Brussels / 3 & 4 February 2024


MAMBO - Dynamic Binary Modification Tool for RISC-V

MAMBO is the first dynamic binary modification (DBM) tool optimized for 64-bit RISC-V (RV64GC) and Arm. DBM tools allow developers to inspect, instrument and even modify running binaries (for example to detect memory issues or trace executed instructions) by sitting in-between the operating system (OS) and user application. Examples of those tools include Intel PIN, DynamoRIO, MAMBO - subject of this talk. This talk presents MAMBO from the developer perspective, discussing how it can assist developers in implementing efficient dynamic binary analysis and instrumentation tools. The presentation describes MAMBO API - that provides callbacks invoked by the DBM tool at different points of the lifetime of the hosted application - and its plugin infrastructure, used to implement those callbacks and perform aforementioned tasks. This talk shows a number of concrete plugin examples and the live demo to present described capabilities in action.


Photo of Igor Wodiany Igor Wodiany
Photo of John Alistair Kressel John Alistair Kressel