From Collaborative RCE Tool Library

Jump to: navigation, search

Executable Diff Tools


Tool name: BinDiff
Rating: 4.0 (1 vote)
Author: SABRE Security                        
Website: http://www.sabre-security.com/products/bindiff.html
Current version: 2.0
Last updated: October 2007
Direct D/L link: N/A
License type: Commercial (IDA Pro plugin)
Description: A very powerful executable file diffing tool, in the form of an IDA Pro plugin.
Also listed in: IDA Extensions
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: eEye Binary Diffing Suite (EBDS)
Rating: 3.0 (1 vote)
Author: eEye Digital Security                        
Website: http://research.eeye.com/html/tools/RT20060801-1.html
Current version: 1.0.5
Last updated: November 3, 2006
Direct D/L link: http://research.eeye.com/html/Tools/download/DiffingSuiteSetup.exe
License type: Free / Open Source
Description: The eEye Binary Diffing Suite (EBDS) is a free and open source set of utilities for performing automated binary differential analysis.
Also listed in: (Not listed in any other category)
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: IDACompare
Rating: 2.0 (1 vote)
Author: David Zimmer                        
Website: http://labs.idefense.com/software/static.php#more_idacompare
Current version:
Last updated: December 16, 2005
Direct D/L link: http://labs.idefense.com/software/download/?downloadID=17
License type: Free
Description: IDACompare is a plugin designed to compare and match up equivalent functions across two IDA databases. IDACompare was primarily designed for analyzing changes across malcode variants, it should also find good use when conducting patch analysis.

Once function matches have been made, names can be ported across disassemblies, or sequentially renamed in both.

Project also implements a signature scanner, letting you build your own listing of known functions.
Also listed in: IDA Extensions
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: pynary
Rating: 0.0 (0 votes)
Author: c1de0x                        
Website: http://code.google.com/p/openrce-snippets/wiki/pynary
Current version: 0.0.1
Last updated:
Direct D/L link: N/A
License type: Open Source
Description: pynary will become a powerful platform independent framework for binary code analysis.

The initial goal is to the implementation of function signature matching using graph isomorphism and an extensible 'write-your-own-heuristic' model to allow tweaks for particular targets. It will also identify standard library global constants and structure where possible.

Once the initial goal is achieved, a number of cool features are planned:

* stack frame analysis
* un-inliner
* exception handling parsing/analysis
* 'functionally equivalent' matching
* c++ template function matching
* meta-data transfer between IDBs
* c++ class reconstruction (with/without RTTI)
* ...

This project is still in its infancy, and looking for volunteers.
Also listed in: Deobfuscation Tools, Reverse Engineering Frameworks, Programming Libraries, Exe Analyzers, Diff Tools
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)


RSS feed Feed containing all updates and additions for this category.

RSS feed Feed containing all updates and additions for this category, including sub-categories.





Views
Category Navigation Tree
   Code Ripping Tools  (1)
   Crypto Tools  (2)
   Binary Diff Tools  (5)
   Image Diff Tools  (2)
   System Diff Tools  (2)
   Text Diff Tools  (6)
   Firefox Extensions  (1)
   Hex Editors  (10)
   Memory Patchers  (3)
   Packers  (10)
   Profiler Tools  (9)
   Resource Editors  (7)
   String Finders  (5)
   Tool Hiding Tools  (1)
   Tracers  (10)