Binary Ninja

No entries match these filters. Clear filters

1. Debugger Conditional Breakpoints and the Expression Parser That Backs Them (2026-09-29) Sep 29, 2026 · issue 090

   Binary Ninja's debugger gains conditional breakpoints backed by a full expression parser with register magic values.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢ ⤢ ⤢
   └──▷ HOW TO FIND IT
   Stop only when rdi points to a specific argument value — useful for breaking on one call-site out of thousands without manual stepping.
   📍In the Breakpoints widget, right-click the breakpoint at the target address › 'Edit Condition...' › enter: rdi == rbp - 0x20
   Set a module-relative conditional breakpoint from the Python console so it survives ASLR and only fires when rax holds a specific return value.
   📍from binaryninja.debugger import ModuleNameAndOffset dbg.set_breakpoint_condition(ModuleNameAndOffset("myprogram", 0x1000), "rax == 0x1234")
   • Adds set_breakpoint_condition and get_breakpoint_condition on the debugger controller to set, read, and clear breakpoint conditions programmatically via the Python API.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds add_expression_parser_magic_value API so plugin authors can register custom runtime name-value pairs (e.g. heap chunk addresses, TLS slots) for use inside any expression.
   • Supports conditional breakpoints in the Breakpoints widget UI: right-click a breakpoint, select Edit Condition…, and enter any expression such as rax == 0x1234 or [rsp] == 0.
   • Extends the expression parser with comparison operators ==, !=, >, <, >=, <= that return 1 (true) or 0 (false), enabling arithmetic conditions across all contexts that use the parser.
   • Registers all CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. registers (rax, rbx, rsp, rbp, rip, etc.) and loaded module bases (kernel32, ntdll, libc, etc.) as magic values during a debug session, so they are usable directly in navigation and breakpoint expressions without a $ prefix.

   +3 more show less

   • Supports ModuleNameAndOffset as an address argument to set_breakpoint_condition, enabling module-relative conditional breakpoints that survive ASLR.
   • Expression parser supports memory dereference size suffixes [expr].b, [expr].w, [expr].d, [expr].q for byte, word, dword, and quadword reads, plus special values $here, $start, and $end.
   • Numbers in expressions default to hexadecimal; prefix 0n for decimal (e.g. 0n10) or 0 for octal.
   • Adds set_breakpoint_condition and get_breakpoint_condition on the debugger controller to set, read, and clear breakpoint conditions programmatically via the Python API.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds add_expression_parser_magic_value API so plugin authors can register custom runtime name-value pairs (e.g. heap chunk addresses, TLS slots) for use inside any expression.
   • Supports conditional breakpoints in the Breakpoints widget UI: right-click a breakpoint, select Edit Condition…, and enter any expression such as rax == 0x1234 or [rsp] == 0.
   • Registers all CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. registers (rax, rbx, rsp, rbp, rip, etc.) and loaded module bases (kernel32, ntdll, libc, etc.) as magic values during a debug session, so they are usable directly in navigation and breakpoint expressions without a $ prefix.
   • Supports ModuleNameAndOffset as an address argument to set_breakpoint_condition, enabling module-relative conditional breakpoints that survive ASLR.

   3 more in Everything

2. api-docs-1e831d52071f Sep 4, 2026 · issue 064

   Binary Ninja API adds LicenseAddon introspection and StatCollector bit-length histograms via get_stat_histograms.

   • Adds get_stat_histograms() to retrieve per-tag bit-length histograms collected by StatCollector instrumentation during analysis; returns a dictionary mapping tag names to {"total": int, "buckets": [int; 65]} where buckets[k] counts samples with bit_width == k for k in 0..64.
   • Adds LicenseAddon class exposing fields id, license_serial, product, created, created_timestamp, expiration, expiration_timestamp, and signature for inspecting verified add-ons attached to the active license.
   • Adds core_license_addons property returning a List[LicenseAddon] of all add-ons present in the current license file.

   3 details in Everything

3. 6.0.10601 Sep 3, 2026 · release notes

   Binary Ninja 6.0.10601 adds first-party MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server, pluggable Binary Similarity platform, and Free armv8 decompilation

   └──▷ TRY IT
   Start the headless MCP server for automated binary analysis workflows via stdio transport.
   copy

   $ binaryninja_mcp

   • Adds first-party MCP server with HTTP GUIGUIA graphical user interface, controls such as windows, buttons and menus. It lets people use software visually rather than entering commands. mode and headless binaryninja_mcp stdio server.
   • Adds pluggable binary comparison platform with BinDiff and WARP providers (Ultimate only).
   • Introduces armv8 (AArch64AArch64The 64-bit execution state of the ARM architecture, defined by Arm Ltd., offering a wider register file and cleaner instruction set than 32-bit ARM; cyber tools target it to run natively on ARM-based servers, phones, and embedded devices.) decompilation in the Free edition.
   • Adds Linux ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead. build support for the Free edition.
   • Adds AuthenticateWithToken API for Enterprise authentication with a token.

   5 details in Everything

4. Binary Ninja 6.0 (Krypton) (2026-09-03) Sep 3, 2026 · issue 064

   Binary Ninja 6.0 adds a first-party MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server, Binary Similarity diffing platform, TMS320C6xTMS320C6xA family of fixed- and floating-point DSPs from Texas Instruments, designed for high-throughput signal processing; cyber tools use it for hardware-accelerated packet inspection or signal analysis at the edge. arch, and up to 2× faster analysis.

   ⤢ ⤢ ⤢
   └──▷ HOW TO FIND IT
   Enable the MCP server on every launch so an LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. client (e.g. Claude Desktop) can always connect to your Binary Ninja session.
   📍In Binary Ninja, go to Settings, search for ui.mcp.enabled, and set it to true, then restart. Navigate to Plugins › MCP › Copy Connection Info to copy the URL and bearer token for your client config.
   Restrict MCP access to authorised clients only by requiring a bearer tokenbearer tokenA credential that grants access to whoever presents it, without a separate proof of possession. Protecting the token matters because a stolen copy can be used by someone else..
   📍In Binary Ninja Settings, search for ui.mcp.token and set it to a strong secret string. Clients must then include a matching Authorization: Bearer <token> header when connecting to http://127.0.0.1:24642/mcp.
   • Enables the built-in GUIGUIA graphical user interface, controls such as windows, buttons and menus. It lets people use software visually rather than entering commands. MCP server via the ui.mcp.enabled setting (restart required) or Plugins > MCP > Start Server; listens at http://127.0.0.1:24642/mcp by default.
   • Adds ui.mcp.token setting to require clients to send a matching bearer token for locking down MCP server access.
   • Provides Plugins > MCP > Copy Connection Info to copy the exact URL and authorization header for the active MCP session.
   • Ships a standalone binaryninja_mcp headless binary (stdio-based MCP server) for Commercial and Ultimate on macOS and Linux.
   • New Binary Similarity feature (Ultimate only) for comparing related binaries using pluggable providers — ships with Google BinDiff and WARP providers — with automatic annotation transfer between binaries.

