d3426ba4f2
|
[FEATURE] Reverted: INI option regulating whether or not the child process will be followed
|
2024-12-15 16:13:52 -08:00 |
|