Practical Binary Analysis

Więcej o książce

Stop manually analyzing binary! This book presents advanced binary analysis topics such as binary instrumentation, dynamic taint analysis, and symbolic execution in an accessible manner. As malware becomes more adept at obfuscation and anti-analysis techniques, sophisticated methods are essential to unveil the true properties of binary programs. The aim of binary analysis is to understand and possibly modify what binaries actually do, beyond initial assumptions. While reverse engineering and disassembly are critical first steps, this guide delves deeper into the fascinating challenges of binary analysis and instrumentation. Targeted at security engineers, hackers, and those with a foundational knowledge of C/C++ and x86-64, the book covers everything from basic binary formats to advanced techniques. You'll learn to analyze binaries using the GNU/Linux toolchain, disassembly, and code injection, and implement profiling tools with Pin. Additionally, you'll build dynamic taint analysis tools with libdft and symbolic execution tools using Triton. Key skills include parsing ELF and PE binaries, modifying ELF binaries through parasitic code injection, and employing data-flow analysis techniques. You'll also learn to create custom disassembly tools with Capstone, use binary instrumentation to counteract malware tricks, and apply taint analysis for security. Exercises at the end of each chapter reinforce your skills, guiding you fro