   +12 more show less

   • Exposes Binary Similarity through Python, C++, and Rust APIs, enabling headless sessions and registration of custom providers and resolvers.
   • Adds TMS320C6x (DSP) architecture support, bringing Ultimate to 19 first-party architectures.
   • Supports multiple independent global pointer registers per architecture (e.g. TriCore's four global data region pointers), improving decompilation of such targets.
   • Adds AArch64AArch64The 64-bit execution state of the ARM architecture, defined by Arm Ltd., offering a wider register file and cleaner instruction set than 32-bit ARM; cyber tools target it to run natively on ARM-based servers, phones, and embedded devices. (ARMv8) architecture and MCP server to the free edition, plus a new Linux ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead. build of the free version.
   • Introduces a new BASE sampling mode (enabled by default) for faster automated base address detection, especially on large files; the previous IL Analysis Mode remains available for higher accuracy.
   • Adds HLIL_STRUCT_INITIALIZE IL operation for structure initializers in HLIL.
   • Refactored calling convention system now properly represents structure parameters and return values, with new Go and Pascal calling conventions added.
   • Upgrades the bundled Python to 3.13, now also included on Linux.
   • Replaces the Plugin Manager with a new Extension Manager UI.
   • Analysis runs up to 2.16× faster and uses up to 55% less peak memory versus 5.3 across representative binaries.
   • Adds a new user wizard to ease migration for new and upgrading users.
   • Ships a new Linux ARM64 package for the free edition.

   17 details in Everything

5. Binary Ninja 6.0 (Krypton) (2026-09-03) Sep 3, 2026 · issue 010

   Binary Ninja 6.0 adds a first-party MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server, Binary Similarity diffing platform, TMS320C6xTMS320C6xA family of fixed- and floating-point DSPs from Texas Instruments, designed for high-throughput signal processing; cyber tools use it for hardware-accelerated packet inspection or signal analysis at the edge. arch, and up to 2× faster analysis.

   ⤢ ⤢ ⤢
   └──▷ HOW TO FIND IT
   Enable the MCP server on every launch so an LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. client (e.g. Claude Desktop) can always connect to your Binary Ninja session.
   📍In Binary Ninja, go to Settings, search for ui.mcp.enabled, and set it to true, then restart. Navigate to Plugins › MCP › Copy Connection Info to copy the URL and bearer token for your client config.
   Restrict MCP access to authorised clients only by requiring a bearer tokenbearer tokenA credential that grants access to whoever presents it, without a separate proof of possession. Protecting the token matters because a stolen copy can be used by someone else..
   📍In Binary Ninja Settings, search for ui.mcp.token and set it to a strong secret string. Clients must then include a matching Authorization: Bearer <token> header when connecting to http://127.0.0.1:24642/mcp.
   • Enables the built-in GUIGUIA graphical user interface, controls such as windows, buttons and menus. It lets people use software visually rather than entering commands. MCP server via the ui.mcp.enabled setting (restart required) or Plugins > MCP > Start Server; listens at http://127.0.0.1:24642/mcp by default.
   • Adds ui.mcp.token setting to require clients to send a matching bearer token for locking down MCP server access.
   • Provides Plugins > MCP > Copy Connection Info to copy the exact URL and authorization header for the active MCP session.
   • Ships a standalone binaryninja_mcp headless binary (stdio-based MCP server) for Commercial and Ultimate on macOS and Linux.
   • New Binary Similarity feature (Ultimate only) for comparing related binaries using pluggable providers — ships with Google BinDiff and WARP providers — with automatic annotation transfer between binaries.

   +12 more show less

   • Exposes Binary Similarity through Python, C++, and Rust APIs, enabling headless sessions and registration of custom providers and resolvers.
   • Adds TMS320C6x (DSP) architecture support, bringing Ultimate to 19 first-party architectures.
   • Supports multiple independent global pointer registers per architecture (e.g. TriCore's four global data region pointers), improving decompilation of such targets.
   • Adds AArch64AArch64The 64-bit execution state of the ARM architecture, defined by Arm Ltd., offering a wider register file and cleaner instruction set than 32-bit ARM; cyber tools target it to run natively on ARM-based servers, phones, and embedded devices. (ARMv8) architecture and MCP server to the free edition, plus a new Linux ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead. build of the free version.
   • Introduces a new BASE sampling mode (enabled by default) for faster automated base address detection, especially on large files; the previous IL Analysis Mode remains available for higher accuracy.
   • Adds HLIL_STRUCT_INITIALIZE IL operation for structure initializers in HLIL.
   • Refactored calling convention system now properly represents structure parameters and return values, with new Go and Pascal calling conventions added.
   • Upgrades the bundled Python to 3.13, now also included on Linux.
   • Replaces the Plugin Manager with a new Extension Manager UI.
   • Analysis runs up to 2.16× faster and uses up to 55% less peak memory versus 5.3 across representative binaries.
   • Adds a new user wizard to ease migration for new and upgrading users.
   • Ships a new Linux ARM64 package for the free edition.

   17 details in Everything

6. 5.3.9434 Apr 13, 2026 · release notes

   Binary Ninja 5.3 introduces NDS32 decompilation, Enterprise Server V2, debugger hardware breakpoints, and Rust API extensions.

   • Adds NDS32 architecture support for decompilation
   • Adds support for Enterprise Server V2 collaboration backend
   • Adds hardware and conditional breakpoint support in the Debugger
   • Adds new debug adapters via Debugger: New Debug Adapters subsystem
   • Adds GetInstructionTextWithContext callback to architecture class API

   +9 more show less

   • Adds GetNamedTypeSource API to type libraries for retrieving source info
   • Adds Address_comments and tag APIs (tags_all_scopes, tag_types, tags_by_type) to the Rust BinaryViewExt API
   • Adds From<BnString> implementation for QualifiedName in Rust API to simplify conversions
   • Adds support for loading Ghidra 12.0 databases in the Ghidra importer
   • Adds Rebase to Remote Base action and debugger.autoRebase setting for manual rebasing
   • Adds module names to the debugger expression parser for address resolution
   • Adds TTD attach to running process support via the esReven adapter
   • Adds time range filter option for TTD code coverage analysis
   • Adds get_metadata() method to BinaryView, Function, and Project classes

   14 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The configuration key corePlugins.ghidraImport is renamed to corePlugins.ghidra
7. Binary Ninja 5.3 (Jotunheim) (2026-04-13) Apr 13, 2026 · release notes

   Binary Ninja 5.3 adds full function-level lifting APIs, NDS32/AArch64AArch64The 64-bit execution state of the ARM architecture, defined by Arm Ltd., offering a wider register file and cleaner instruction set than 32-bit ARM; cyber tools target it to run natively on ARM-based servers, phones, and embedded devices. ILP32 support, Ghidra export, and hardware breakpoints.

   └──▷ USE IT
   Generate a BNTL type library from a Windows DLLDLLA Windows file format containing compiled code and data that multiple programs can load and share at runtime, letting cyber tools inject functionality into other processes or hook system calls. for use in projects.
   shell copy

   ./bntl_cli create sqlite3.dll "windows-x86_64" ./headers/ ./output

   Set up automatic IDB loading for faster analysis by configuring the auto-load path.
   steps copy

   In 'Open with Options', set `analysis.idb.autoLoadFile` to your .idb path instead of using "Import Debug Info..."

   Create a hardware write breakpoint on address 0x1000 with a watch size of 4 bytes.
   steps copy

   Press F3 or go to Debugger > Add Hardware Breakpoint... and set Type to 'Write' and Size to '4 bytes'.

   • Adds bntl_cli command-line utility with create, dump, diff, and validate subcommands for generating and managing BNTL type libraries from binaries or directories
   • Adds new architecture APIs supporting standalone function-level lifting for architectures requiring single-threaded analysis (e.g., VMs like Java, Python bytecode, .NET)
   • Adds NDS32 architecture support in Ultimate edition, bringing the total to 18 officially supported architectures with full decompilation capabilities
   • Adds support for AArch64 ILP32 ABI, including a platform definition and updated function recognizer for ILP32 PLT entries
   • Adds Ghidra Export capability to generate .gzf files from Binary Ninja for importing into Ghidra with types, symbols, bookmarks, comments, and function starts preserved

   +10 more show less

   • Updates IDB Import to allow setting analysis.idb.autoLoadFile in Open with Options or using the Load IDB action post-load, replacing the deprecated "Import Debug Info From External File..."
   • Adds a streamlined Mach-O Architecture Picker UI dialog for fat binaries that shows slice sizes and allows setting defaults without navigating settings menus
   • Expands Container Browser supported formats to include AR, Bzip2, CPIO, DMG (compression only), FIT, IMG4/KernelCache, LZ4Frame, LZMA, Tar, TRX, UImage, Universal Mach-O, XZ, and Zstd
   • Adds bntl_cli --help and subcommand usage documentation for headless type library automation
   • Deprecates SigKit (re-enableable via analysis.signatureMatcher.autorun) in favor of WARP, bundling signatures for libc6, libgcc, and libstdc++ for x86, x86_64, aarch64, and armv7
   • Adds Hardware Breakpoints (F3 or Debugger menu) with watchpoint size options (1, 2, 4, 8 bytes) and types (HE/HR/HW/HA) to the Breakpoint Widget
   • Adds Conditional Breakpoints via right-click "Edit Condition..." supporting register names, arithmetic, comparisons, and memory dereferences in expressions like rax == 0x1234
   • Adds Windows Native Debug Adapter as the default debugger on Windows, offering performance improvements over the DbgEng-based adapter
   • Adds GDB MI Adapter for connecting to GDB-compatible targets via Machine Interface protocol, including support for TTD via Mozilla's rr (currently Linux-only)
   • Adds opt-in automatic crash reporting prompt upon first launch of 5.3

   15 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !SigKit is deprecated and scheduled for removal in the next release; re-enable with analysis.signatureMatcher.autorun if needed immediately.
   • !The "Import Debug Info From External File..." action is replaced by setting analysis.idb.autoLoadFile or using the Load IDB action.
8. Container Transforms: Working with Nested Binary Formats (2026-03-31) Mar 31, 2026 · release notes

   New Container Transforms system adds automatic detection and extraction for nested binary formats like firmware images and archives.

   └──▷ USE IT
   Programmatically unwrap nested archives to analyze the deepest file.
   python copy

   from binaryninja import TransformSession, load
   session = TransformSession("firmware.img4")
   session.process()
   def find_leaf(ctx):
       if ctx.is_leaf: return ctx
       return find_leaf(ctx.children[0])
   leaf = find_leaf(session.root_context)
   session.set_selected_contexts(leaf)
   with load(leaf.input) as bv:
       print(bv.file.virtual_path)

   • Adds automatic container resolution tree during file load via the Container Transform system
   • Adds detection-enabled transforms for IMG4, LZFSE, UImage, FIT, TRX, DMG, Universal (Fat Mach-O), CPIO, AR, CaRT and standard compression formats
   • Adds support for password-protected containers with automatic multi-password attempts via new UI Container Browser
   • Adds three new configuration keys in .binaryninja/settings.json: files.container.mode, files.container.autoOpen, files.container.defaultPasswords, files.container.excludedTransforms
   • Adds TransformContext API for navigating the extracted container tree with child_count, transform_name, is_leaf properties and children list

   +1 more show less

   • Adds TransformSession class with process() and set_selected_contexts() methods for programmatic container handling

   6 details in Everything

9. 5.2.8614 Nov 13, 2025 · release notes

   Binary Ninja 5.2 adds WARP plugin/server, Ghidra import, DWARF import, TTD support, bitfields, and new cross-refs UI

   • Adds the WARP plugin for networked collaboration and automatic downloading of project file dependencies
   • Adds Ghidra import functionality to load existing Ghidra projects directly into Binary Ninja
   • Adds DWARF import support to automatically load PDBPDBA debug symbol file format used by Microsoft's toolchain that maps compiled binaries back to source code, function names, and variable types, letting cyber tools resolve symbols during reverse engineering or memory analysis./DWARF info from sibling files in projects
   • Adds TTD (Time Travel Debugging) support with queries, analysis views, and TTD.Events API access
   • Adds named Bitfields visualization and editing capability for structure fields

   +5 more show less

   • Adds new Containers support for recognizing and visualizing standard library container types
   • Adds Custom Strings / Constants recognition and handling capabilities
   • Adds Hexagon architecture lifting and analysis support
   • Adds new Cross References UIs with enhanced filtering and display options
   • Adds Objective-C workflow improvements including Rust rewrite for better performance

