Skip to content

gitter-badger/rematch

 
 

Repository files navigation

Build Status Codacy Badge rematch-idaplugin PyPI rematch-server PyPI

rematch

REmatch, a simple binary diffing utility that just works.

At least, we hope it will be. Rematch is still a work in progress and is not fully functional at the moment. We're currently working on bringing up basic functionality. Check us out again soon, or watch for updates!

It is intended to be used by reverse engineers by revealing and identifying previously reverse engineered similar functions and migrate documentation and annotations to current IDB. It does that by locally collecting data about functions in your IDB and uploads that information to a web service (which you're supposed to set up as well). Upon request, the web service can match your functions against all (or part) of previously uploaded functions and provide matches.

A secondary goal of this (which is not currently pursued) is to allow synchronization between multiple reverse engineers working on the same file.

Goal of REmatch

The goal of REmatch is to act as a maintained, extendable, open source tool for advanced assembly function-level binary comparison and matching. Hopefully, this will be a completely open source and free (as in speech) community-driven tool.

We've noticed that although there are more than several existing binary matching tools, there's no one tool that provides all of the following:

  1. Open source and community driven.
  2. Supports advanced matching algorithms (ML included ™).
  3. Fully integrated into IDA.
  4. Allows managing multiple projects in a single location.
  5. Enables out of the box one vs. many matches.
  6. Actively maintained.

Status updates

We'll try to occasionally update here about what's going on in the project and briefly describe advancements we've had.

Current status (November 9th, 2016)

We recently got a big PR in, implement match backend, that basically sets up the foundations for matching functions (as well as some basic matching functionality). It implements "collectors" (under idapython/rematch/collectors) and "matchers" (under server/collab/matches) which collect features and match functions based on those features respectively. One of the goals here was to have adding additional matching strategies and features as easy as possible.

There's no nice way to see the results of such comparisons but they're stored in the database and the browsable API can be used to view them. Adding a results dialog is the next big task. We have some basic match configuration going on for the matching process such as which functions to match and against what (there's a picture in the PR ticket).

We also added quite a bit of minor changes (bug fixes, speedup and architecture improvements, richer UI).

Old statuses

Old status paragraphs will be pushed here

(August 30th, 2016)

Development advances on a daily basis. We have a basic server and an IDA plugin. We collect a few relatively simple features and working on adding more. We have a matching stab that we will populate soon. Features are uploaded to the server. Basic plugin settings, project hierarchy and user authentication. We have a skeleton for the match results dialog (which supports some basic python scripting! :D).

About

REmatch, a complete binary diffing framework that strives to be free, open source, and community driven.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Python 98.7%
  • Shell 1.3%