From Collaborative RCE Tool Library
eEye Binary Diffing Suite (EBDS)
| Tool name: | eEye Binary Diffing Suite (EBDS) |
|
||
|---|---|---|---|---|
| Author: | eEye Digital Security | |||
| Website: | http://research.eeye.com/html/tools/RT20060801-1.html | |||
| Current version: | 1.0.5 | |||
| Last updated: | November 3, 2006 | |||
| Direct D/L link: | http://research.eeye.com/html/Tools/download/DiffingSuiteSetup.exe | |||
| License type: | Free / Open Source | |||
| Description: | The eEye Binary Diffing Suite (EBDS) is a free and open source set of utilities for performing automated binary differential analysis. | |||
| Related URLs: | No related URLs have been submitted for this tool yet | |||
Feed containing all updates for this tool.
Here below you will find useful notes about this tool, left by other users.
You are welcome to add your own useful notes here, or edit any existing notes to improve or extend them.
(please also edit it if you think it fits well in some additional category, since this can also be controlled)
Trick so make EBDS work with other IDA versions than 5.0
As evilcry describes in one of his blog posts (http://www.woodmann.com/forum/showthread.php?t=11328), EBDS is normally "locked" to IDA 5.0, and cannot be used in any other IDA version.
But the following trick will solve that:
Open with Regedit the following RegKey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IDA Pro_is1
And change the Key Entry DisplayName with the string IDA Pro Standard v5.0 or IDA Pro Professional v5.0
Follow-up trick for 64 Bit Windows Operating Systems
This works as of January 2009 with Windows Vista 64
1) Run Regedit.exe
2) go to "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IDA Pro_is1" and change the Key Entry 'DisplayName' with the string 'IDA Pro Advanced v5.0'
3) Install EBDS
4) Move the contents from /plugins to the plugins directory of your IDA installation
5) Move sqlite3.dll from the install directory to your main IDA installation directory
6) Go the the BDS source (that's included) and find this line in BDSMain.cs
and change it to:
RegistryKey idaRegKey = Registry.LocalMachine.OpenSubKey(@"SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IDA Pro_is1");7) Also, in the same file, find this line:
and change it to:
RegistryKey bdsKey = Registry.LocalMachine.OpenSubKey(@"Software\Wow6432Node\eEye\DiffingSuite");8) Compile the BDS executable and move it to your main BDS install directory (overwriting the old one that is there.)