   10 details in Everything

10. 5.1.8104 Aug 14, 2025 · release notes

    Binary Ninja 5.1.8104 adds Sidekick sidebar widget and improves WARP symbol handling

    • Adds a Sidekick sidebar widget that can be hidden by installing Sidekick or by right-clicking and choosing hide.
    • Improves WARP analysis by refining how symbols and comments are applied during scanning
    • Enhances stability by handling ELFELFThe standard binary format for executables, shared libraries, and object files on Linux and most Unix-like systems, giving cyber tools a predictable structure to parse, instrument, or analyze compiled code. files with no program headers

    3 details in Everything

11. 5.1.8005 Jul 24, 2025 · release notes

    Binary Ninja 5.1.8005 adds WARP, Pseudo Objective-C, custom flow control, and extensive Rust/Python APIs

    • Adds WARP analysis engine for faster binary analysis workflows
    • Adds Pseudo Objective-C view for analyzing dynamic dispatch in macOS/iOS binaries
    • Adds customizable control flow graph rendering options in the UI
    • Adds support for x86-64 x32 ABI architecture plugin
    • Adds MIPSMIPSA RISC processor architecture originally developed at Stanford and commercialized by MIPS Technologies, widely used in embedded and network devices; cyber tools target it to analyze or exploit routers, cameras, and similar hardware. R5900 architecture plugin support

    +53 more show less

    • Adds PPC-VLE architecture plugin support
    • Adds Native EFI Resolver workflow for firmware analysis
    • Adds sidebar hiding toggle in UI settings for expanded workspace
    • Adds ability to name segments via segment properties dialog
    • Adds constant-folding for double-precision multiplication in HLIL
    • Adds string wrapping and clamping options in analysis preferences
    • Adds Ternary Operator disassembly preference for cleaner output
    • Adds Guided Analysis Mode to streamline reverse engineering steps
    • Adds IL Rewriting capability for custom intermediate representation transformations
    • Adds Analyze Selected context menu item in the project browser
    • Adds length column to strings view for sorting by string size
    • Adds exact file size display option in project hierarchy panel
    • Adds Clear Recently Opened context menu option in the recents list
    • Adds support for wide UTF-16 strings in big endian format
    • Adds variable placement information display in variables view
    • Adds enhanced memory map segment creation usability features
    • Adds string sorting by length and reference count options
    • Adds debugger support for registers and variables wider than 64 bits
    • Adds ability to load Linux/macOS coredumps in the debugger
    • Adds forked process support in LLDB debugger adapter
    • Adds Override IP action in debugger context menu
    • Adds toggle breakpoint button in debugger control widget
    • Adds support for running extra commands during LLDB launch
    • Adds CheckBoxField for form inputs in Python API
    • Adds hierarchical settings inheritance for resource settings API
    • Adds line formatter API to Rust bindings
    • Adds per-function metadata storage capability via API
    • Adds plugin command registration for project browser via API
    • Adds SSA form support for LLIL in Rust API
    • Adds Rust language representation support for custom languages
    • Adds SectionBuilder construction from Section in Rust API
    • Adds CoreRegister name to Debug implementation in Rust
    • Adds documentation comments for undo actions in Rust API
    • Adds FileAccessor with read/write functionality in Rust API
    • Adds FlowGraphEdge type and node edge accessors in Rust API
    • Adds Function::variable_type method in Rust API
    • Adds get_files_by_path_in_project() and get_path_in_project() methods to Python API
    • Adds get_system_cache_directory() function to Python API
    • Adds GetPathInProject() to core C++ API for project path resolution
    • Adds GetSystemCacheDirectory() function to C++ API
    • Adds interaction handlers to flow graph API in Rust
    • Adds full interaction APIs implementation for Rust API
    • Adds LLIL_SEPARATE_PARAM_LIST_SSA support in Rust API
    • Adds LLIL_UNDEF mapping support in Rust API
    • Adds LowLevelILInstruction::basic_block method in Rust API
    • Adds pretty printing for LLIL sub-expressions in Rust
    • Adds support for LLIL_REG_PHI, LLIL_MEM_PHI, and LLIL_FLAG_PHI expressions in Rust
    • Adds DWARF symbol support for PE executables produced by mingw
    • Adds parsing support for __init_offsets in MachoView binaries
    • Adds Objective-C constant sections support including arrays, dictionaries, and integers
    • Adds explicit references from Objective-C selectors to method implementations
    • Adds support for TEATEATiny Encryption Algorithm, a symmetric block cipher designed by Wheeler and Needham in 1994, valued for its minimal code footprint and simplicity, making it attractive for embedded or constrained environments. (Tiny Encryption Algorithm) transformation
    • Adds support for additional transformations: SUB, ADD, MUL, and ROL

    58 details in Everything

12. 5.0.7486 May 23, 2025 · release notes

    Binary Ninja 5.0.7486 adds RTTI improvements, Stack Render Layer to Free edition, and Linux IME support.

    • RTTI processing improves support for volatile typedefs, cv qualifiers, NTR types, GCC type names with leading *, and Itanium RTTI demangling.
    • DWARF importer changes how eh_frame/debug_frame are loaded from base vs debug bv files.

    2 details in Everything

13. 5.0.7290 Apr 23, 2025 · release notes

    Binary Ninja 5.0.7290 adds Kernel Cache and Firmware Ninja support, SVD/IHEX loaders, C-Sky/MIPS3 architectures, array/struct propagation, and render layers.

    • Firmware Ninja feature added (Ultimate only) for firmware analysis workflows
    • Kernel Cache Support enables loading and analyzing kernel cache files directly
    • SVD Loader adds support for System View Description files for peripheral inspection
    • IHEX/TI-TXT/SREC Loader allows importing Intel HEX, TI-TXT, and SREC formatted binaries
    • Render Layers UI feature for visualizing distinct analysis layers over the binary

    +6 more show less

    • Array and Structure Detection and Propagation automatically identifies and propagates array/structure types across functions
    • Union Support in type system for defining union data structures
    • Itanium RTTI support for correct interpretation of C++ runtime type information
    • MIPS3, M-CORE, and C-Sky v1 architecture support added to the core engine
    • Shellcode Compiler Open Sourced allows compilation of shellcode using the built-in compiler capabilities
    • Add setting to disable automatic analysis updates after Python commands

    11 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Deprecated DockHandler and DockWidget UI APIs removed; plugins using these will fail to load
14. 4.2.6455 Nov 20, 2024 · release notes

    Binary Ninja 4.2.6455 adds WARP alpha, MSP430 architecture, new APIs for mapped files and type propagation, plus more UI analysis features

