Google Online Security Blog: BinDiff now available for free

BinDiff now available for free

18 март 2016 г.

Posted by Christian Blichmann, Software Engineer

Compare binary files for x86, MIPS, ARM/AArch64, PowerPC, and other architectures.

Identify identical and similar functions in different binaries.

Port function names, comments and local variable names from one disassembly to another.

Detect and highlight changes between two variants of the same function.

Here is a screenshot demonstrating what using BinDiff to display per-function differences looks like:

At Google, the BinDiff core engine powers a large-scale malware processing pipeline helping to protect both internal and external users. BinDiff provides the underlying comparison results needed to cluster the world's malware into related families with billions of comparisons performed so far.

Ever since zynamics joined Google in 2011, we have been committed to keeping our most valuable tools available to the security research community. We first lowered the price, and today we are taking the next logical step by making it available free of charge.

You can download BinDiff from the zynamics web site. It’s the current version, BinDiff 4.2 for both Linux and Windows. To use it, you also need the commercial Hex-Rays IDA Pro disassembler, 6.8 or later.

Happy BinDiff-ing!

Няма коментари :

Публикуване на коментар

Security Blog

BinDiff now available for free

Няма коментари :

Етикети

Archive

Feed