joxeankoret/diaphora

Features

• Binary Analysis Capabilities - Finds differences between two compiled binaries using assembler analysis and graph theory heuristics.
• Binary Diffing - Compares compiled binaries to identify changed or matching code sections using assembly and control flow graphs.
• Binary Similarity Engines - Implements a similarity engine that calculates matching ratios between binary functions using control flow graphs and heuristics.
• Heuristic Matching Engines - Uses heuristic matching engines to identify corresponding code blocks across different binaries.
• Reverse Engineering and Analysis - Transfers symbol names and metadata between binaries to preserve analysis effort across different program versions.
• Graph Similarity Calculations - Computes similarity scores between binary functions based on the structural layout of their control-flow graphs.
• Binary Function Similarity - Calculates confidence ratios between functions in compiled files to find equivalent logic across different builds.
• Analysis Metadata Synchronization - Synchronizes symbol names and analyst comments between binaries based on identified matching function pairs.
• Pseudo-code Diffing - Compares high-level pseudo-code from decompiled binaries to generate patches and analyze structural changes.
• Analysis Metadata Porting - Transfers symbol names and data types from one binary to another based on identified function matches.
• Analysis Metadata Synchronization - Transfers comments and symbol names between binaries to preserve manual reverse engineering effort.
• Program Structural Analysis - Maps relationships between functions by identifying and comparing compilation units and call graphs.
• Decompiled Code Diffing Tools - Provides a utility to compare decompiled pseudo-code between binaries to generate patches and synchronize metadata.
• Reverse Engineering Plugins - Functions as a reverse engineering plugin that maps relationships between functions and detects compilation units.
• Patch Detection - Finds potentially fixed vulnerabilities by comparing two versions of a binary during diffing sessions.
• Vulnerability Patch Analysis - Identifies security fixes by comparing different versions of a binary to detect where vulnerabilities were patched.
• Vulnerability Patch Analyzers - Specializes in vulnerability patch analysis by comparing binary versions to detect security fixes.
• Vulnerable Product Detection - Identifies fixed security vulnerabilities by analyzing structural differences between different binary versions.
• Control-Flow Graph Generation - Generates control-flow graphs from binary code to calculate similarity ratios between functions.
• Function Call Mapping - Constructs graphs of function invocation relationships to identify execution flow changes between binary versions.
• Custom Matching Heuristics - Implements binary comparison logic using queries or scripts to identify matching functions via confidence ratios.
• Analysis Plugins - Functions as an extension for reverse engineering platforms to map function relationships and identify compilation units.
• Analysis State Persistence - Stores binary comparison data and symbol metadata in a relational database for large-scale cross-referencing.
• Relational State Management - Persists binary comparison data and symbol metadata in a relational database for retrieval.
• Binary Boundary Detection - Identifies the boundaries of original object files within a compiled binary blob.
• Object File Boundary Detection - Groups functions into their original object files by analyzing structural boundaries within the compiled binary.
• LLM-Enhanced Decompiled Code Analyzers - Analyzes binary representations and generates patches using decompiled pseudo-code.
• Compiled Program Auditing - Analyzes binary boundaries and call graphs to map program structure and identify specific object file changes.
• Pseudo-code Diffing - Generates text-based patches by comparing high-level code representations from an integrated decompilation engine.
• Code Diff Visualizers - Generates pseudo-code patches by visually comparing decompiled code with syntax highlighting.
• Binary Diffing and Matching - Program diffing plugin for identifying binary differences.
• IDA Pro Plugins - Performs advanced binary diffing and program comparison.
• Reverse Engineering Tools - Advanced binary diffing tool for identifying code changes.

Star history