Tool announce: user mode single stepping

[<Rafal_Wojtczuk () McAfee com>]

Hello,
There is a small project named "umss", created in McAfee labs, which
readers
of this list may find interesting. It implements fast single stepping of
Win32 binaries. It is ca 100x faster than WaitForDebugEvent() and 10x
faster
than in-process EXCEPTION_SINGLE_STEP trapping. Umss works by (kind of)
disassembling the binary on-the-fly and placing logging hooks after each
executed instruction (so, it does not use the TF flag). More information
and
the project source can be found at
http://www.avertlabs.com/research/blog/?p=140

RW

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave