7 ms·

Veles – A tool for binary analysis (2018)

71 points by tildef 3y ago

hlieberman 3y ago
Very interesting, but also has been dead upstream for three years now.
- devy 3y ago
  Yep. There is banner in the repo reads: This repository has been archived by the owner on Sep 29, 2020. It is now read-only.
- tildef 3y ago
  Yeah, thankfully it still builds and runs without issue on modern machines though. Feature-wise it's fairly complete.
xvilka 3y ago
In Cutter[1][2] we have an idea to implement the same feature[3] as a plugin, but our priorities lie elsewhere due to the lack of enough hands. Contributions are welcome. [1] https://cutter.re https://cutter.re [2] https://github.com/rizinorg/cutter https://github.com/rizinorg/cutter [3] https://github.com/rizinorg/cutter-plugins/issues/3 https://github.com/rizinorg/cutter-plugins/issues/3
- fullspectrumdev 3y ago
  Stupid question, but why did radare fork and become rizin? Are both relatively similar development wise or massively divergent at this point? I ask because I wrote a load of shit years ago that relies heavily on radare, various scripts etc
  - xvilka 3y ago
    See our FAQ[1] on why we forked. As three years passed and both projects are actively developed, the divergence has grown a lot since. We aim for exposing the proper API instead of relying just commands, see e.g. our new Python bindings and rz-bindgen[2]. We have completely different concept of projects, new intermediate language - RzIL[3], and many other things. And under the new organization Cutter is a first-class citizen, not an afterthought as before. [1] https://rizin.re/posts/faq/ https://rizin.re/posts/faq/ [2] https://rizin.re/posts/gsoc-2022-rz-bindgen/ https://rizin.re/posts/gsoc-2022-rz-bindgen/ [3] https://github.com/rizinorg/rizin/blob/dev/doc/rzil.md https://github.com/rizinorg/rizin/blob/dev/doc/rzil.md
zoomablemind 3y ago
What does it really do? In the image it showed some glowing streaks - are those jpeg data?
userbinator 3y ago
Is "modern" now deprecated, and "new age" the replacement term?
- rurban 3y ago
  In fact the complete opposite. Modern favors functionality over bloat. New age is anti-functional as post-modernism, rather esoteric and pseudo-religious. https://en.wikipedia.org/wiki/New_Age https://en.wikipedia.org/wiki/New_Age Here it serves as eyewink over serious binary analysis efforts, but just visually displaying binary patterns. Which would be more interesting for pseudo-random generators or hash functions, not executables.
29athrowaway 3y ago
Christopher Domas: "The future of RE Dynamic Binary Visualization" (2012) https://www.youtube.com/watch?v=4bM3Gut1hIk https://www.youtube.com/watch?v=4bM3Gut1hIk
- pentaphobe 3y ago
  Was just hunting through my notes for this link, thanks for saving me the trip!
gtsnexp 3y ago
Does the term 'public archive' mean the same as 'no longer maintained'?
- geek_at 3y ago
  Usually yes, but the amazing people who would otherwise send pull requests usually fork the repo and if one of the forks gains enough traction it will be the new main branch so to speak
lathiat 3y ago
Tangentially related is this tool for tuning the ECU in Cars. It helps you locate patterns in ECU rom dumps that are likely to be tables. Often they are sets of numbers in a 2D or 3D matrix of some dimension that have smooth increases. Partly it does this by showing you the values visually so you can spot them. https://www.evc.de/en/product/ols/software/ https://www.evc.de/en/product/ols/software/
p_l 3y ago
Oh, this brings memories. First project where I ended up writing CMake, I think partly because it made it somewhat easier to build both macos and windows versions. Also first project I used Jenkinsfile on, as it was a new thing introduced in Jenkins when we started building our CI. Making a builder for macos was a PITA (finally I think an MBA was provided to the project just to run those builds). Good to see it continued for some time, I feared it got canceled much earlier.

71 points by tildef 3y ago

hlieberman 3y ago

Very interesting, but also has been dead upstream for three years now.

devy 3y ago
Yep. There is banner in the repo reads: This repository has been archived by the owner on Sep 29, 2020. It is now read-only.
tildef 3y ago
Yeah, thankfully it still builds and runs without issue on modern machines though. Feature-wise it's fairly complete.

xvilka 3y ago

In Cutter[1][2] we have an idea to implement the same feature[3] as a plugin, but our priorities lie elsewhere due to the lack of enough hands. Contributions are welcome. [1] https://cutter.re https://cutter.re [2] https://github.com/rizinorg/cutter https://github.com/rizinorg/cutter [3] https://github.com/rizinorg/cutter-plugins/issues/3 https://github.com/rizinorg/cutter-plugins/issues/3

fullspectrumdev 3y ago
Stupid question, but why did radare fork and become rizin? Are both relatively similar development wise or massively divergent at this point? I ask because I wrote a load of shit years ago that relies heavily on radare, various scripts etc
- xvilka 3y ago
  See our FAQ[1] on why we forked. As three years passed and both projects are actively developed, the divergence has grown a lot since. We aim for exposing the proper API instead of relying just commands, see e.g. our new Python bindings and rz-bindgen[2]. We have completely different concept of projects, new intermediate language - RzIL[3], and many other things. And under the new organization Cutter is a first-class citizen, not an afterthought as before. [1] https://rizin.re/posts/faq/ https://rizin.re/posts/faq/ [2] https://rizin.re/posts/gsoc-2022-rz-bindgen/ https://rizin.re/posts/gsoc-2022-rz-bindgen/ [3] https://github.com/rizinorg/rizin/blob/dev/doc/rzil.md https://github.com/rizinorg/rizin/blob/dev/doc/rzil.md

zoomablemind 3y ago

What does it really do? In the image it showed some glowing streaks - are those jpeg data?

userbinator 3y ago

Is "modern" now deprecated, and "new age" the replacement term?

rurban 3y ago
In fact the complete opposite. Modern favors functionality over bloat. New age is anti-functional as post-modernism, rather esoteric and pseudo-religious. https://en.wikipedia.org/wiki/New_Age https://en.wikipedia.org/wiki/New_Age Here it serves as eyewink over serious binary analysis efforts, but just visually displaying binary patterns. Which would be more interesting for pseudo-random generators or hash functions, not executables.

29athrowaway 3y ago

Christopher Domas: "The future of RE Dynamic Binary Visualization" (2012) https://www.youtube.com/watch?v=4bM3Gut1hIk https://www.youtube.com/watch?v=4bM3Gut1hIk

pentaphobe 3y ago
Was just hunting through my notes for this link, thanks for saving me the trip!

gtsnexp 3y ago

Does the term 'public archive' mean the same as 'no longer maintained'?

geek_at 3y ago
Usually yes, but the amazing people who would otherwise send pull requests usually fork the repo and if one of the forks gains enough traction it will be the new main branch so to speak

lathiat 3y ago

Tangentially related is this tool for tuning the ECU in Cars. It helps you locate patterns in ECU rom dumps that are likely to be tables. Often they are sets of numbers in a 2D or 3D matrix of some dimension that have smooth increases. Partly it does this by showing you the values visually so you can spot them. https://www.evc.de/en/product/ols/software/ https://www.evc.de/en/product/ols/software/

p_l 3y ago

Oh, this brings memories. First project where I ended up writing CMake, I think partly because it made it somewhat easier to build both macos and windows versions. Also first project I used Jenkinsfile on, as it was a new thing introduced in Jenkins when we started building our CI. Making a builder for macos was a PITA (finally I think an MBA was provided to the project just to run those builds). Good to see it continued for some time, I feared it got canceled much earlier.