PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

BSIM explained once and for all!

blog.quarkslab.com | research | #reverse-engineering | #ghidra | #tooling | #program-analysis | #bsim | #binary-similarity
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab finally explains Ghidra's BSIM internals: functions are lifted to normalized P-code, hashed into feature vectors, and compared to find semantically equivalent functions.
Published
Collected

Related coverage

research · blog.quarkslab.com
SightHouse: Automated function identification
Quarkslab presents SightHouse, an open-source reverse-engineering tool that retrieves program metadata and identifies functions already known from other libraries, binaries or online source code.
research · volexity.com
Go Get ‘Em: Updates to Volexity Golang Tooling
# Go Get ‘Em: Updates to Volexity Golang Tooling August 11, 2025 Ivan Mladenov _This blog post was the final deliverable for asummer internship project, which was completed under the direction of...
tool · github.com
SuperGhidra: High-Performance Python Suite for Accelerated Ghidra Reverse Engineering
Drastically accelerates automated binary analysis and provides reliable mathematical verification for neural decompilers, bridging traditional reverse engineering with AI-driven workflows.
research · blog.quarkslab.com
A Nerd's Life: Weeks of Firmware Teardown to Prove We Were Right
Quarkslab follows up its smartwatch firmware extraction with weeks of reverse engineering through JieLi's firmware format, proving the device's vital-sign measurements cannot be trusted.
research · blog.quarkslab.com
Intego X9: Why your macOS antivirus should not trust PIDs
Part two of Quarkslab's Intego series: combining Ghidra static analysis with Frida tracing to show how a PID reuse race can bypass XPC authentication checks on privileged macOS services.
research · blog.quarkslab.com
Quokka: A Fast and Accurate Binary Exporter
Quarkslab open-sources Quokka, a binary exporter that extracts a program's disassembly for offline analysis, letting users write complex analyses without disassembler APIs.
Back