fn_fuzzy.py - IDAPython script for fast multiple binary diffing triage
Motivation
See the conference information or blog post (will be linked soon).
how to use
- fn_fuzzy.py
- IDAPython script to export/compare fuzzy hashes of the sample
- cli_export.py
- python wrapper script to export fuzzy hashes of multiple samples
The typical usage is to run cli_export.py to make a database for large idbs then compare on IDA by executing fn_fuzzy.py.
supported IDB version
IDBs generated by IDA 6.9 or later due to SHA256 API
required python packages
- mmh3
- python-idb