The Subterfugue process sandbox
These are tools that let one run a process and, in a sense, selectively debug by telling the tool to perform analysis when conditions are met in the kernel, such as when a certain argument is sent to sendto() one could replace it on the stack with their own value. You could write your [...]
finding entropy in binary files
Update: added routine to print out hex data for blocks where entropy passes a given threshold. Tidied up code.
Ero Ventura responded yesterday to a request on OpenRCE concerning using entropy analysis to find RSA keys and other random blocks of data in binaries. Here in is a full wrapper for the [...]
