Veles – A tool for binary analysis (2018)(github.com)

Veles – A tool for binary analysis (2018)

https://github.com/codilime/veles

15 comments

xvilkahá 3 anos

In Cutter[1][2] we have an idea to implement the same feature[3] as a plugin, but our priorities lie elsewhere due to the lack of enough hands. Contributions are welcome.

[1] https://cutter.re

[2] https://github.com/rizinorg/cutter

[3] https://github.com/rizinorg/cutter-plugins/issues/3

fullspectrumdevhá 3 anos

Stupid question, but why did radare fork and become rizin? Are both relatively similar development wise or massively divergent at this point?

I ask because I wrote a load of shit years ago that relies heavily on radare, various scripts etc

xvilkahá 3 anos

See our FAQ[1] on why we forked. As three years passed and both projects are actively developed, the divergence has grown a lot since. We aim for exposing the proper API instead of relying just commands, see e.g. our new Python bindings and rz-bindgen[2]. We have completely different concept of projects, new intermediate language - RzIL[3], and many other things. And under the new organization Cutter is a first-class citizen, not an afterthought as before.

[1] https://rizin.re/posts/faq/

[2] https://rizin.re/posts/gsoc-2022-rz-bindgen/

[3] https://github.com/rizinorg/rizin/blob/dev/doc/rzil.md

29athrowawayhá 3 anos

Christopher Domas: "The future of RE Dynamic Binary Visualization" (2012)

https://www.youtube.com/watch?v=4bM3Gut1hIk

pentaphobehá 3 anos

Was just hunting through my notes for this link, thanks for saving me the trip!

lathiathá 3 anos

Tangentially related is this tool for tuning the ECU in Cars. It helps you locate patterns in ECU rom dumps that are likely to be tables. Often they are sets of numbers in a 2D or 3D matrix of some dimension that have smooth increases. Partly it does this by showing you the values visually so you can spot them.

https://www.evc.de/en/product/ols/software/

hliebermanhá 3 anos

Very interesting, but also has been dead upstream for three years now.

devyhá 3 anos

Yep. There is banner in the repo reads:

   This repository has been archived by the owner on Sep 29, 2020. It is now read-only.

tildefhá 3 anos

Yeah, thankfully it still builds and runs without issue on modern machines though. Feature-wise it's fairly complete.

p_lhá 3 anos

Oh, this brings memories. First project where I ended up writing CMake, I think partly because it made it somewhat easier to build both macos and windows versions. Also first project I used Jenkinsfile on, as it was a new thing introduced in Jenkins when we started building our CI.

Making a builder for macos was a PITA (finally I think an MBA was provided to the project just to run those builds).

Good to see it continued for some time, I feared it got canceled much earlier.

gtsnexphá 3 anos

Does the term 'public archive' mean the same as 'no longer maintained'?

geek_athá 3 anos

Usually yes, but the amazing people who would otherwise send pull requests usually fork the repo and if one of the forks gains enough traction it will be the new main branch so to speak

zoomablemindhá 3 anos

What does it really do? In the image it showed some glowing streaks - are those jpeg data?

userbinatorhá 3 anos

Is "modern" now deprecated, and "new age" the replacement term?

rurbanhá 3 anos

In fact the complete opposite.

Modern favors functionality over bloat. New age is anti-functional as post-modernism, rather esoteric and pseudo-religious. https://en.wikipedia.org/wiki/New_Age

Here it serves as eyewink over serious binary analysis efforts, but just visually displaying binary patterns. Which would be more interesting for pseudo-random generators or hash functions, not executables.