Misplaced Pages

Binary Ninja is a reverse-engineering platform developed by Vector 35 Inc. It allows users to disassemble a binary file and visualize the disassembly in both linear and graph-based views. The software performs automated, in-depth code analysis, generating information that helps to analyze a binary. It lifts assembly instructions into intermediate languages, generating decompiled code.

Binary Ninja supports various CPU architectures and binary executable formats, and runs on Windows, macOS, and Linux. It also offers a free-to-use cloud version and a native commercial version.

History

Originally developed as an internal tool for a CTF team, the developers later formed Vector 35 Inc. to turn Binary Ninja into a commercial product. Development began in 2015, and the first public version was released in July 2016.

The commercial version was developed from scratch and does not share code with the original internal tool. The latter one is now open-sourced under the GPLv2 license.

Features and usage

User interface

Binary Ninja's user interface is, built using Qt, comprises several components such as a symbol list, a cross-reference window, and disassembly views (both linear and graph-based), a mini-graph, and a feature map. It also includes tools like a hex editor, strings listing, and a triage view.

Binary Ninja generates extensive annotations in the UI to assist binary analysis and also supports user-defined themes for customization.

API and plugins

Binary Ninja offers an API that can be accessed via Python, C++, or Rust. The API is open-sourced under the MIT License. It can interact with most of Binary Ninja's functionality, including the user interface, analysis tools, and intermediate languages (see below). It can be used to add support for new architectures or to automate tasks,

Plugins can be developed using the API to enhance Binary Ninja. Vector35 maintains a collection of official plugins, while the community has created numerous additional plugins.

Some notable plugins include the debugger, and the signature kit.

Binary Ninja Intermediate Languages (BNIL)

Binary Ninja offers three intermediate languages (ILs).

• The low-level IL (LLIL) provides a detailed lifting of the underlying instructions from various architectures to a unified representation.
• The medium-level IL (MLIL) creates variables with types and abstracts away the notion of the stack.
• The high-level IL (HLIL, also known as the decompiler), offers a representation of the code that is similar to C source code.

Core analysis

Binary Ninja automatically performs various analyses on the binary. Some examples are:

• function detection
• cross-references for code and data
• type inference
• constant propagation
• value-set analysis
• jump table resolution

Binary editing and patching, shellcode compiler (SCC)

Binary Ninja offers binary patching and editing features. It can assemble an instruction at the current line, flip a conditional jump, etc. Edits and updated analysis are immediately reflected in the UI.

Binary Ninja can be used as a general binary editor. It supports several commonly-used transformations and encryption algorithms.

The shellcode compiler allows the user to compile and insert code via C syntax.

Supported architectures and executable file formats

Architectures

Binary Ninja supports the following CPU architectures officially:

• x86 32-bit
• x86 64-bit
• ARMv7
• Thumb2
• ARMv8
• PowerPC
• MIPS
• RISC-V
• 6502
• nanoMIPS
• TriCore

The support for these architectures vary and details can be found in the official FAQ.

Community-authored plugins add support for various other architectures.

Executable file formats

Binary Ninja supports the following executable file formats officially:

• PE/COFF
• ELF
• Mach-O
• .NES binary (via a plugin)
• Raw binary
• md1rom

See also

• Ghidra
• JEB
• Radare2
• Interactive Disassembler
• Decompiler
• Disassembler

References

1. ^ "Vector 35 > home". vector35.com. Retrieved 2020-07-26.
2. ^ Vector 35 Inc. "Binary Ninja > Binary Ninja > changelog". binary.ninja. Retrieved 2020-07-26.
3. "Try Binary Ninja". binary.ninja. Retrieved 2024-03-02.
4. ^ "Binary Ninja > Frequently Asked Questions". faq.binary.ninja. Retrieved 2020-07-26.
5. Vector35/deprecated-binaryninja-python, VECTOR 35, 2020-07-12, retrieved 2020-07-26
6. Vector35/community-themes, VECTOR 35, 2020-07-09, retrieved 2020-07-26
7. "Using the Binary Ninja API - Binary Ninja User Documentation". docs.binary.ninja. Retrieved 2023-03-17.
8. Vector35/binaryninja-api, VECTOR 35, 2020-07-22, retrieved 2020-07-26
9. "Using and Writing Plugins - Binary Ninja User Documentation". docs.binary.ninja. Retrieved 2020-07-26.
10. Vector35/official-plugins, VECTOR 35, 2020-07-16, retrieved 2020-07-26
11. "Using and Writing Plugins - Binary Ninja User Documentation". docs.binary.ninja. Retrieved 2020-07-26.
12. Vector35/debugger, VECTOR 35, 2020-07-25, retrieved 2020-07-26
13. Vector35/sigkit, VECTOR 35, 2020-07-14, retrieved 2020-07-26
14. "BNIL Guide: LLIL - Binary Ninja User Documentation". docs.binary.ninja. Retrieved 2020-07-26.
15. "BNIL Guide: MLIL - Binary Ninja User Documentation". docs.binary.ninja. Retrieved 2020-07-26.
16. "Binary Ninja > Frequently Asked Questions". binary.ninja. Retrieved 2024-07-25.
17. Vector35/community-plugins, VECTOR 35, 2020-07-22, retrieved 2020-07-26

• Disassemblers