Binary Ninja

Binary Ninja is a reverse-engineering platform developed by Vector 35 Inc.[1] It can disassemble a binary and display the disassembly in linear or graph views. It performs automated in-depth analysis of the code, generating information that helps to analyze a binary. It lifts the instructions into intermediate languages, and eventually generates the decompiled code.

Binary Ninja
Original author(s)Jordan Wiens, Rusty Wagner, Peter LaFosse
Developer(s)Vector 35 Inc[1]
Initial releaseJuly 31, 2016 (2016-07-31)[2]
Stable release
2.1.2263 / July 10, 2020 (2020-07-10)[2]
Written inC++, C, Python
Operating systemMicrosoft Windows, Mac OS X, and Linux
Available inEnglish
TypeReverse Engineering, Disassembler, Decompiler
LicenseProprietary
Websitehttps://binary.ninja/

Binary Ninja supports various CPU architectures and binary executable formats. It runs on Windows, macOS, and Linux. It also has a free-to-use cloud version.[3]

History

Binary Ninja was originally an internal tool[4] for a CTF team. The developers later decided to form Vector 35 Inc and develop Binary Ninja into a commercial product. The development started in 2015 and the first public version was released in July 2016.

The commercial product does not share code[4] with the internal tool. The latter one is now open-sourced[5] under GPLv2.

Features and usage

User Interface

Binary Ninja's UI is built on top of Qt (software). Its main UI comprises a symbol list, a cross-reference window, a linear/graph view of the disassembly, a mini-graph, as well as a feature map. It can also show a hex editor, strings listing, and a triage view.

Binary Ninja generates extensive annotations in the UI to assist binary analysis.

Binary Ninja also supports user-defined themes.[6]

API and plugins

Binary Ninja offers an API[7] that can be accessed via Python or C. The API is open-sourced[8] under MIT License. It can interact with most of the Binary Ninja's functionality, e.g., user interface, analysis, IL (see below), etc. It can be used to add support for new architecture or automate tasks.

Plugins[9] can be made via the API to enhance Binary Ninja. Vector35 maintains a collection of official plugins,[10] while the community has created numerous community plugins.[11]

Some notable plugins are the debugger,[12] the signature kit,[13] etc.

Binary Ninja intermediate languages (BNIL)

Binary Ninja offers three intermediate languages (ILs).

  • The low-lowel IL (LLIL)[14] is a verbose lifting of the underlying instructions from various architectures to a unified representation.
  • The medium-level IL (MLIL)[15] creates variables with types and removes the notion of the stack.
  • The high-level IL (HLIL, also called decompiler) offers a representation of the code that is similar to C source code.

Core analysis

Binary Ninja automatically performs various analysis on the binary. Some examples are:

  • function detection
  • cross-references for code and data
  • type inference
  • constant propagation
  • value-set analysis
  • jump table resolution

Binary editing and patching, shellcode compiler (SCC)

Binary Ninja offers a convenient way to edit and patch a binary. It can assemble an instruction at the current line, flip a conditional jump, etc. Edits and updated analysis are immediately reflected in the UI.

Besides, Binary Ninja can be used as a general binary editor. It supports several commonly-used transformations and encryption algorithms.

The shellcode compiler allows the user to compile and insert code via C syntax.

Supported architectures and executable file formats

Architectures

Binary Ninja supports the following CPU architectures officially:

  • x86 32-bit
  • x86 64-bit
  • ARMv7
  • Thumb2
  • ARMv8
  • PowerPC
  • MIPS
  • 6502

The support for these architectures vary and details can be found in the official FAQ.[16]

Besides, the community also made several architecture plugins[17] that support various other architectures.

Executable file formats

Binary Ninja supports the following executable file formats officially:

  • PE/COFF
  • ELF
  • Mach-O
  • .NES binary (via a plugin)
  • Raw binary

See also

References
  1. "Vector 35 > home". vector35.com. Retrieved 2020-07-26.
  2. Inc, Vector 35. "Binary Ninja > Binary Ninja > changelog". binary.ninja. Retrieved 2020-07-26.
  3. "Binary Ninja Cloud". cloud.binary.ninja. Retrieved 2020-07-26.
  4. faq.binary.ninja https://faq.binary.ninja/en/wasnt-this-an-open-source-project-at-first-6r43DzhbkvAzXSM6S. Retrieved 2020-07-26. Missing or empty |title= (help)
  5. Vector35/deprecated-binaryninja-python, VECTOR 35, 2020-07-12, retrieved 2020-07-26
  6. Vector35/community-themes, VECTOR 35, 2020-07-09, retrieved 2020-07-26
  7. "Binary Ninja Python API Documentation — Binary Ninja API Documentation v2.1". api.binary.ninja. Retrieved 2020-07-26.
  8. Vector35/binaryninja-api, VECTOR 35, 2020-07-22, retrieved 2020-07-26
  9. "Using and Writing Plugins - Binary Ninja User Documentation". docs.binary.ninja. Retrieved 2020-07-26.
  10. Vector35/official-plugins, VECTOR 35, 2020-07-16, retrieved 2020-07-26
  11. "Using and Writing Plugins - Binary Ninja User Documentation". docs.binary.ninja. Retrieved 2020-07-26.
  12. Vector35/debugger, VECTOR 35, 2020-07-25, retrieved 2020-07-26
  13. Vector35/sigkit, VECTOR 35, 2020-07-14, retrieved 2020-07-26
  14. "BNIL Guide: LLIL - Binary Ninja User Documentation". docs.binary.ninja. Retrieved 2020-07-26.
  15. "BNIL Guide: MLIL - Binary Ninja User Documentation". docs.binary.ninja. Retrieved 2020-07-26.
  16. faq.binary.ninja https://faq.binary.ninja/en/what-cpu-architectures-are-supported-g8KfmMrgnM8LxGrCc. Retrieved 2020-07-26. Missing or empty |title= (help)
  17. Vector35/community-plugins, VECTOR 35, 2020-07-22, retrieved 2020-07-26
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.