[Vulnerability Analysis] Binary diffing/Patch Diffing for beginners

Hardik Shah explains how to use the BinDiff plugin for IDA Pro to compare patched and unpatched binaries to find vulnerabilities.

Binary diffing is a technique where we compare patched dll/executable file with unpatched dll/executable file using bindiff plugin for IDA. It helps to understand what changes have been made to fix vulnerabilities. In this video we will see following: 1. Code review of patched and unpatched Damn Vulnerable C program. 2. How does patched and unpatched code looks in IDA at assembly level. 3. How to do binary diffing using IDA bindiff plugin. 4. How to analyze changes in the patched and unpatched versions. 5. How to locate vulnerabilities by traversing the code. you can get patched and unpatched dlls here: github.com/hardik05/Damn_Vulnerable_C_Program/tree/master/Bi… Sample program mentioned in the video can be downloaded from here: github.com/hardik05/Damn_Vulnerable_C_Program Please like and subscribe my channel for more videos related to various security topics: youtube.com/channel/UCDX-6Auq06Fmwbh7zj5j8_A?view_as=subscri… Check complete fuzzing playlist here: youtube.com/user/MrHardik05/videos?view_as=subscriber Follow me on twitter: twitter.com/hardik05 #binarydiffing #vulnerability #patchanalysis #reversing #patchdiffing #bindiff #idapro #bugbounty I also run a few practical fuzzing trainings — no theory-heavy content, just real fuzzing on real targets. Details here: fuzzing.in/trainings.html if you like my work, you can buy me a coffee here: buymeacoffee.com/fuzzing_in