计算机安全超级工具（二十一）－二进制逆向工程

Interactive Disassembler

http://www.simtel.net

IDA is an Advanced Interactive Disassembler that allows you todisassemble 80x86/Pentium III, Z80 and I51 binaries. Today, it is widely used by the security industry in the analysis of hostile code and validation of COTS. This versions also offers FLIRT our Fast Library Identification and Recognition Technology that identifies the standard library calls of many 80x86 compilers. Supported processors: Intel 8080, 8085, Z80, HD 64180 Intel 8086/87 Intel 80286/287 real & protected Intel 80386/387 real & protected Intel 80486/487 real & protected Intel Pentium real & protected Intel Pentium II and III extensions Intel 8051 series Zilog Z80 and derivatives

 

 

Sysinternals

http://technet.microsoft.com/en-us/sysinternals/bb842062.aspx

The Sysinternals Troubleshooting Utilities have been rolled up into a single Suite of tools. This file contains the individual troubleshooting tools and help files. It does not contain non-troubleshooting tools like the BSOD Screen Saver or NotMyFault.

 

OllyDbg

http://www.ollydbg.de/version2.html