👀 Does all binary code look the same to you? Upgrade your #BinaryDiffing skills and automate your diffing tasks with Joxean Koret’s (@joxean) #infosec #training on Advanced Binary Diffing with #Diaphora!

🎟️ https://ringzer0.training/trainings/advanced-binary-diffing-with-diaphora.html

@joxean The order they are called in is a good heuristic, but you probably have enough information to match code structures beyond that.

You would need to use the basic block structure of the caller to differentiate call sites, since "first" is only trivial in a linear function with no branches.

You're decompiling, which should allow you to match the call sites in the AST or an intermediate representation (IR), independent of the arch.

#AST #IR #BinaryDiffing #BasicBlock

@joxean I think a fine-grained callgraph including call site information would break this tie.

Match the call sites in the two binaries, using instruction-level comparisons. You can then differentiate between the two call edges, based on which call site they are from.

#BinaryDiffing #CallGraph #Diaphora

RT @_ringzer0@twitter.com

👀 Does all binary code look the same to you? Upgrade your #BinaryDiffing skills and automate your diffing tasks with Joxean Koret’s (@matalaz@twitter.com) #training on Advanced Binary Diffing with #Diaphora!

🎟️ https://ringzer0.training/trainings/advanced-binary-diffing-with-diaphora.html

🐦🔗: https://twitter.com/_ringzer0/status/1613568373677522944

👀 Does all binary code look the same to you? Upgrade your #BinaryDiffing skills and automate your diffing tasks with Joxean Koret’s (@joxean) #training on Advanced Binary Diffing with #Diaphora!

🎟️ https://ringzer0.training/trainings/advanced-binary-diffing-with-diaphora.html

RT @_ringzer0@twitter.com

👀 Does all binary code look the same to you? Upgrade your #BinaryDiffing skills and automate your diffing tasks with @matalaz@twitter.com’s training on Advanced Binary Diffing with #Diaphora!

🎟️ https://ringzer0.training/trainings/advanced-binary-diffing-with-diaphora.html

🐦🔗: https://twitter.com/_ringzer0/status/1597260939337863170

RT @_ringzer0@twitter.com

👀 Does all binary code look the same to you? Upgrade your #BinaryDiffing skills and automate your diffing tasks with @matalaz@twitter.com’s training on Advanced Binary Diffing with #Diaphora!

🎟️ https://ringzer0.training/trainings/advanced-binary-diffing-with-diaphora.html

🐦🔗: https://twitter.com/_ringzer0/status/1597260939337863170

👀 Does all binary code look the same to you? Upgrade your #BinaryDiffing skills and automate your diffing tasks with @joxean’s training on Advanced Binary Diffing with #Diaphora!

🎟️ https://ringzer0.training/trainings/advanced-binary-diffing-with-diaphora.html

If you are interested in #binarydiffing, checkout this video.
https://youtu.be/gb02dzgHBeU

RT @_ringzer0@twitter.com

👀 Can’t spot the difference? Upgrade your #BinaryDiffing skills and automate your diffing tasks with @matalaz@twitter.com's training on Advanced Binary Diffing with #Diaphora!

🎟️ https://ringzer0.training/trainings/advanced-binary-diffing-with-diaphora.html

🧵 6/10

🐦🔗: https://twitter.com/_ringzer0/status/1592259411942440960

RT @_ringzer0@twitter.com

👀 Can’t spot the difference? Upgrade your #BinaryDiffing skills and automate your diffing tasks with @matalaz@twitter.com's training on Advanced Binary Diffing with #Diaphora!

🎟️ https://ringzer0.training/trainings/advanced-binary-diffing-with-diaphora.html

🧵 6/10

🐦🔗: https://twitter.com/_ringzer0/status/1592259411942440960

👀 Can’t spot the difference? Upgrade your #BinaryDiffing skills and automate your diffing tasks with Joxean Koret’s training on Advanced Binary Diffing with #Diaphora!

🎟️ https://ringzer0.training/trainings/advanced-binary-diffing-with-diaphora.html

🧵 6/10

RT @_ringzer0@twitter.com

Register now for advanced training in #reverseengineering beginning Feb 1 at #Unlock2021
👇👇
>>Reverse Engineering w/ #Ghidra by @0xJeremy@twitter.com
>>#RTOS Reverse Engineering by @jensensec@twitter.com
>>Advanced #BinaryDiffing w/ #Diaphora by @matalaz@twitter.com

https://ringzer0.training/

🐦🔗: https://twitter.com/_ringzer0/status/1353697378977640448