21–30 of 35 posts
This would have been news worthy 10 years ago. Today, it's more like shrug who cares. Dependency on IDA, closed source, limited platform support, Java/Swing ... Far better free solutions out there.
Serious question -- can you point to a better (or at least more free) recursive, graphical debugger for Windows than IDA?
Earlier quoted context omitted.
Serious question -- can you point to a better (or at least more free) recursive, graphical debugger for Windows than IDA?
Not sure what you mean by recursive, but OllyDbg [1] is an awesome free debugger on Windows. [1] http://www.ollydbg.de/
http://reverseengineering.stackexchange.com/questions/2347/w...
(It's worth noting the answer from Igor Skochinsky, while not the selected answer, comes from IDA's author.)
Isn't this the same basic idea as Google Updater's Courgette algorithm ( https://www.chromium.org/developers/design-documents/softwar... )? Both seem to disassemble and then untangle the static call graph into something that can be effectively diffed.
Shameless plug: Several years ago I did a tool that shows differences between disassembled functions basic-block graphs, that you can use for free and it is GPLv2 licensed. I believe my tool shows the differences in a better way than bindiff, and it piggybacks on a disassembler made by a former coworker and friend. Maybe someone wants to use it. http://www.coresecurity.com/corelabs-research/open-source-to... PS: I do…
Where do you work now?
To be clear, it is still a plugin for a ~$5000 application. Nonetheless, thanks Google for lowering the bar for entry into professional security work!
From the article, it didn't appear that the decompiler was required, just the disassembler. IDA Pro disassembler (professional edition) is $1129. So it's somewhat less expensive. I wish Hopper (hopperapp.com) were more publicized; it's only $89!
Man, I'm getting tons of early-2000s vibes from the design of the zynamics website.
Remember that 4.2.0 works only with IDA 6.8, if you have an older IDA license, there goes the link to the 4.1.0 that is compatible with IDA 6.5+: https://dl.google.com/dl/zynamics/bindiff410-win-x86.msi UPDATE: Linux is here: https://dl.google.com/dl/zynamics/bindiff410-debian7-amd64.d...
Other than that the Windows version is functional.