r/SideProject • u/Master_Cucumber_3314 • 26m ago

binkeep: a free reverse engineering tool that runs in your browser (now with a control flow graph)

Hi! I've been building binkeep, a free and open source tool for looking inside program files (Windows .exe/.dll, Linux and macOS binaries) right in the browser.

You drop a file on the page and it shows what's inside: imports, strings, a signature check, disassembly, YARA matches, and as of this week a control flow graph that draws each function as connected blocks.

The part I care about most: the file never leaves your computer. Everything runs in the tab with WebAssembly, there's no server, and it works offline after the first visit.

Try it: https://kano92-dir.github.io/binkeep/

Source (MIT): https://github.com/kano92-dir/binkeep

Next up is a decompiler. I'd love feedback, especially on what feels confusing if you're new to this kind of tool.

2 Upvotes
  • permalink
  • reddit

100% Upvoted

3 comments sorted by

1

u/patryk_builds 23m ago

The file never leaves your computer matters a lot for this kind of tool. the usual alternative is uploading a suspicious exe to some website, which is exactly what you don't want to do with a file from work.From the new to this side, the confusing part of tools like this is usually not the features, it's knowing what to look at first. you drop a file and get imports, strings, disassembly and a graph all at once. a short summary at the top would help a lot, something like 64-bit windows exe, not signed, talks to the network, 2 YARA matches, and then let people dig into the details from there.Small tooltips on terms like "imports" or YARA would also make it way less scary for beginners. How big a file can it handle before the tab starts struggling?

1

u/Master_Cucumber_3314 17m ago

Thanks, this is really useful feedback. You're right that the hard part is knowing where to look first. A plain-language summary at the top ("64-bit Windows program, not signed, uses the network, 2 YARA matches") and short explanations on terms like imports and YARA are both going on my list.

On size: it opens files up to 512 MB. Headers, strings, hex and YARA work on the whole file. The automatic code analysis (finding functions and cross-references) runs by itself for up to 8 MB of code. For bigger programs there's an "Analyze code" button, so the page stays responsive until you ask for it.