corytodd / binary_viewer

A binary visualization tool to aid with reverse engineering and malware detection similar to Cantor.Dust

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Binary Viewer is a tool for binary file discovery using visualizations that may highlight patterns.

See the project Wiki for some examples.

Screenshot

Loosely based on Cantor.Dust, Binary Viewer was developed after seeing a demo of Cantor.Dust but receiving no response regarding availability.

Since Cantor.Dust was demoed, other tools with have similar functionality became available.

https://github.com/devttys0/binwalk/wiki/Quick-Start-Guide

https://sites.google.com/site/xxcantorxdustxx/home

https://github.com/wapiflapi/binglide

https://github.com/codilime/veles

https://github.com/radareorg/radare2

The beginnings of Cantor.Dust was Greg Conti's work https://github.com/rebelbot/binvis

https://media.blackhat.com/bh-us-10/whitepapers/Bratus_Conti/BlackHat-USA-2010-Bratus-Conti-Taxonomy-wp.pdf

Even earlier are dotplots for RE'ing, here Dan Kaminsky's Blackops talk

https://www.slideshare.net/dakami/dmk-blackops2006

For more information on this and related programs for visualizing binaries see https://www.youtube.com/watch?v=C8--cXwuuFQ&list=PLUyyOw61zxiJXMihb4PjYbGHEgdGxMuY3

Qt5 is required to compile Binary Viewer. QDarkStyleSheet (MIT License, https://github.com/ColinDuquesnoy/QDarkStyleSheet/) provides the Qt dark theme.

Kent A. Vander Velden kent.vandervelden@gmail.com

About

A binary visualization tool to aid with reverse engineering and malware detection similar to Cantor.Dust

License:GNU General Public License v3.0


Languages

Language:C++ 98.0%Language:CMake 1.1%Language:C 0.9%