rematch: a complete binary diffing framework

by do son · Published December 23, 2019 · Updated December 23, 2019

rematch

REmatch, yet another binary comparison tool.

Rematch is still a work in progress and is not as feature-rich as we’d like it to be. Basic functionality is available at this point and more advanced features are being worked on. Hopefully, since extendability and maintainability were first priorities we’ll get there relatively fast.

It is intended to be used by reverse engineers by revealing and identifying previously reverse engineered similar functions and migrating documentation and annotations to current IDB. It does that by locally collecting data about functions in your IDB and uploading that information to a web service (which you’re supposed to set up as well). Upon request, the web service can match your functions against all (or part) of previously uploaded functions and provide matches.

A secondary goal of this (which is not currently pursued) is to allow synchronization between multiple reverse engineers working on the same file.

Architecture

The rematch solution is divided into two main parts: a client and a server. The server is in charge of most of the heavy lifting, matching, and data storage. The client is collecting Annotations and Vectors, applying annotations after matches are displayed to the user and overall user interface.

Clients are designed to be replaceable, however, we only have an IDA client at the moment.