BinDiff

Provides binary comparison and function analysis using headless IDA Pro and BinDiff for automated binary comparison tasks.

typescript

0

GitHub Stars

typescript

Language

4 months ago

First Indexed

2 months ago

Catalog Refreshed

Documentation & install

Readme and setup notes from the catalogue, plus a client-ready config you can copy for your MCP host.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "u21h2-bindiff-mcp": {
      "command": "uv",
      "args": [
        "run",
        "bindiff-mcp",
        "--transport",
        "sse",
        "--host",
        "0.0.0.0",
        "--port",
        "8001"
      ],
      "env": {
        "IDADIR": "YOUR_IDA_DIRECTORY",
        "MCP_TIMEOUT": "3600",
        "BINDIFF_PATH": "PATH_TO_BINDIFF"
      }
    }
  }
}

You can run this MCP server to perform binary comparisons using IDA Pro and BinDiff in headless mode. It enables automated analysis of two binaries, returning similarity data and a list of changed functions for efficient reverse engineering workflows.

How to use

You will run the MCP server locally and connect your MCP client to it. Start the server in a way that makes it accessible to both local and remote clients, using the SSE transport. The server relies on your IDA Pro installation and BinDiff to perform analysis, so ensure those tools are properly installed and discoverable by the server.

How to install

Prerequisites you must have installed before running the MCP server include Python 3.10 or newer, IDA Pro (9.0 or newer recommended), BinDiff (installed and callable from the command line), and uv for package management.

Install BinDiff on Linux (Ubuntu/Debian):

# Download the latest .deb package, e.g. bindiff_8_amd64.deb
# From the official releases page

sudo dpkg -i bindiff_8_amd64.deb

# Verify installation
which bindiff

Environment configuration is used to locate IDA Pro and BinDiff. The recommended environment variables are IDADIR for the IDA installation base and BINDIFF_PATH for the BinDiff executable.

Install the MCP server dependencies and set up the project:

uv sync

To run the server in SSE mode so it can be accessed by clients, execute the appropriate start command shown for your platform.

Additional sections

Configuration and runtime details can be handled via environment variables. The MCP server looks for IDADIR as the path to your IDA Pro installation and BINDIFF_PATH as the path to the bindiff executable. You can also configure a timeout for analysis steps using MCP_TIMEOUT.

Security considerations: run the server behind appropriate network controls if exposing it to untrusted networks. Only trusted clients should connect, and use transport options (like SSE) that fit your security requirements.

Available tools

Compare Binaries

Compare two binary files to assess similarity and identify changes between them.

Function Analysis

Provide a summary of similarity and a list of changed functions between the binaries.

Headless Operation

Run IDA Pro in headless mode with automation via IDAPython for fully automated analysis.