Questions tagged [bin-diffing]

Comparing 2 binaries at assembly code level

Filter by
Sorted by
Tagged with
1
vote
2answers
66 views

Getting a high level overview of comparative size differences of binary files?

I have two binary files, one of them is pulled from Protostar's (stack0 example). The other one I compiled (from source) with the latest version of GCC. The size difference is massive. My version is ...
1
vote
2answers
1k views

Comparison between orginal and modified DLL files with x64dbg

Is it possible to find the modifications between a original DLL file and a modified one using x64dbg? And, if I can't do it with x64dbg, what tool would be better than a debugger to find the ...
1
vote
1answer
1k views

BinDiff says Diff Binary does not exist

I'm using BinDiff to perform diff operation between two 32-bit Binaries (one of them is a DLL and the other one an EXE). When I perform the Diff Operation, I get the error message: Adding new Diff ...
2
votes
1answer
112 views

Disassembled Java class file differs from Source

While trying to understand a behavior of TestNG I found my self disassembling the .class files. During that, I accidentally noticed that the official binary differs from the one built manually from ...
0
votes
1answer
368 views

How to patch file by adding a branch instruction to another address in arm

I have disassembled two armv7 files in IDA. I am trying to figure out how I can create a patch to change one to another. The original file has: __text:00017B60 loc_17B60 ; ...
0
votes
1answer
3k views

How can I patch this file?

In viewing the diff for two files, a method in the original file starts with: push ebp mov ebp, esp and in the modified file, it starts with: push 0 pop rax retn endp In essence, the ...
1
vote
1answer
88 views

Get bindiff of operating system or modified files post upgrade [duplicate]

I am wanting to examine changes made to Windows after an update is made. I would like to see the actually files that were patched and see what in the code might have been changed and see what the ...
3
votes
0answers
412 views

IDA Plugin to diff functions within the same binary

Sometimes by reversing I find several functions within the same binary file which look suspiciously similar. Is there a plugin/script to quickly compare them and see their differences? P.S. I'm aware ...
2
votes
2answers
429 views

Binary diffing: Why moving ebx to eax, instead of pushing ebx?

I was doing binary diffing, I want to know why mov eax,ebx is used instead of push ebx. This is the binary diffing image: Before patch : After patch :
7
votes
4answers
2k views

Is there any tool to quantitatively evaluate the difference of binary?

I know some binary diff tool like VBinDiff and others. Currently I have a large number of binary, around 500. So I am looking for a binary tool to quantitatively evaluate the difference of binaries.....
6
votes
2answers
1k views

IDA Pro/IDAPython automation through IDAPython

I have been trying to use IDA Pro (with bindiff) via IDAPython to automate the analysis process of a bios.dump file while outputting the results to a .txt / .asm file. From here I want to use the ...
7
votes
1answer
993 views

Reversing Patches (Binary Diffing)

Does any of you know of a recent tool to bindiff using ImmunityDebugger? I know about BinDiff by Zynamics and PatchDiff for IDA. But I really want a tool like this in ImmDBG. I also know about Radare'...
26
votes
2answers
3k views

Why are special tools required to ascertain the differences between two related binary code files?

How comes that text diffing tools like diff, kdiff3 or even more complex ones usually fail at highlighting the differences between two disassemblies in textual form - in particular two related binary ...
48
votes
7answers
23k views

how can I diff two x86 binaries at assembly code level?

I'm looking for a tool like Beyond Compare, meld, kdiff, etc. which can be used to compare two disassembled binaries. I know that there's binary (hex) comparison, which shows difference by hex values, ...