Christian Blichmann馃嚭馃嚘@HexRaysSA somewhat underhandedly added Linux ARM64 builds in their new IDA Pro 9.3 beta.
I really need to find some time to work on #BinDiff...
I really need to find some time to work on #BinDiff...
PSA: If your #BinDiff workflow relies on a working BinExport for Ghidra, check https://github.com/google/binexport/pull/164.
Exciting! @vector35 's excellent #BinaryNinja ships with built-in BinExport in the latest dev version!
Here's how to use it with #BinDiff: https://dev-docs.binary.ninja/guide/binexport.html
Here's how to use it with #BinDiff: https://dev-docs.binary.ninja/guide/binexport.html
raptor 
https://github.com/Lil-Ran/build-bindiff-for-ida-9
Disclaimer: I haven't checked it, apply due caution
GitHub - Lil-Ran/build-bindiff-for-ida-9: Use latest GitHub Actions runners to build BinDiff and BinExport for various IDA Pro 9.x on Windows, macOS, and Linux.
Use latest GitHub Actions runners to build BinDiff and BinExport for various IDA Pro 9.x on Windows, macOS, and Linux. - Lil-Ran/build-bindiff-for-ida-9
PSA #BinDiff for IDA 9.1+ will happen: https://github.com/google/bindiff/issues/50#issuecomment-2677767234
buheratorghidriff - mpengine.dll - VersionTrackingDiff - 1.1.24030.4 vs 1.1.24060.5
https://gist.github.com/v-p-b/f9aa39263e125c8e3b04c4d22fd4d78d#strings
This one executed much faster than SimpleDiff (with the O(n^2) FuncName:Param algorithm)!
Unfortunately the diff is so big it's difficult to judge quality, so the next step is to come up with some metrics that can be checked automatically.
#bindiff #ghidriff
https://gist.github.com/v-p-b/f9aa39263e125c8e3b04c4d22fd4d78d#strings
This one executed much faster than SimpleDiff (with the O(n^2) FuncName:Param algorithm)!
Unfortunately the diff is so big it's difficult to judge quality, so the next step is to come up with some metrics that can be checked automatically.
#bindiff #ghidriff
You diff binaries and immediately find the single change that adds the overflow check.
I diff mpengine.dll and break all reversing tools out there.
We are not the same.
https://gist.github.com/v-p-b/513a8f70a32c62f3ab7bf0d6a90e0941
#bindiff #ghidriff
I diff mpengine.dll and break all reversing tools out there.
We are not the same.
https://gist.github.com/v-p-b/513a8f70a32c62f3ab7bf0d6a90e0941
#bindiff #ghidriff
Ever wondered about how #BinDiff reads the BinExport2 format to build its flow graph representations?
This post by @williballenthin sheds some light on this:
https://www.williballenthin.com/post/binexport2-enumerating-a-functions-instructions/
This post by @williballenthin sheds some light on this:
https://www.williballenthin.com/post/binexport2-enumerating-a-functions-instructions/
I'll end this on a more positive note by saying that https://github.com/google/binexport/pull/133 at least enables the same workflow for IDA 9.0 as the one we use for Binary Ninja and Ghidra (export first, then invoke #BinDiff manually). 6/N
This is all a shame, really, as I would like to update #BinDiff to, e.g., use idalib for headless exports.
But right now, I don't have the time/capacity to work on any of this.
I'd rather spent my 20% time on more exciting parts of the project. Or maybe it's time to move on? 5/N
But right now, I don't have the time/capacity to work on any of this.
I'd rather spent my 20% time on more exciting parts of the project. Or maybe it's time to move on? 5/N