    • Adds WARP: Advanced Function Matching Algorithm Alpha for advanced function matching
    • Adds DLYD shared cache support in Alpha status
    • Adds MSP430 architecture support for lifting and analysis
    • Adds import capability for IDA databases via the Import analysis from IDA databases feature
    • Adds ability to set the Global Pointer Value during analysis

    +10 more show less

    • Adds recognition of TerminateProcess as a no-return call
    • Adds NTDLL type libraries for improved platform support
    • Adds MSVC Run-Time Type Information Extraction capability
    • Adds support for DWARF data compressed with zstd
    • Adds ability to create new mapped files via the New Mapped Data file action and FileContext::newMappedFile API
    • Adds forward type propagation capabilities accessible via FlowGraphWidget/LinearView::forwardPropagateType API
    • Adds new Debugger Info sidebar widget for instruction information
    • Adds new settings to control transient scrollbars via the transientScrollbars config key
    • Adds Python console fuzzy completion (disabled by default)
    • Adds high contrast theme to the Free edition for accessibility

    15 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Deprecated APIs Segment::SetLength, Segment::SetDataOffset, Segment::SetDataLength, and Segment::SetFlags are removed
    • !Deprecated functions undefineName, undefineFunc, and undefineVariable are removed from the API
15. 4.1.5902 Aug 16, 2024 · release notes

    Binary Ninja 4.1.5902 adds GNU DWARF extension support, DWARF supplementary file handling, and conflict splitting APIs for collaboration.

    • Feature: Support for GNU DWARF extensions enables analysis of binaries using GNU-specific DWARF attributes.
    • Feature: Add support for DWARF supplementary files allows the tool to read separate DWARF debug info files.
    • Feature: Expose ConflictSplitter APIs for extensible collaboration merge conflict handling exposes new APIs for plugin-based merge conflict resolution.

    3 details in Everything

16. 4.1.5747 Jul 17, 2024 · release notes

    Binary Ninja 4.1 adds Time-Travel Debugging, BASE scan engine, new debugger APIs, and History Sidebar.

    • Adds Time-Travel Debugging (TTD) support with reverse go/step buttons in the debugger sidebar
    • Introduces Binary Ninja Base Address Scan Engine (BASE) for automated base address detection
    • Adds New History Sidebar widget to view and navigate previous analysis states
    • Adds MemoryMap API integration to debugger for reliable memory region representation
    • Adds support for Objective-C Categories and 'Lazy Classes' with automatic processing

    +13 more show less

    • Adds automatic recognition of TEB in user mode Windows binaries
    • Adds support for downloading symbols through debuginfod
    • Adds BNCustomPlatform API to allow specification of type parser arguments
    • Adds BaseAddressDetection API entry point
    • Adds Platform::GetGlobalRegsiters & Platform::GetGlobalRegisterType new platform APIs
    • Adds BinaryView::AddToEntryFunctions and BinaryView::GetAllEntryFunctions APIs
    • Adds ILIsCFGProtected attribute on CFGCFGControl Flow Graph — a directed graph representing all paths execution can take through a program, used by analysis tools to reason about reachability, dead code, and vulnerability patterns without running the code. and XFG Calls in Windows binaries
    • Adds get_expr, copy_expr, raw_operands, get_expr_count Python APIs for expression manipulation
    • Adds Python methods for getting/setting default calling convention
    • Adds uiSelectionAction setting type for file picker or action triggers
    • Adds additional notification dispatcher APIs in the Python API
    • Adds BinaryReader.TryReadPointer method
    • Adds BinaryDataNotifications for undo actions in the API

    18 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The loader.architecture API property is deprecated in favor of loader.platform.
    • !Support for Ubuntu 20.04 has been dropped; only 22.04 and 24.04 are supported.
    • !Support for Python 3.8 has been dropped; Python 3.9 is now the minimum supported version.
17. 4.0.4958 Mar 15, 2024 · release notes

    Binary Ninja 4.0.4958 improves the Type Parser by allowing users to specify default arguments for better type analysis control.

18. 4.0.4911 Feb 28, 2024 · release notes

    Binary Ninja 4.0.4911 adds RISC-V and Windows Kernel support, Type Archives, Python/Rust APIs, and UI overhauls.

    • Adds --no-validate-tls flag on Enterprise Server to bypass TLS certificate validation during server connections
    • Adds Projects subsystem for Commercial/Enterprise users enabling file uploads, offline project usage, and local-to-server import
    • Adds support for opening dSYM debug files in Analysis view
    • Adds support for Windows Kernel debugging (local and remote) via the Debugger feature
    • Adds new RISC-V architecture support with ELFELFThe standard binary format for executables, shared libraries, and object files on Linux and most Unix-like systems, giving cyber tools a predictable structure to parse, instrument, or analyze compiled code. Machine Type registration and Linux Kernel relocations

    +8 more show less

    • Adds nanoMIPS paid architecture support
    • Adds Type Archive APIs (BinaryView.metadata, TypeLibrary.metadata) to manage type repositories
    • Adds NotificationBarrier API for high-performance notifications in Python/Rust plugins
    • Adds Traversal API for iterating IL expression trees in Python/Rust
    • Adds support for Components in DebugInfo API and LLIL/MLIL SEPARATE_PARAM_LIST_SSA/SHARED_PARAM_SLOT_SSA instruction flags
    • Adds new Symbol Browser with folder support and tokenized search capabilities
    • Adds Types Browser with support for editing structure members and displaying Type/Size/Offset in tooltips
    • Adds Merge Variables dialog with recommended merges and Add Merge Variables Here action

    13 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Increased minimum required version of docker-compose to 2.0 for Enterprise Servers
19. 3.5.4526 Sep 15, 2023 · release notes

    Binary Ninja 3.5.4526 adds TTD debugging, UEFIUEFIA firmware specification maintained by the UEFI Forum that replaces legacy BIOS, defining how an OS and hardware initialize at boot. Cyber tools target or hook it to inspect pre-OS execution environments. support, MLIL Deoptimization and several new APIs/UI settings.

    • MH_FILESET binary format is no longer experimental
    • UI Updates: New setting ui.view.common.commentWidth controls line-wrapping comments
    • UI Updates: Hotkey N names an enumeration member at its use site
    • API: BinaryReader gets new ReadPointerAPI for reading pointers
    • API: New AnalysisContext API available for plugin developers

    +3 more show less

    • API: BinaryView gains undoable_transaction() method for exception-safe undo operations
    • Architectures: Automatic detection of MIPS64 in ELFELFThe standard binary format for executables, shared libraries, and object files on Linux and most Unix-like systems, giving cyber tools a predictable structure to parse, instrument, or analyze compiled code. files
    • Debugger: DbgEng adapter supports Time-Travel Debugging (TTD)

    8 details in Everything

20. 3.4.4271 May 3, 2023 · release notes

    Binary Ninja 3.4 adds C++ inheritance support, debugger safe mode, S3 Enterprise storage, and new Python APIs for types and constant data.

