Skip to content
0:00 / 0:00

#cantor.dust#binaryvisualization#reverseengineering

REcon 2013 - The Future of RE : Dynamic Binary Visualization (Christopher Domas)

Sébastien Duquette

965 subscribers • 2 videos on Hallway

YouTube
  • Recommended by 3 people: 3 on Hacker News.
  • A classic. People kept recommending it from 2017 to 2024.
  • Presented by Christopher Domas, security researcher

Advanced. Deep dive for people who know the field.

9.4K views12 years ago3 recommendations

SecurityGraphics and audioReverse engineeringData visualization

Christopher Domas demonstrates how visualizing binary data as interactive 3D trigraphs and maps reveals hidden structures, introducing his tool Cantor.dust.

The uploader added no description.

Why it's here

3 people recommend this

What people say. Widely recommended as a mind-blowing presentation on using visual patterns instead of hex dumps for reverse engineering.

LargoLasskhyfvon Hacker News • Recommends

On “Unexpected Risks Found in Editing Genes to Prevent Inherited Disorders”

Maybe it's a matter of tooling. I don't want to appear disrespectful, but after having seen Christopher Domas present "The Future of RE: Dynamic Binary Visualization" my mind was forever blown. Working with hexdumps, debuggers, disassemblers etc. seems so stone-agey compared to that. Like so much in IT in general. Anyways, caveman CAN more than crawl, obviously ;-) So, if you have up to an hour of time to waste, maybe you can have your mind blown to cantor dust too? link link to this video Something very similar seems to be developed here: link Happy New Cyber! edit: spelling

oldmanluddon Hacker News • Recommends

On “Ask HN: Are There Viewers for Memory Layout?”

I don't think it's quite what you're looking for but cantor.dust is an interesting visualization tool for binary data. Security conference presentation from a decade ago: link to this video Release of open-source Ghidra plugin in 2020: link

hoosiereeon Hacker News • Recommends

On “Show HN: Bin-graph: Visualize binary files”

Have you checked out this demo? link to this video The 3d pan/tilt/zoom visualizations of the trigraphs are especially nice to look at.

jsprogrammeron Hacker News • Mentions

On “X86 rootkit”

Yep. I didn't read most of the last 1/2-1/3 of the slides, but it looks like the magic number may be different for each machine (ie. there is no one binary to rule them allall though you could probably trivially generate all possibilities)? And that there is at least some process involved in determining the number what the number is? The author is legit. Here's a somewhat recent talk he gave: link to this video