Binary Ninja. Binary Ninja is a reverse-engineering platform developed by Vector 35 Inc. It allows users to disassemble a binary file and visualize the disassembly in both linear and graph-based views. The software performs automated, in-depth code analysis, generating information that helps to analyze a binary. It lifts assembly instructions into intermediate languages, generating decompiled code.  

Binary Ninja supports various CPU architectures and binary executable formats, and runs on Windows, macOS, and Linux. It also offers a free-to-use cloud version and a native commercial version.

History 
Originally developed as an internal tool for a CTF team, the developers later formed Vector 35 Inc. to turn Binary Ninja into a commercial product. Development began in 2015, and the first public version was released in July 2016. 

The commercial version was developed from scratch and does not share code with the original internal tool. The latter one is now open-sourced under the GPLv2 license.

Features and usage

User interface 
Binary Ninja's user interface is, built using Qt, comprises several components such as a symbol list, a cross-reference window, and disassembly views (both linear and graph-based), a mini-graph, and a feature map. It also includes tools like a hex editor, strings listing, and a triage view.    

Binary Ninja generates extensive annotations in the UI to assist binary analysis and also supports user-defined themes for customization.

API and plugins 
Binary Ninja offers an API that can be accessed via Python, C++, or Rust. The API is open-sourced under the MIT License. It can interact with most of Binary Ninja's functionality, including the user interface, analysis tools, and intermediate languages (see below). It can be used to add support for new architectures or to automate tasks, 

Plugins can be developed using the API to enhance Binary Ninja. Vector35 maintains a collection of official plugins, while the community has created numerous additional plugins.   

Some notable plugins include the debugger, and the signature kit.

Binary Ninja Intermediate Languages (BNIL) 
Binary Ninja offers three intermediate languages (ILs).  

 The low-level IL (LLIL) provides a detailed lifting of the underlying instructions from various architectures to a unified representation.
 The medium-level IL (MLIL) creates variables with types and abstracts away the notion of the stack.
 The high-level IL (HLIL, also known as the decompiler), offers a representation of the code that is similar to C source code.

Core analysis 
Binary Ninja automatically performs various analyses on the binary. Some examples are: 

 function detection 
 cross-references for code and data 
 type inference 
 constant propagation 
 value-set analysis 
 jump table resolution

Binary editing and patching, shellcode compiler (SCC) 
Binary Ninja offers binary patching and editing features. It can assemble an instruction at the current line, flip a conditional jump, etc. Edits and updated analysis are immediately reflected in the UI. 

Binary Ninja can be used as a general binary editor. It supports several commonly-used transformations and encryption algorithms. 

The shellcode compiler allows the user to compile and insert code via C syntax.

Supported architectures and executable file formats

Architectures 
Binary Ninja supports the following CPU architectures officially:

 x86 32-bit
 x86 64-bit
 ARMv7
 Thumb2
 ARMv8
 PowerPC
 MIPS
 RISC-V
 6502
 nanoMIPS
 TriCore

The support for these architectures vary and details can be found in the official FAQ. 

Community-authored plugins add support for various other architectures.

Executable file formats 
Binary Ninja supports the following executable file formats officially:

 PE/COFF
 ELF
 Mach-O
 .NES binary (via a plugin)
 Raw binary
 md1rom

See also 

 Ghidra
 JEB
 Radare2
 Interactive Disassembler
 Decompiler
 Disassembler

References 

Disassemblers