    • Adds support for C++ multiple inheritance to the type system
    • Adds safe_mode flag to Debugger that prohibits launching any file
    • Enterprise server storage now uses an S3-compatibleS3-compatibleAn object-storage API that mirrors Amazon S3's HTTP interface, so any client or cyber tool written for AWS S3 works unchanged against any compliant storage backend. object store instead of local filesystem
    • Adds --latest-only flag to the client_updates download management interface command
    • Adds preliminary support for Podman deployments in Enterprise

    +12 more show less

    • Adds support for turning off server TLS in Enterprise (still requires encryption via proxy)
    • Adds dump_type_library_to_json APIs for dumping Type Libraries to JSON
    • Adds IsConstantData API on the C++ RegisterValue class
    • Adds __bool__ implementations for BinaryView, Segment, and Section classes in the Python API
    • Adds MetadataChoiceDialog in the Python API
    • Adds new APIs for handling Constant Data Expressions
    • Sets __version__ property of the python API
    • Adds new API for getting/setting application font
    • Data Variables can now be added to Components
    • Adds new visit methods on IL instructions
    • Adds many new APIs for handling derived structures
    • Removes Legacy BNDB Merge Tool

    17 details in Everything

21. 3.3.3996 Jan 18, 2023 · release notes

    Binary Ninja 3.3.3996 adds SEH detection, debugger thread control, named enterprise snapshots, SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. support, and new APIs.

    • Adds automatic detection of SEH Prolog and Epilog functions
    • Adds setting to allow hiding type casts in decompiler output
    • Adds the debugger.aggressiveAnalysisUpdate config key to control binary view modification marking
    • Adds ability to override the current instruction pointer during debugging sessions
    • Adds SAML authentication support for Enterprise server access

    +7 more show less

    • Adds Named Snapshots feature in Enterprise environment
    • Adds Docker images for hosting the Enterprise server on ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. systems
    • Adds C++ TypeLibrary APIs, MetadataChoiceDialog, BinaryView::GetDependencySortedTypes, TypePrinter::PrintAllTypes, Type::IsVolatile, MLIL/HLIL replace_expr, Function.inline_during_analysis, Snapshot::SetName, and EnterpriseServer::IsFloatingLicense.
    • Adds support for Virtual Thunks in the MS demangler
    • Adds objective-c analysis improvements that create types for classes and define their ivars
    • Improves Mach-O Chained Fixup handling and fixes processing in binaries with split segments.
    • Adds ability to show stack traces in the stack frame widget during debugging

    12 details in Everything

22. 3.2.3814 Oct 28, 2022 · release notes

    Binary Ninja 3.2.3814 adds remote debugger support, new APIs for variable merging and offset pointers, and enterprise license flexibility.

    • Adds run_script action and menu item to execute Python scripts from the UI
    • Adds "Restart and Reopen Files" command to restore window layout on reopen
    • Adds support for remote Windows/macOS/Linux debugging via the Debugger feature
    • Adds basic support for iOS/Android remote debugging in the Debugger
    • Adds new API Merge and split variables for programmatic IL manipulation

    +10 more show less

    • Adds new API Variable liveness API to determine soundness of merging/splitting variables
    • Adds new API Get and set offset pointers to manipulate pointer offsets
    • Adds new API Get and delete for DebugInfo API for managing debug information
    • Adds new API Function.get_variable_by_name to retrieve variables by name
    • Adds new API Function.caller_sites to identify where a function is called from
    • Adds new API Notifications for Segment/Section Added/Updated/Removed for lifecycle events
    • Adds experimental option keep_dead_code_branches to preserve dead code in analysis
    • Adds setting to disable pure function call elimination during analysis
    • Adds recognition of thiscall and fastcall conventions on Win32 x86
    • Adds Named and computer licenses capability for Enterprise deployments

    15 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Deprecation of BinaryViewTypeArchitectureConstant API
    • !Deprecation of BNLogRegisterLoggerCallback API
23. 3.1.3469 May 31, 2022 · release notes

    Binary Ninja 3.1.3469 adds native debugger, Enterprise LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory./SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. and Webhooks, Python 3.10 API support, and multithreading.

    • Adds Native Debugger for local debugging workflows
    • Adds LDAP as a Single Sign-On (SSO) source in the Enterprise module
    • Adds Webhook support in Enterprise for external integration with chat services
    • Exposes HighLevelILFunction::GenerateSSAForm in the API.
    • Enables multithreading in the Non-Commercial version of Binary Ninja

    +1 more show less

    • Adds Clang Type Parser for improved type handling

    6 details in Everything

24. 3.0.3233 Jan 27, 2022 · release notes

    Binary Ninja 3.0.3233 adds Pseudo-C, Stack/Variable views, BN_USER_DIR env var, and major UI refactors.

    • Pseudo C view for decompiled code analysis
    • Stack View to inspect stack frames and variables
    • Variable View for detailed variable tracking across instructions
    • Workflows feature for automating analysis tasks
    • M1 Native support via arm64 architecture updates

    +4 more show less

    • New DebugInfo API allowing third-party plugins to inject symbols/types pre-analysis
    • TypedDataAccessor replaces StructuredDataView for structured data access in Python APIs
    • Access to IL variables from Python via new liveness API and variable separation (.vars, .aliased_vars)
    • BN_USER_DIRECTORY environment variable to switch plugin, settings, and theme sets

    9 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !StructuredDataView is removed; use TypedDataAccessor instead in Python plugins
    • !DeleteAutoVariable family of APIs is removed
25. 2.4.2846 Jun 3, 2021 · release notes

    Binary Ninja 2.4.2846 adds hex theme colors, configurable fonts, persistent search, and Python API setters for function parameters

    • Adds ui.font.app setting to configure the application font directly from settings
    • Adds ui.view.graph.padding setting to control graph padding in flow graphs
    • Adds user_directory() API function to retrieve the user directory path
    • Adds setters for Function.parameter_vars in the Python API
    • Adds hex string support for theme colors via the theme configuration file

    +1 more show less

    • Enables persistent search and search enhancements across the UI

    6 details in Everything

26. 2.3.2660 Feb 25, 2021 · release notes

    Binary Ninja 2.3.2660 adds Reflection View, new APIs, and M1 support

    • Adds Reflection View for synchronized IL/IL or IL/ASMASMAttack Surface Management: the continuous practice of discovering, inventorying, and monitoring an organization's externally exposed assets so that cyber tools can flag unknown or misconfigured entry points before attackers find them. comparison with robust view switching.
    • Adds FlowGraph API to highlight related instructions in the decompiler.
    • Adds UIContext::NotifyOnAddressChange API for address change notifications.
    • Adds DockHandler::notifyOffset and viewLocation to DockWidget for IL navigation tracking.
    • Adds new project settings APIs allowing creation of settings scoped to multiple files rather than global or per-BNDB.

