Malpimp is an advanced API tracing tool for any Windows Process. It is designed to automate the reverse engineering process.
In the backend it uses pydbg to hook the APIs. It provides include and exclude policies to increase the control on the application in execution.
Features
* Free & Easy to use Tool for API Monitoring of Process
* Allows advanced congiguration through Include and Exclude policies to hook DLLs and APIs selectively
* Loop detection and dynamic hook removing abilities
* Provides good control over application
* API calls logging with return address
* Command-line tool makes it perfect for scripting and automation
Currently it works on Windows XP & 2003 platforms only.
Comments