# hasherezade/tiny_tracer

A Pin Tool for tracing API calls etc

Repository: https://github.com/hasherezade/tiny_tracer
Canonical: https://ross.abutalabs.com/products/tiny_tracer
Language: C++
License: GPL-2.0
License Family: copyleft
Topics: intel-pintools, api-trace, reverse-engineering, dbi, malware-analysis
Last push: 2026-06-02T17:16:52+00:00

## Health v2 (maintenance only)
Score: 80/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 85, release rhythm 62, longevity 100
- inputs: {"age_days": 2968, "days_push": 92, "days_rel": 97, "gap_med": 165.5, "n_releases_24m": 5}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1692, forks 169 (observed 2026-08-28T04:05:22.681660+00:00)

## What it is
A Pin Tool built on Intel Pin for dynamic binary instrumentation that traces API calls, syscalls, selected instructions, and section transitions in executables. It generates .tag reports that can be loaded into disassemblers and debuggers, and evades some known anti-debug and anti-VM techniques.

## Use cases
- trace API calls made by a Windows executable
- analyze malware behavior in a sandbox
- find the OEP of a packed binary
- log syscall parameters during dynamic analysis
- trace function inputs and outputs of selected APIs
- detect anti-debug and anti-VM tricks in a sample
- export trace results into IDA or other analysis tools

## When to choose
- you need lightweight API/syscall tracing of a Windows PE binary
- you are doing malware analysis and want to bypass common anti-analysis checks
- you want trace output importable into disassemblers like IDA

## When to avoid
- you need a full debugger with interactive stepping
- you target platforms other than Windows PE binaries
- you cannot use Intel Pin as the instrumentation backend

## Facets
- artifact type: cli-tool
- maturity: active
- function: reverse-engineering, tracing, security, developer-tools
- domain: reverse-engineering, security, developer-tools
- platform: windows, cli
- tags: intel-pin, dynamic-binary-instrumentation, malware-analysis, api-tracing, anti-debug-evasion, linux

## Member repositories
- hasherezade/tiny_tracer (main) score 80

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:22.681660+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:38:13.822207+00:00, confidence not recorded.
  - readme: https://github.com/hasherezade/tiny_tracer (fetched 2026-08-28T04:05:22.681660+00:00, sha a879e1e82faa)
- Data as of 2026-08-30T08:39:29.467469+00:00.