RADIFF2
—
unified binary diffing utility
radiff2 |
[-AabcCdDhOrspxXvzZ ] [-t
0-100] [-g
sym] [-S
algo] file1
file2 |
radiff2 implements many binary diffing algorithms for data and code.
-A
- Analyze binary after loading it with RCore (see -C) and use -AA to run
aaaa instead of aaa.
-a
- Specify architecture (x86, arm, ..)
-b
- Select register size bits for given arch
-B
- Binary output (GDIFF format)
-c
- Count number of differences.
-e
-[k=v]
- Specify eval config vars for all RCore instances created.
-C
- Code diffing using graphdiff algorithm. Output columns are:
file-a-address, percentage of most similar function in B file |
file-b-address. (Use with -A to analyze the binaries to find more
functions)
-d
- Use delta diffing (slower).
-D
- Show disasm instead of hexpairs (honors -a arch and -b bits)
-g
sym | off1,off2
- Graph diff output of given symbol, or between two functions, at given
offsets: one for each binary.
-h
- Show usage help message.
-i
- Compare the list of imports
-n
- Suppress address names (show only addresses) when code diffing.
-O
- Do code diffing with opcode bytes only.
-p
- Use physical addressing (io.va=0)
-q
- Quiet mode: disable colors and reduce output
-r
- Output in radare commands as a binary patch.
-x
- Show two column hexdump diffing.
-X
- Show two column hexII diffing.
-s
- Compute edit distance (no substitution, Eugene W. Myers' O(ND) diff
algorithm) between two files.
-ss
- Compute Levenshtein edit distance (substitution is allowed, O(N^2))
between two files.
-S
[name, namelen, dist, size, ...]
- Specify which column of the code diffing algo use for diffing
-t
0-100
- Choose matching threshold for binary code diffing
-u
- Unified diff output
-U
- Unified diff output using system´s diff program
-v
- Show version information.
-V
- Be verbose sometimes
-z
- Perform diff on extracted strings
-Z
- Perform diff using zignatures instead of function list (NEW)
pancake <pancake@nopcode.org>