    +3 more show less

    • Adds new options in HLIL for displaying scope including braces.
    • Adds ui.scripting.historySize, ui.log.maxSize, files.pic.autoRebase, ui.window.title.showPath, ui.fileContentsLock, and ui.style.hlil.scoping to new settings.
    • Adds initial support for M1 Apple Silicon architecture.

    8 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Python 2.x is no longer supported; scripts must use Python 3.
27. 2.2.2487 Oct 22, 2020 · release notes

    Binary Ninja 2.2.2487 adds linear-view enhancements, type libraries, CoreDownload, and C/C++ API documentation.

    • Custom flowgraph edge styles feature for graph visualization customization
    • Adds UI context notifications.
    • Display As for data in linear view allows overriding type display format
    • Added getThemeColor function to Python API for theme color queries
    • Added disable_default_log function to Python API to suppress default logging

    +9 more show less

    • Adds a CoreDownload provider independent of Qt and Python dependencies.
    • save with options feature in BNDB save dialog allowing granular control over database persistence
    • Setting to automatically simplify C++ templates during analysis
    • Support for Windows types from advapi32.dll, kernel32.dll, kernelbase.dll, and user32.dll in type libraries
    • New syscall type libraries for linux_thumb2eb, linux_ppc32, linux_armv7, linux_mipsel, linux_mips, linux_thumb2, linux_x86, linux_ppc32_le, linux_aarch64, linux_armv7eb, and linux_x86_64 architectures
    • Type Libraries from Windows now support ordinals with full ordinal sets for x86 and x86_64
    • Python scripting console supports reverse search via CMD/CTRL + R
    • Variable and field names can be edited directly by double clicking in the UI
    • Comments can be edited by double clicking in the Linear HLIL view

    14 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Last stable version with Python 2.x support; future versions will remove Python 2 compatibility
28. 2.1.2263 Jul 10, 2020 · release notes

    Binary Ninja 2.1.2263 adds BNDB differential snapshots, tag-based settings search, and Python 3 default.

    • Adds support for differential snapshots in BNDB files to reduce growth
    • Adds tag-based search filter to SettingsView (e.g., @default, @modified)

    2 details in Everything

29. 2.0.2166 May 20, 2020 · release notes

    Binary Ninja 2.0.2166 adds HLIL decompiler, Merge Tool, Python 3 API, and new cross-reference system

    └──▷ USE IT
    Programmatically parse raw ELFELFThe standard binary format for executables, shared libraries, and object files on Linux and most Unix-like systems, giving cyber tools a predictable structure to parse, instrument, or analyze compiled code. data without full analysis for faster load times.
    python copy

    bv = binaryninja.BinaryViewType['elf'].parse(data)

    Use the new Merge Tool to combine analysis results from different scans of the same binary.
    📍Navigate to Tools › Collaboration › Merge Tool (beta) in the GUI.
    • HLIL decompiler is now the default linear view, exposing IL across all versions via API and UI.
    • New Merge Tool (Tools/Collaboration/Merge Tool) enables basic merging of analysis for the same binary.
    • Defaults to Python 3 when installed on some platforms and adds parse-only BinaryView creation via BinaryViewType['elf'].parse(data).
    • Overhauls cross-reference panes and workflows; linear views also gain multi-select and copy.
    • Plugin Manager now verifies minimumVersion requirements for installed plugins.

    5 details in Everything

30. 1.3.2015 Feb 3, 2020 · release notes

    New UI config key for dockable window title bars and auto-update of license expiration.

    • ui.docks.titleBars setting added to hide title bars on dockable windows
    • License expiration in existing files is automatically updated upon renewal via the upater

    2 details in Everything

31. 1.2.1904 Oct 1, 2019 · release notes

    Binary Ninja 1.2.1904 adds Tags/Bookmarks, Type Library System, Plugin Manager, and ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. BE8 support

    • Adds Tags/Bookmarks System for organizing analysis state
    • Adds Type Library System and Type Libraries for sharing type definitions
    • Adds Plugin Manager for discovering and installing plugins
    • Brings Analysis Caching to Personal edition
    • Enhances Settings System with more granular control

    +22 more show less

    • Adds Open with options for flexible file loading
    • Enables more customized raw binary loading
    • Implements Automatic architecture detection
    • Adds Fat Mach-O support in File Format handling
    • Adds Mach-O ProcessFunctionStarts option
    • Enables Rebasing on file load for common formats and raw binaries
    • Adds User-defined cross-references for custom graph edges
    • Adds Outgoing cross-references view
    • Supports Large databases with improved scaling
    • Implements Heuristic branch-table clamping for better disassembly
    • Adds new commands to the command palette
    • Adds Goto/Type Dialog auto-completions and expression parser
    • Replaces function list with new Symbols View
    • Adds Python console tab completion
    • Adds FeatureMap File-Backed Only Mode
    • Improves Type Creation/Modification Experience
    • Upgrades Reports to use QWebEngineVew
    • Enables Show forward and backward cross references in UI
    • Adds Keyboard navigation and selection in Linear View
    • Adds Address based comments in Linear View
    • Adds Support for ARM BE8 architecture
    • Opens PowerPC architectures source code

    27 details in Everything

32. 1.1.1689 May 28, 2019 · release notes

    Binary Ninja 1.1.1689 adds UI plugins, Triage View, control flow analysis modes, and key binding editor.

    • Added support for UI Plugins, enabling third-party extensions to the interface
    • Adds Triage View.
    • Added basic and control flow only analysis modes
    • Added key binding editor for customizing shortcuts
    • Added post-dominator API for basic blocks

    5 details in Everything

33. 1.1.1555 Mar 19, 2019 · release notes

    Binary Ninja 1.1.1555 adds dockable panels, Hex String search, and APIs for disassembly text and data references.

    • Add API for constructing disassembly text with annotations and comments enables programmatic generation of annotated disassembly output.
    • Add get_data_refs_from API allows scripts to query data references from a specific address programmatically.

