Here's a handful of scripts/tools to get block coverage information from a binary.

Accompanying blog post: https://seeinglogic.com/posts/getting-code-coverage/

1. Scriptable debugger
   • Headless Binary Ninja Script
   • Binary Ninja script for Mesos
2. TTD debugger
   • See 0vercl0k's script for WinDbg
3. Emulator
   • Script to parse QEMU's -d in_asm debug output
4. Dynamic Binary Instrumentation (DBI)
   • Script for DynamoRIO's drcov
5. Static rewriting
   • Script to parse DynInst's codeCoverage example