Skip to main content
8 votes
Accepted

Do I need to have IDA Pro to use the BinDiff tool?

Yes, this is now possible with Ghidra. The latest version, BinDiff 6, has experimental support for the Ghidra disassembler. It ships with an extension that allows to export Ghidra disassembly into ...
cblichmann's user avatar
4 votes

Comparison between orginal and modified DLL files with x64dbg

You shouldn't use a debugger to search for differences. You should use a diff tool. Of course, most diff tools work on ASCII text, but there are some that deal with binary files. Some examples: ...
Paweł Łukasik's user avatar
4 votes
Accepted

Disassembled Java class file differs from Source

You are correct that the binary does not match the tagged source. It does, however, match the changes made in commit 6cfc6b4a403f8487d9fa96aa3d42db7848c8755a, which was made on February 25, one day ...
Antimony's user avatar
  • 2,012
3 votes

Compiled binary functional comparison through different versions / assembled functions

The Ghidra Version Tracking tool is what you're looking for. See here for an introductory video.
Alex Ozer's user avatar
  • 131
3 votes

Do I need to have IDA Pro to use the BinDiff tool?

Bindiff can be a plugin in IDA or a standalone, but you still need the IDA database to compare binaries.
ismael_akez's user avatar
3 votes

How can I patch this file?

Something is wrong here, since the original push ebp; mov ebp, esp is 32 bit code, and the modified pop rax is 64 bit code. You might want to sort that out before proceeding. That said, in IDA: ...
Guntram Blohm's user avatar
3 votes
Accepted

IDA Pro/IDAPython automation through IDAPython

With the now free BinDiff 4.2 you can do batch analysis with a bit of work. In the BinDiff installation directory (zynamics/BinDiff 4.2), you will find bin/differ.exe and bin/differ64.exe. Those are ...
tmr232's user avatar
  • 1,577
2 votes

Comparison between orginal and modified DLL files with x64dbg

In Windows, perhaps the simplest possibility is the built-in File Compare command with its /B (binary) switch, to be used from the command-line. It lists all different bytes together with their file ...
josh's user avatar
  • 1,974
2 votes

how can I diff two x86 binaries at assembly code level?

As an open source alternative there's elf_diff which compares elf-files and generates html or pdf reports. It's available as a Python package.
noseglasses's user avatar
2 votes

Getting a high level overview of comparative size differences of binary files?

Bloaty McBloatFace is a compiled binary size profiler that can provide a breakdown of section sizes as you have there as well as a number of other ways to break things out.
Zhentar's user avatar
  • 193
1 vote
Accepted

Analyzing the difference from 2 execution flows

Yes, there a marvelous tool available for your needs. Moreover it's free and open source (however earlier it was a commercial product - thanks to Google) Also please do check their another product ...
Viktor's user avatar
  • 461
1 vote

Alternative to BinDiff that works on Linux x86_64 binaries (and preferably does not require IDA Pro)

VBinDiff at http://www.cjmweb.net/vbindiff/ Below is the same message as above. But with details if you're interested in those. VBinDiff (Visual Binary Diff) code at https://github.com/madsen/...
Francewhoa's user avatar
1 vote

How to work on diffing result generated by bindiff

When you use bindiff e.g., bindiff original.BinExport patched.BinExport it will create a BinDiff file, e.g., original_vs_patched.BinDiff. In the current version (6) that file is an sqlite3 database. ...
Kayla0x41's user avatar
1 vote

Getting a high level overview of comparative size differences of binary files?

I'm not going to accept this answer, because likely someone else will tell me a better way to do it. But, browsing the site I saw an old picture of Radare that seemed to kind of do what I want with an ...
Evan Carroll's user avatar
  • 1,789
1 vote

BinDiff says Diff Binary does not exist

I think there is a problem with BinExport. When I used BinNavi, there was similar problem. BinExport was not compatible with my IDA version. The IDB file structure differs for each version of IDA. ...
Seong-Kyun's user avatar
1 vote

Why are special tools required to ascertain the differences between two related binary code files?

One of things I do is to read the machine code and translate it back into IR pseudo opcodes sans any addressing address values, and then perform differences between those two pseudo-IR binaries after ...
John Greene's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible