BinDiff now available for free
security.googleblog.com
BinDiff now available for free
1–10 of 35 posts
Re: BinDiff now available for free
#2To be clear, it is still a plugin for a ~$5000 application.
Nonetheless, thanks Google for lowering the bar for entry into professional security work!
Re: BinDiff now available for free
#3I saw someone post this googleblog entry over a month ago on the Freenode ##re channel. Then it was quickly taken down again. I guess they must have pulled the trigger a little early.
Re: BinDiff now available for free
#4To be clear, it is still a plugin for a ~$5000 application. Nonetheless, thanks Google for lowering the bar for entry into professional security work!
From the article, it didn't appear that the decompiler was required, just the disassembler.
IDA Pro disassembler (professional edition) is $1129.
So it's somewhat less expensive.
I wish Hopper (hopperapp.com) were more publicized; it's only $89!
Re: BinDiff now available for free
#5To be clear, it is still a plugin for a ~$5000 application. Nonetheless, thanks Google for lowering the bar for entry into professional security work!
From the article, it didn't appear that the decompiler was required, just the disassembler. IDA Pro disassembler (professional edition) is $1129. So it's somewhat less expensive. I wish Hopper (hopperapp.com) were more publicized; it's only $89!
What's the Windows status there? I have looked at their web page many times and it's just confusing.
The main description page says Mac only, a blog post from long ago says Windows is available (with some restrictions).
Re: BinDiff now available for free
#6Why is the linked site served over http? http://www.zynamics.com/software.html
Changing to https reveals a security cert valid for *.google.com, but not for www.zynamics.com.
Re: BinDiff now available for free
#7To be clear, it is still a plugin for a ~$5000 application. Nonetheless, thanks Google for lowering the bar for entry into professional security work!
From the article, it didn't appear that the decompiler was required, just the disassembler. IDA Pro disassembler (professional edition) is $1129. So it's somewhat less expensive. I wish Hopper (hopperapp.com) were more publicized; it's only $89!
It gets expensive when you want all the bells and whistles, but yes the base model is a little north of a grand.
Thanks for the link to Hopper, I know what i'll be doing this afternoon...
Re: BinDiff now available for free
#8Man, I'm getting tons of early-2000s vibes from the design of the zynamics website.
Re: BinDiff now available for free
#9Shameless plug:
Several years ago I did a tool that shows differences between disassembled functions basic-block graphs, that you can use for free and it is GPLv2 licensed. I believe my tool shows the differences in a better way than bindiff, and it piggybacks on a disassembler made by a former coworker and friend.
Maybe someone wants to use it.
http://www.coresecurity.com/corelabs-research/open-source-to...
PS: I don't work at Core Security anymore.
Re: BinDiff now available for free
#10Isn't this the same basic idea as Google Updater's Courgette algorithm (https://www.chromium.org/developers/design-documents/softwar...)? Both seem to disassemble and then untangle the static call graph into something that can be effectively diffed.