PANDA VM Update October 2015

The PANDA Virtual machine has once again been updated, and you can download it from:


Notable changes:

  • We fixed a record/replay bug that was preventing Debian Wheezy and above from replaying properly.
  • The QEMU GDB stub now works during replay, so you can break, step, etc. at various points during the replay to figure out what's going on. We still haven't implemented reverse-step though – hopefully in a future release.
  • Thanks to Manolis Stamatogiannakis, the Linux OS Introspection code can now resolve file descriptors to actual filenames. Tim Leek then extended the file_taint plugin to use this information, so file-based tainting should be more accurate now, even if things like dup() are used.
  • We have added support for more versions of Windows in the syscalls2 code.
Enjoy!

Comments

Unknown said…
Hi,

download link doesn't work for me. The other one, from the April 2015 is working. Could you please fix it?

Thanks,
Richard
Unknown said…
Probably pointless to ask, but +1 for the above comment. Link still doesn't work.
We've ported PANDA to the most recent version of QEMU and switched from prebuilt VMs to automated docker builds, which you can find here: https://hub.docker.com/r/pandare/panda/

Popular posts from this blog

Someone’s Been Messing With My Subnormals!

Decrypting LSA Secrets

SysKey and the SAM