Tool
BinSync
Decompiler plugin for collaborative reverse engineering that records each analyst's work in a shared Git repository, one branch per user, so teammates can pull, push or auto-push changes across IDA Pro, Binary Ninja, Ghidra and angr-management. Synced artifacts are function headers (names, arguments and types), stack and global variables, structs, enums and comments, including user-defined types. It is built by mahaloz, the angr team and the SEFCOM research lab and is used by the Shellphish hacking team; scripting goes through the separate DecLib library.
Requirements & limits
- Release at review: 5.15.4, published 2026-08-21 on PyPI and GitHub (with an IDA plugin ZIP); the reviewed main commit is one commit ahead, adding Ghidra comment sync and auto-push without a version bump. Install with pip and then binsync --install, which places the plugin in each decompiler; Binary Ninja also offers it in its plugin manager. Every setup needs Python 3.10+ and Git.
- Supported hosts per the README: IDA Pro 8.4+ (older IDA versions need BinSync 4.10.1), Binary Ninja 2.4+, angr-management 9.0+ and Ghidra 12.0+ launched in PyGhidra mode. Support differs by decompiler: angr-management does not sync global variables, structs or enums, and although the Ghidra table marks every artifact as supported, the README text still calls Ghidra support early-stage and says to expect only minimal features such as name and comment syncing.
- Collaborators share a Git repository and analyze the same binary, which each of them supplies. The optional extras add an auxiliary server and an AI user that applies DAILA prompt results to a project and requires an OpenAI API key; its changes are model output to be reviewed.
- BSD-2-Clause. The README's term REAs means reverse-engineering artifacts and does not refer to the REA project. Nothing was installed and no projects were synced.
About this entry
- Type
- Tool
- Category
- Native analysis tools
- Relationship
- Foundation tool
- Targets
- Binary
Sources reviewed
The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.
Primary sources
- README.md GitHub · binsync/binsync · Revision 07a2ce8
- README.md#L31-L51 GitHub · binsync/binsync · Revision 07a2ce8
- README.md#L101-L112 GitHub · binsync/binsync · Revision 07a2ce8
- pyproject.toml GitHub · binsync/binsync · Revision 07a2ce8
- binsync/__main__.py#L60-L80 GitHub · binsync/binsync · Revision 07a2ce8
- binsync/core/client.py#L26-L27 GitHub · binsync/binsync · Revision 07a2ce8
- LICENSE GitHub · binsync/binsync · Revision 07a2ce8
- https://github.com/binsync/binsync/releases/tag/v5.15.4
- https://pypi.org/project/binsync/5.15.4/
More in Native binaries
- class-dump · Tool
- Lucid · Tool
- r2dec · Tool
- DownUnderCTF: masked-squares flag checker · Case study
- Show Your Work: a measured dissection of REA's evidence architecture · Case study
- Windows loader: static malware analysis with REA and Codex · Case study