https://github.com/nccgroup/psr

Pointer Sequence Reverser - enable you to see how Windows C++ application is accessing a particular data member or object.
https://github.com/nccgroup/psr

Last synced: about 1 month ago
JSON representation

Pointer Sequence Reverser - enable you to see how Windows C++ application is accessing a particular data member or object.

• Host: GitHub
• URL: https://github.com/nccgroup/psr
• Owner: nccgroup
• License: other
• Created: 2017-12-01T21:04:39.000Z (almost 7 years ago)
• Default Branch: master
• Last Pushed: 2017-12-18T03:55:46.000Z (over 6 years ago)
• Last Synced: 2024-06-28T01:46:59.148Z (3 months ago)
• Language: C++
• Homepage: https://www.nccgroup.trust/us/our-research/automated-reverse-engineering-of-relationships-between-data-structures-in-c-binaries/?research=Whitepapers
• Size: 1.97 MB
• Stars: 66
• Watchers: 12
• Forks: 8
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: license.txt

Awesome Lists containing this project

README

        
# Pointer Sequence Reverser

Designed to help a reverse engineer easily see how a Windows C++ application is accessing a particular data member or object.

Given the memory address of a data member or object, this tool will set a memory breakpoint at that address and then produce traces of the instructions executed prior to reading from or writing to that address. Some processing will be performed on the trace to highlight relevant instructions, make the output more readable, identify vtable pointers, etc.

To build, you'll want to download and build Capstone from its "next" branch. Then, configure the PSR solution to look inside the necessary Capstone directories for the .h and .lib files.