Skip to content

A binary visualization tool to aid with reverse engineering and malware detection similar to Cantor.Dust

License

Notifications You must be signed in to change notification settings

mewbak/binary_viewer

 
 

Repository files navigation

Binary Viewer is a tool for binary file discovery using visualizations that may contain patterns.

Loosely based on Cantor.Dust, Binary Viewer was developed September 21-October 8, 2015 after seeing a demo of Cantor.Dust but receiving no response regarding availability.
Since Cantor.Dust was released, another tools have similar functionality and available. Binary Viewer is meant as a reference for those interested but is unlikely to receive active development.

For more information on this and related programs for visualizing binaries see https://www.youtube.com/watch?v=C8--cXwuuFQ&list=PLUyyOw61zxiJXMihb4PjYbGHEgdGxMuY3

To compile Binary Viewer, Qt4 is required.

Since Cantor.Dust was released, another tools have similar functionality and available.
https://github.com/devttys0/binwalk/wiki/Quick-Start-Guide
https://sites.google.com/site/xxcantorxdustxx/home
https://github.com/wapiflapi/binglide
https://github.com/wapiflapi/veles

The beginnings of Cantor.Dust was Greg Conti's work
https://github.com/rebelbot/binvis
https://media.blackhat.com/bh-us-10/whitepapers/Bratus_Conti/BlackHat-USA-2010-Bratus-Conti-Taxonomy-wp.pdf

Even earlier are dotplots for RE'ing, here Dan Kaminsky's Blackops talk
https://www.slideshare.net/dakami/dmk-blackops2006

For more information, contact
Kent A. Vander Velden
kent.vandervelden@gmail.com

About

A binary visualization tool to aid with reverse engineering and malware detection similar to Cantor.Dust

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • C++ 94.9%
  • C 3.5%
  • CMake 1.1%
  • QMake 0.5%