FuzzMon

TwitterFacebook
Get flash to fully experience Pearltrees
http://www.fireeye.com/blog/technical/malware-research/2012/06/bypassing-process-monitoring.html

How Advanced Malware Bypasses Process Monitoring

One of the primary aims of an anti-virus (AV) engine is to monitor all process activity—while malware, on the other hand, wants to avoid detection by AV.
Project description Pym's is a pure python disassembly library. It is merely a port of udis86 to python. At the moment it is a one shot project.

pymsasid - A pure python disassembling library

https://code.google.com/p/pymsasid/
I love Linux, as a developer, I find the tools available suit my style of work perfectly. Sometimes the tool that I want isn’t available. That’s OK though, because whenever I can, I try to contribute.

Linux’s ptrace API sucks! | Evan Teran’s Blog

http://blog.codef00.com/2008/01/29/linuxs-ptrace-api-sucks/
Source code for this article may be found here . Sometimes, a need may rise to start a thread in a separate process and the need is not necessarily malicious. For example, one may want to replace library functions or to place some code between the executable and a library function.

Linux Threads Through a Magnifier: Remote Threads

http://syprog.blogspot.com/2012/03/linux-threads-through-magnifier-remote.html
http://www.ibm.com/developerworks/aix/library/au-python_test/

Python testing frameworks : Make your life easy with a Python testing framework

The days of the Wild West are coming to their end in the world of Python testing. It was not many years ago that nearly every project built with Python seemed to have its own idioms and practices for writing and running tests. But now, the frontier is finally beginning to close.
https://nose.readthedocs.org/en/latest/

Installation and quick start — nose 1.2.1 documentation

nose extends unittest to make testing easier.
a mature full-featured Python testing tool provides easy no-boilerplate testing scales from simple unit to complex functional testing http://pytest.org/latest/

helps you write better programs

CRtools is an utility to checkpoint/restore a process tree.

CR tools - CRIU

http://criu.org/Installation

another bottle at sea: building with Scons & MSVC8 using PCH with PDB and /Zi

http://www.nicolaslelong.fr/2009/06/building-with-scons-msvc8-using-pch.html Some note concerning my current attempts to evaluate Scons 1.2 for my needs to replace my 'pure' Visual Studio solutions builds. After trying to automatically convert my solutions to Scons scripts, which did not work at all, I decided to start from scratch. I easily got the bare build and link done on one of my modules. And I tried to gradually introduce 'features' in my build : namely Precompiled header (PCH) support, and Debug information generation.
Shaun Miller Microsoft Corporation July 2000 Summary: This article discusses the process of generating debug symbols in order to locate problems in your application. (7 printed pages)

Generating and Deploying Debug Symbols with Microsoft Visual C++ 6.0

DrMingw (EXCHNDL.DLL)

Dr. Mingw is a Just-in-Time (JIT) debugger. When the application throws an unhandled exception, Dr. Mingw attaches itself to the application and collects information about the exception, using the available debugging information.
I'm open sourcing a portion of my system for browser fuzzing called Grinder. Comprised of two main components, many Grinder Nodes are setup to perform the fuzzing of various browsers while a single Grinder Server will collate the results and provides a simple web interface for managing a large number of crashes. A few screenshots should give you the gist of things...

GRINDER

protobuf - Protocol Buffers - Google's data interchange format - Google Project Hosting.url

What is it? Protocol Buffers are a way of encoding structured data in an efficient yet extensible format. Google uses Protocol Buffers for almost all of its internal RPC protocols and file formats. Latest Updates http://protobuf.googlecode.com/svn/trunk/CHANGES.txt Documentation

msgpack-pure 0.1.3

Package Index > msgpack-pure > 0.1.3 Not Logged In msgpack-pure 0.1.3