From Collaborative RCE Tool Library

Jump to: navigation, search

eEye Binary Diffing Suite (EBDS)

Tool name: eEye Binary Diffing Suite (EBDS)
Rating: 2.0 (2 votes)
Author: eEye Digital Security                        
Website: http://research.eeye.com/html/tools/RT20060801-1.html
Current version: 1.0.5
Last updated: November 3, 2006
Direct D/L link: http://research.eeye.com/html/Tools/download/DiffingSuiteSetup.exe
License type: Free / Open Source
Description: The eEye Binary Diffing Suite (EBDS) is a free and open source set of utilities for performing automated binary differential analysis.
Related URLs: No related URLs have been submitted for this tool yet


RSS feed Feed containing all updates for this tool.

Here below you will find useful notes about this tool, left by other users.

You are welcome to add your own useful notes here, or edit any existing notes to improve or extend them.


Trick so make EBDS work with other IDA versions than 5.0

As evilcry describes in one of his blog posts (http://www.woodmann.com/forum/showthread.php?t=11328), EBDS is normally "locked" to IDA 5.0, and cannot be used in any other IDA version.

But the following trick will solve that:

Open with Regedit the following RegKey:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IDA Pro_is1

And change the Key Entry DisplayName with the string IDA Pro Standard v5.0 or IDA Pro Professional v5.0

Follow-up trick for 64 Bit Windows Operating Systems

This works as of January 2009 with Windows Vista 64


1) Run Regedit.exe

2) go to "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IDA Pro_is1" and change the Key Entry 'DisplayName' with the string 'IDA Pro Advanced v5.0'

3) Install EBDS

4) Move the contents from /plugins to the plugins directory of your IDA installation

5) Move sqlite3.dll from the install directory to your main IDA installation directory

6) Go the the BDS source (that's included) and find this line in BDSMain.cs

       RegistryKey idaRegKey = Registry.LocalMachine.OpenSubKey(@"SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IDA Pro_is1");

and change it to:

       RegistryKey idaRegKey = Registry.LocalMachine.OpenSubKey(@"SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IDA Pro_is1");
       

7) Also, in the same file, find this line:

       RegistryKey bdsKey = Registry.LocalMachine.OpenSubKey(@"Software\eEye\DiffingSuite");

and change it to:

       RegistryKey bdsKey = Registry.LocalMachine.OpenSubKey(@"Software\Wow6432Node\eEye\DiffingSuite");
       

8) Compile the BDS executable and move it to your main BDS install directory (overwriting the old one that is there.)




If you find that any information for the tool above is missing, outdated or incorrect, please edit it!
(please also edit it if you think it fits well in some additional category, since this can also be controlled)


Views
Category Navigation Tree
   Code Coverage Tools  (13)
   Code Ripping Tools  (2)
   Binary Diff Tools  (7)
   Image Diff Tools  (2)
   System Diff Tools  (5)
   Text Diff Tools  (6)
   Helper Tools  (3)
   Hex Editors  (13)
   Memory Patchers  (7)
   Packers  (20)
   Profiler Tools  (11)
   String Finders  (10)
   Tool Hiding Tools  (7)
   Tracers  (22)
   Needs New Category  (3)