Questions tagged [bin-diffing]

Comparing 2 binaries at assembly code level

Filter by
Sorted by
Tagged with
1
vote
0answers
28 views

Compare ELF files using Ghidra+Bindiff based on dwarf debug info

So this is a question not strictly about reverse engineering, but since there are many people using Ghidra and Bindiff here I'll try asking anyway. I have an embedded ARM cortex-M C++ project and I ...
0
votes
0answers
20 views

How to work on diffing result generated by bindiff

I am new to reverse engineering, How to work on the diffing results(Similar function) generated by Bindiff using IDAPython. *work is like finding no basic blocks, no of edges
1
vote
1answer
62 views

Compiled binary functional comparison through different versions / assembled functions

Good Day! I've not hit upon a solution to compare different compiled binaries for identical functions. Take, say, BusyBox. A very common application with a rich history and source code. Say take 3 ...
3
votes
2answers
2k views

Do I need to have IDA Pro to use the BinDiff tool?

I'm trying to learn how to use BinDiff tool, but I can't figure out how to open two binaries to do the comparison. While skimming through their manual, it seems like I need to have IDA Pro for that. ...
1
vote
2answers
80 views

Getting a high level overview of comparative size differences of binary files?

I have two binary files, one of them is pulled from Protostar's (stack0 example). The other one I compiled (from source) with the latest version of GCC. The size difference is massive. My version is ...
1
vote
2answers
4k views

Comparison between orginal and modified DLL files with x64dbg

Is it possible to find the modifications between a original DLL file and a modified one using x64dbg? And, if I can't do it with x64dbg, what tool would be better than a debugger to find the ...
1
vote
1answer
2k views

BinDiff says Diff Binary does not exist

I'm using BinDiff to perform diff operation between two 32-bit Binaries (one of them is a DLL and the other one an EXE). When I perform the Diff Operation, I get the error message: Adding new Diff ...
2
votes
1answer
115 views

Disassembled Java class file differs from Source

While trying to understand a behavior of TestNG I found my self disassembling the .class files. During that, I accidentally noticed that the official binary differs from the one built manually from ...
0
votes
1answer
489 views

How to patch file by adding a branch instruction to another address in arm

I have disassembled two armv7 files in IDA. I am trying to figure out how I can create a patch to change one to another. The original file has: __text:00017B60 loc_17B60 ; ...
0
votes
1answer
5k views

How can I patch this file?

In viewing the diff for two files, a method in the original file starts with: push ebp mov ebp, esp and in the modified file, it starts with: push 0 pop rax retn endp In essence, the ...
1
vote
1answer
108 views

Get bindiff of operating system or modified files post upgrade [duplicate]

I am wanting to examine changes made to Windows after an update is made. I would like to see the actually files that were patched and see what in the code might have been changed and see what the ...
3
votes
0answers
535 views

IDA Plugin to diff functions within the same binary

Sometimes by reversing I find several functions within the same binary file which look suspiciously similar. Is there a plugin/script to quickly compare them and see their differences? P.S. I'm aware ...
2
votes
2answers
471 views

Binary diffing: Why moving ebx to eax, instead of pushing ebx?

I was doing binary diffing, I want to know why mov eax,ebx is used instead of push ebx. This is the binary diffing image: Before patch : After patch :
7
votes
4answers
2k views

Is there any tool to quantitatively evaluate the difference of binary?

I know some binary diff tool like VBinDiff and others. Currently I have a large number of binary, around 500. So I am looking for a binary tool to quantitatively evaluate the difference of binaries.....
6
votes
2answers
1k views

IDA Pro/IDAPython automation through IDAPython

I have been trying to use IDA Pro (with bindiff) via IDAPython to automate the analysis process of a bios.dump file while outputting the results to a .txt / .asm file. From here I want to use the ...
7
votes
1answer
1k views

Reversing Patches (Binary Diffing)

Does any of you know of a recent tool to bindiff using ImmunityDebugger? I know about BinDiff by Zynamics and PatchDiff for IDA. But I really want a tool like this in ImmDBG. I also know about Radare'...
26
votes
3answers
3k views

Why are special tools required to ascertain the differences between two related binary code files?

How comes that text diffing tools like diff, kdiff3 or even more complex ones usually fail at highlighting the differences between two disassemblies in textual form - in particular two related binary ...
51
votes
7answers
27k views

how can I diff two x86 binaries at assembly code level?

I'm looking for a tool like Beyond Compare, meld, kdiff, etc. which can be used to compare two disassembled binaries. I know that there's binary (hex) comparison, which shows difference by hex values, ...