    2 details in Everything

34. 1.1.1470 Jan 18, 2019 · release notes

    Binary Ninja 1.1.1470 adds command palette, keybindings, PE/AArch64AArch64The 64-bit execution state of the ARM architecture, defined by Arm Ltd., offering a wider register file and cleaner instruction set than 32-bit ARM; cyber tools target it to run natively on ARM-based servers, phones, and embedded devices. analysis features, and advanced settings UI.

    └──▷ HOW TO FIND IT
    Open the command palette to quickly access commands without navigating menus.
    📍Press Ctrl+P (or Command+P on macOS)
    Access the advanced settings UI to customize analysis behaviors and Python runtime selection.
    📍Press Ctrl+. (or Command+. on macOS)
    • Adds Ctrl+P / Command+P command palette for keyboard access to all commands
    • Adds custom keybinding support
    • Adds new advanced settings UI accessible via Ctrl+. or Command+.
    • Adds relocation support for binary analysis
    • Adds AArch64 pointer authentication instruction support

    +8 more show less

    • Adds Linux kernel module (.ko) and ELFELFThe standard binary format for executables, shared libraries, and object files on Linux and most Unix-like systems, giving cyber tools a predictable structure to parse, instrument, or analyze compiled code. object file support
    • Adds data renderer API for custom rendering of types in linear view
    • Adds symbol namespaces for internal and external symbols with the same name
    • Enables IL views highlighting
    • Adds full text searching capability
    • Allows plugins to group register menu items in a sub-menu
    • Updates PE parser and analysis capabilities
    • Improves SCC support for AArch64 target

    13 details in Everything

35. 1.1.1339 Sep 27, 2018 · release notes

    Binary Ninja 1.1.1339 adds FlowGraph API, stack resolution graph UI, and Python 3 support.

    • New FlowGraph API allows custom flow graph reports
    • Support for Python 3 (Beta)
    • Linear sweep now runs automatically (more functions found by default)
    • Added ability to open binary w/o running linear sweep

    4 details in Everything

36. 1.1.1259 Jul 10, 2018 · release notes

    Binary Ninja 1.1.1259 adds LLIL/MLIL plugin commands, MLIL SSA liveness API, user-defined themes and proxy support

    • Adds Add plugin commands for LLIL and MLIL to allow scripting analysis of Low-Level IL and Medium-Level IL
    • Adds Add SSA variable liveness API for MLIL to expose dataflow analysis results programmatically
    • Adds Support for user-defined themes to customize the GUIGUIA graphical user interface, controls such as windows, buttons and menus. It lets people use software visually rather than entering commands. appearance via configuration
    • Adds Added support for network proxies to route tool traffic through proxy servers
    • Adds support for user specified python interpreter on all platforms to allow custom Python environments

    5 details in Everything

37. 1.1.1142 Mar 23, 2018 · release notes

    Binary Ninja 1.1.1142 adds IL-based register stacks, PPC patching, and significant performance improvements.

    • Adds support for analysis limits to control which functions are analyzed
    • Adds APIs for specifying stack adjustments made by call instructions.
    • Enables patching and assembling in PPC architecture plugins

    3 details in Everything

38. 1.1.1036 Jan 10, 2018 · release notes

    Binary Ninja 1.1.1036 adds relocatable attribute and MediumLevelIL recognizer for improved analysis.

    • Added relocatable attribute to binary views for better string detection
    • Added MediumLevelIL function recognizer to improve PLT entry detection
    • Added instruction alignment API for architectures to improve linear sweep results

    3 details in Everything

39. 1.1.989 Nov 7, 2017 · release notes

    Binary Ninja 1.1.989 adds Mach-O variant support, jump table arrays, and value query hover hints in graph views

    • Added support for Mach-O variants (Dyld, core, object)
    • Added jump table arrays for all detected jump tables
    • Added possible value query results on hover in all graph views

    3 details in Everything

40. 1.1.922 Sep 1, 2017 · release notes

    Binary Ninja 1.1.922 adds type propagation, linear sweep tool, PowerPC/MIPSMIPSA RISC processor architecture originally developed at Stanford and commercialized by MIPS Technologies, widely used in embedded and network devices; cyber tools target it to analyze or exploit routers, cameras, and similar hardware. global pointer support, and settings.json migration.

    └──▷ HOW TO FIND IT
    Run Linear Sweep analysis from the Tools menu.
    📍Tools › Linear Sweep
    • Adds Linear Sweep as a new tool in the Tools menu (beta)
    • Adds PowerPC architecture support (beta)
    • Allows different uses of variables sharing the same storage to have different names and types.
    • Shows structure field access when accessing a structure through a pointer
    • Supports global pointer usage in MIPS and x86 architectures

    +13 more show less

    • Adds limited support for stdcall on Windows binaries
    • Enables automatic calling convention detection
    • Propagates parameter types and names to their usage in the function
    • Supports binaries that directly access IAT or GOT entries
    • Implements interprocedural constant propagation of return values
    • Significantly improves jump table detection with improved data flow analysis
    • Adds automatic download and use of PDBs for Windows binaries (beta)
    • Refactors C++ IL access APIs to match the Python API style
    • Adds ability to store persistent metadata in the database
    • Shows types in Medium Level IL view
    • Associates confidence levels with types throughout analysis
    • Stores many settings in settings.json inside the user directory instead of QSettings.
    • Provides examples for accessing IL from C++ and wrapping existing architecture

    18 details in Everything

41. 1.0.776 Jun 26, 2017 · release notes

    1.0.776 adds Medium Level IL with SSA form, beta Structure/Type Editor, cross-platform PDBPDBA debug symbol file format used by Microsoft's toolchain that maps compiled binaries back to source code, function names, and variable types, letting cyber tools resolve symbols during reverse engineering or memory analysis. imports, and a Repository Manager.

    • Medium Level IL unifies stack and register variables
    • SSA form for IL exposes implicit data flow information to plugins
    • Data flow analysis now operates on SSA form for improved accuracy
    • Introduces Repository manager for community plugins (no UI yet)

    4 details in Everything

42. 1.0.318 Dec 2, 2016 · release notes

    Binary Ninja 1.0.318 adds THUMB2 disassembly, GNU3 demangling, and plugin module loading.

    • Adds THUMB2 instruction support for ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. disassembly
    • Adds cross-platform GNU3 name demangling for C++ symbols
    • Enables loading plugins as Python modules from the plugins directory
    • Shows segments and sections in the linear view
    • Collapses unallocated memory regions in hex and linear views

    5 details in Everything