McGill-DMaS/Kam1n0-Community
FreeThe Kam1n0 Assembly Analysis Platform
FreeFree tier
About McGill-DMaS/Kam1n0-Community
Kam1n0 v2.x is a scalable assembly management and analysis platform developed by the Data Mining and Security Lab at McGill University. It enables users to index large collections of binaries into repositories and provides analytic services such as clone search and executable classification. The platform supports multi-tenancy through Application instances, each with its own exclusive repository and specialized service. It currently offers three clone-search application types: Asm-Clone (subgraph clone search), Sym1n0, and Asm2Vec, plus Asm2Vec-based executable classification. Kam1n0 won second prize at the Hex-Rays Plug-In Contest 2015 and is available as open source on GitHub.
Key Features
Scalable indexing of large binary collections into repositories
Multi-tenancy with isolated Application instances and exclusive repositories
Three clone search types: Asm-Clone, Sym1n0, Asm2Vec
Asm2Vec-based executable classification
Subgraph clone search for assembly functions (1.3s avg query time, 2.3M functions)
Support for Meta-PC, ARM, PowerPC, and TMS320c6 architectures (Asm-Clone)
Application-level access control (read-write, on-off status) by owner
Concurrent serving of applications via shared resource pools
Pros & Cons
Pros
- Open source and free with no licensing costs
- Scalable to large binary collections with efficient indexing and querying
- Supports multiple architectures and application types
- Good interpretability of results (subgraph breakdown) for Asm-Clone
- Active academic backing with published research and contest recognition
Cons
- Asm-Clone is relatively sensitive to instruction set changes, optimizations, and obfuscation
- Requires pre-defined assembly syntax for certain application types
- Limited to assembly-level analysis; no source-level support
- Documentation and community support may be less extensive than commercial tools
Best For
Binary clone detection for reverse engineeringIdentifying code reuse or patched functions across different binary versionsAssembly function classification and similarity analysisMalware variant analysis through clone searchAcademic research on binary code analysis and obfuscation resilience
FAQ
What types of clone search does Kam1n0 support?
Kam1n0 v2.x supports three clone-search application types: Asm-Clone (subgraph clone search for assembly functions), Sym1n0, and Asm2Vec. It also offers Asm2Vec-based executable classification.
Is Kam1n0 free to use?
Yes, Kam1n0 is open-source and free. The source code is available on GitHub under the McGill-DMaS organization.
What architectures are supported by Asm-Clone?
Asm-Clone currently supports Meta-PC, ARM, PowerPC, and TMS320c6 (experimental).
Who developed Kam1n0?
Kam1n0 was developed by Steven H. H. Ding and Miles Q. Li under the supervision of Benjamin C. M. Fung at the Data Mining and Security Lab (DMaS) of McGill University in Canada.
What is the performance of Asm-Clone?
According to the documentation, Asm-Clone achieves an average query time of 1.3 seconds and average index time of 30 milliseconds with 2.3 million functions.