jump to navigation

N-Coverage IDA Plugin September 11, 2008

Posted by reversengineering in OTHER, TOOLS.
trackback
N-Coverage IDA Plugin and stand-alone Application

N-Coverage consists of two parts: first of all there is the main stand-alone application which uses a custom debugging engine to place breakpoints into a given process in order to record execution of functions during runtime. Function addresses are obtained from the IDA plugin which uses the IDA disassembler to spot function boundaries in the loaded binary.
While N-Coverage is running, all function hits are recorded and can be merged or diffed with other recordings, finally yielding a set of hits which can then be exported to a file. This final set is then again imported into IDA and the plugin shows a list of functions and/or assigns a user specified color to all functions contained in the set.

Notes

The tool offers pretty basic functionality, it’s not production level code and lacks quite some features, but it works quite okay. Actually it’s only listed here for the sake of completeness because it was used during my DRM analysis. If you’re looking for an advanced code coverage solution you might wan’t to check out paimei written by Pedram Amini.

Binaries Files:
http://newgre.net/system/files/NCoverage.rar

Full Source Code:
http://newgre.net/system/files/NCoverage_Sources.rar

About these ads

Comments»

No comments yet — be the first.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Follow

Get every new post delivered to your Inbox.

Join 41 other followers

%d bloggers like this: