Bincat - Binary Code Static Analyser, With IDA Integration

ID KITPLOIT:5371219702487894522
Type kitploit
Reporter KitPloit
Modified 2019-02-05T12:39:10


BinCAT is a _ static _ Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA.
It features:

  • value analysis (registers and memory)
  • taint analysis
  • type reconstruction and propagation
  • backward and forward analysis
  • use-after-free and double-free detection

In action
You can check (an older version of) BinCAT in action here:

Quick FAQ
Supported host platforms:

  • IDA plugin: all, version 6.9 or later (BinCAT uses PyQt, not PySide)
  • analyzer (local or remote): Linux, Windows, macOS (maybe) Supported CPU for analysis (for now):

  • x86-32

  • ARMv7
  • ARMv8
  • PowerPC

Only IDA v6.9 or later (7 included) are supported

Binary distribution install (recommended)
The binary distribution includes everything needed:

  • the analyzer
  • the IDA plugin Install steps:

  • Extract the binary distribution of BinCAT (not the git repo)

  • In IDA, click on "File -> Script File..." menu (or type ALT-F7)
  • Select
  • BinCAT is now installed in your IDA user dir
  • Restart IDA

Manual installation

The analyzer can be used locally or through a Web service.
On Linux:

IDA Plugin

Using BinCAT

Quick start

  • Load the plugin by using the Ctrl-Shift-B shortcut, or using the Edit -> Plugins -> BinCAT menu

  • Go to the instruction where you want to start the analysis

  • Select the BinCAT Configuration pane, click <-- Current to define the start address

  • Launch the analysis

Global options can be configured through the Edit/BinCAT/Options menu.
Default config and options are stored in $IDAUSR/idabincat/conf .


  • "Use remote bincat": select if you are running docker in a Docker container
  • "Remote URL": http://localhost:5000 (or the URL of a remote BinCAT server)
  • "Autostart": autoload BinCAT at IDA startup
  • "Save to IDB": default state for the save to idb checkbox

A manual is provided and check here for a description of the configuration file format.
A tutorial is provided to help you try BinCAT's features.

Article and presentations about BinCAT

Download Bincat