FCatalog is the Functions Catalog. It allows to save large amount of different binary blobs, and find similarities quickly between them and a given new binary blob. FCatalog server works together with a python client that runs with IDA pro.
This was written to help binary reversers find similar functions, however it might be useful for other purposes as well.
The server is written using Python3 with Asyncio. Sqlite3 is used for persistency. The core catalog1 function is written in C, for speed.
You can find the fcatalog_client repository here. Visit the fcatalog website for the full story.
- The server will only run on Linux. Tested on Ubuntu 14.04
- Python >= 3.4
- gcc
When you have internet connection, run:
./get_deps
This will fetch all the needed dependencies from the internet. Now just copy everything and put it on a disk.
On an offline setting, run:
sudo ./install
This should install the fcatalog server. You can uninstall using:
sudo ./uninstall
To start the server run:
sudo start fcatalog
To stop the server run:
sudo stop fcatalog
The server will start by default on 127.0.0.1:1337
Install pytest:
pip install pytest
and run:
py.test
If you like this, you might like other stuff at http://www.xorpd.net