Jump to content
Nytro

DarunGrim: A Patch Analysis and Binary Diffing Tool

Recommended Posts

Posted

DarunGrim: A Patch Analysis and Binary Diffing Tool

Introduction

MS09-025.jpg?height=270&width=400

DarunGrim is a binary diffing tool. DarunGrim is a free diffing tool which provides binary diffing functionality.

Binary diffing is a powerful technique to reverse-engineer patches released by software vendors like Microsoft. Especially by analyzing security patches you can dig into the details of the vulnerabilities it's fixing. You can use that information to learn what causes software break. Also that information can help you write some protection codes for those specific vulnerabilities. It's also used to write 1-day exploits by malware writers or security researchers.

This binary diffing technique is especially useful for Microsoft binaries. Not like other vendors they are releasing patch regularly and the patched vulnerabilities are relatively concentrated in small areas in the code. That makes the patched part more visible and apparent to the patch analyzers.

* DarunGrim 3:

DarunGrim3 is an advanced version of DarunGrim2 which provides nice file management UI.

Binaries: http://github.com/ohjeongwook/DarunGrim/downloads

Source: http://github.com/ohjeongwook/DarunGrim

License: New BSD License

Documentation: DarunGrim 3 Installation & Usage Guide

Blogs: Reverse Engineering | Reverse Engineering stuff

Sursa: DarunGrim: A Patch Analysis and Binary Diffing Tool

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...