[p4r4n0id]

Hi Guys,

Do you know any good windows tainting tools?

Thx,

p4r4n0id

[kareldjag/michk]

hi
Unfortunately most tools available are for Linux or Mac; others are Private.
You can find an overview of these tools in this .pdf paper
http://code.google.com/p/tanalysis/downloads/list

rgds

[Cr4sh]

Unfotunately, powerful and friendly (for integration with the 3-rd party code analysis software) taint analysis tools are not available for public :cry:
Few weeks ago I tried to contact with the autors of dytan framework (to ask for binaries or source code), but got no ansver.

[Cr4sh]

Unfortunately most tools available are for Linux or Mac

Hm, what exactly mac/linux tools for dynamic taint analysis of programs without source code you can advise?

[kareldjag/michk]

Stoped my fuzzing experience when appeared the pointlessness-for my concern- of this activity...
Due to the vulnerability assessmentt business (Idefense, Vupen, Immunitysec etc.), we can not expect effective tools by one click download to our hands...
TaintScope, wich seems very interesting is currently not public, and i guess that it is not due to vulnerability/software assessment market (Red CyberArmy ? ).
Still a few tools like theses ones, that might disappoint some people
zzuf http://caca.zoy.org/wiki/zzuf
fuzzgrind http://esec-lab.sogeti.com/pages/Fuzzgrind

Flayer and Avalache related to the well known Valgrind framework
http://code.google.com/p/flayer/
http://code.google.com/p/avalanche/

rgds

[p4r4n0id]

Taint-enabled Reverse Engineering Environment (TREE)

https://code.google.com/p/tree-cbass/