OpenRCE

📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.

About Articles Book Store Distributed RCE Downloads Event Calendar Forums Live Discussion Reference Library RSS Feeds Search Users What's New

Customize Theme

Flag: Tornado! Hurricane!

Topic created on: May 2, 2006 20:02 CDT by Scott .

Has anyone used the SABRE Security tools BinDiff and BinNavi?

I was wondering what others thought of them before making a purchase?

Thanks in advance!

Scott

aeppert		May 2, 2006 21:53.57 CDT
The good folks at SABRE allowed me to beta test an earlier copy of BinNavi and I dare say it is what you would imagine and a bit more. Very solid and put together by a group of folks who actually use it, not just build it to sell. Thus, it is solid and an ever evolving tool (much like IDA Pro itself.) Is it perfect? No, but it was programmed by people so should you expect that? Further, the engineers at SABRE are professionals and are more than willing to listen and execute-upon reasonable and legitimiate feedback. Again, similar to Datarescue in my experience -- respect them, they respect you, etc. Have I bought either product? Sadly not at the moment. My business need changed a bit more suddenly than I originally anticipated, but I have it on a software purchase road map. The death of Softice actually opens up some budget sooner rather than later, might have to adjust my purchasing appropriately ;) Aaron

sp		May 3, 2006 02:10.29 CDT
I've used BinDiff for a year or something now and I'm very happy with it. It seems to be very well programmed (I've never had it crash or hang or anything) and it does its job. There were some minor issues I had it with it but according to the feedback I received from the Sabre guys they'll all be fixed in the next version. I don't know when the next version is going to be released though. I've never had the chance to test BinNavi.

Scott		May 3, 2006 08:13.19 CDT
Thanks for the feedback. I'm going to look into these tools further. Scott

valsmith		May 3, 2006 17:57.17 CDT
I use both. I had some test versions from Halvar and then I bought the software. Very useful for malware analysis and vulnerability discovery. V.

pandzilla		September 19, 2007 10:19.54 CDT
Just a quick heads-up - due to a pretty bad legal conflict, they were forced to rename SABRE to Recurity. Same people, same products, different name.

frankboldewin		September 19, 2007 15:23.03 CDT
> pandzilla: Just a quick heads-up - due to a pretty bad legal conflict, they were forced to rename SABRE to Recurity. Same people, same products, different name. hi jan, but this is only the case for sabre-labs as far as i know. sabre-security has still its old name. @scott: i use both tools. especially the new bindiff v2, with the look and feel of binnavi is sweet. ;) definitely worth its price.

halvar		September 20, 2007 08:41.34 CDT
Hey all, sabre-security will change the name to avoid the same legal troubles that sabre-labs ran into, we just haven't gotten around to it, and due to some lucky coincidence we seem to have a bit more time.

halvar		September 20, 2007 08:42.10 CDT
also, we're still fighting over the new name !:)

Note: Registration is required to post to the forums.

There are 31,328 total registered users.

Recently Created Topics
[help] Unpacking VMP...	Mar/12
Reverse Engineering ...	Jul/06
let 'IDAPython' impo...	Sep/24
set 'IDAPython' as t...	Sep/24
GuessType return une...	Sep/20
About retrieving the...	Sep/07
How to find specific...	Aug/15
How to get data depe...	Jul/07
Identify RVA data in...	May/06
Question about memor...	Dec/12

Recent Forum Posts
Finding the procedur...	rolEYder
Question about debbu...	rolEYder
Identify RVA data in...	sohlow
let 'IDAPython' impo...	sohlow
How to find specific...	hackgreti
Problem with ollydbg	sh3dow
How can I write olly...	sh3dow
New LoadMAP plugin v...	mefisto...
Intel pin in loaded ...	djnemo
OOP_RE tool available?	Bl4ckm4n

Recent Blog Entries
	halsten	Mar/14
Breaking IonCUBE VM
	oleavr	Oct/24
Anatomy of a code tracer
	hasherezade	Sep/24
IAT Patcher - new tool for ...
	oleavr	Aug/27
CryptoShark: code tracer ba...
	oleavr	Jun/25
Build a debugger in 5 minutes
More ...

Recent Blog Comments
	nieo on:	Mar/22
IAT Patcher - new tool for ...
	djnemo on:	Nov/17
Kernel debugger vs user mod...
	acel on:	Nov/14
Kernel debugger vs user mod...
	pedram on:	Dec/21
frida.github.io: scriptable...
	capadleman on:	Jun/19
Using NtCreateThreadEx for ...
More ...

Imagery

SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit