27

What's a working tool/methodology to work cooperatively on the same binary (if possible in parallel), that is proven to work?


I used various methods long ago to share information with others, but not in parallel:

  • sending IDB back & forth
  • sharing TXT notes on a repository
  • exporting IDB to IDC and sharing the IDC on a repository

However, none of these were really efficient. I am looking for better methodologies and tools for collaborative work.

2
  • You should separate the suggestions from the question and post them as an answer (as they actually answer the question).
    – asheeshr
    Mar 28, 2013 at 9:43
  • 2
    @AsheeshR: The poster is supposed to show some insight into the topic/research done. Listing possible answers and explaining that/why they're unsatisfactory is exactly that. Jun 20, 2014 at 6:57

6 Answers 6

17

Just to expand on @ange's answer, IDA Toolbag is a lightweight solution for collaboration using their "Queues" feature. I have tested that it does work, and I believe it provides all the features you mentioned in your question.

enter image description here

enter image description here

1
  • Do you know if the other users need to have the exact same version of IDA? Are there many issues using it, or does it work exactly as expected? - Just curious, I've always wanted a good collaboration tool for IDA, the Toolbag looks really promising...
    – fileoffset
    Feb 12, 2014 at 0:41
17

potential (but untested) suggestions:

0
5

Dexter is a static android application analysis tool, which has collaboration features. For more information here is their first public talk about this tool: SIGINT12 - Android Analysis Framework.

3

I'ld like to add these tools to the list :

  • IDASynergy - A combination of an IDAPython Plugin and a control version system that result in a new reverse engineering collaborative addon for IDA Pro.

  • OllyMigrate - Most recent tool of all, to migrate between debuggers enter image description here

  • MapConv - Import IDA .map files to OllyDbg (labels+comments) enter image description here

  • IDASync - IDA collab tool + OllySync for OllyDbg support. enter image description here

  • qb-sync - Sync IDA with WinDbg

Related whitepaper.

3

A new tool that's actively developed on github is IDArling (Previously called IDAConnect). According to its developers, Alexandre Adamskiand and Joffrey Guilbon, it's inspired by SolIDArity (which made some noise in 2016 but was never released) and other projects.

It is an IDA python project that although according to maintainers is still a work in progress, already gained a small user base and is quite functional and useable nowadays.

Unlike a lot of other projects, (at least for now, 4th quarter of 2018) it sees commits on a daily/weekly basis. It was also awarded with first prize in 2018's IDA plugin contest.

I have not yet had the pleasure of using it.

2

I don't see Ghidra in the lists in the other answers, probably because this question was asked in 2013, and Ghidra has only more recently been made available to the public.

Ghidra comes with built-in cooperative working tools. Each user who wishes to cooperate on a reverse engineering project would connect to Ghidra server. This is a simple server that can be run on any computer that these Ghidra users can all access. It provides network storage for the shared project too. It controls user access, provides file versioning, and supports check in, check out and version history. Quite neat.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.