Posts by joxean:

    The trace replayer

    January 24th, 2012

    One of the new features that will be available in the next version of IDA is a trace re-player. This pseudo-debugger allows to re-play execution traces of programs debugged in IDA. The replayer debugger allows replaying traces recorded with any of the currently supported debuggers, ranging from local Linux or win32 debuggers to remote GDB targets. Currently supported targets include x86, x86_64, ARM, MIPS and PPC.

    When we are re-playing a recorded trace, we can step forward and backward, set breakpoints, inspect register values, change the instruction pointer to any recorded IP, etc…

    Also, trace management capabilities have been added to IDA in order to allow saving and loading recorded execution traces. Let’s see an example.

    Read the rest of this entry “

    15 Comments "

    New feature in IDA 6.2: The proximity browser

    August 8th, 2011

    The new IDA Pro 6.2 release will be featuring a new view called the “proximity browser” (only available in the Qt version).

    Proximity view

    The proximity view

    Read the rest of this entry “

    2 Comments "