BinDiff is a comparison tool for binary files, that assists vulnerability researchers and engineers to quickly find differences and similarities in disassembled code.

With BinDiff you can identify and isolate fixes for vulnerabilities in vendor-supplied patches. You can also port symbols and comments between disassemblies of multiple versions of the same binary or use BinDiff to gather evidence for code theft or patent infringement.

Use Cases

  • Compare binary files for x86, MIPS, ARM, PowerPC, and other architectures supported by IDA Pro
  • Identify identical and similar functions in different binaries
  • Port function names, anterior and posterior comment lines, standard comments and local names from one disassembly to the other
  • Detect and highlight changes between two variants of the same function
To learn more about the features of BinDiff, you can download the BinDiff Manual.
BinDiff 3.2.1. As the version number implies, this is mostly a bugfix only release with one important difference: As of now, all customers that place an order for BinDiff, automatically receive a Debian GNU/Linux package as well as the familiar Windows Installer package. Supported Debian-based distributions include:

  • Debian 5.0 (“Lenny”)
  • Ubuntu 10.04 LTS (“Lucid Lynx”)

Please note that for the Linux packages, we only support using BinDiff with Hex-Rays IDA Pro 6.0. For the Windows version we support the three latest version of IDA Pro (5.6, 5.7 and 6.0, respectively).

This is how BinDiff looks on Linux:

BinDiff 3.2.1 in IDA 6.0 (Qt) on Linux
BinDiff 3.2.1 GUI on Linux
Download Post in PDF Save Post as PDF