Skip to content

Add idalib, rhabdomancer, haruspex, augur #91

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Add idalib, rhabdomancer, haruspex, augur #91

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 8 additions & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,6 +37,8 @@ I'll be organizing the plugins over time. Please submit PRs if you have any othe

* [APIScout](https://github.com/danielplohmann/apiscout): This project aims at simplifying Windows API import recovery. As input, arbitrary memory dumps for a known environment can be processed (please note: a reference DB has to be built first, using apiscout/db_builder). The output is an ordered list of identified Windows API references with some meta information, and an ApiVector fingerprint. Includes a convenience GUI wrapper for use in IDA.

* [augur](https://github.com/0xdea/augur): Headless plugin for reverse engineering that extracts strings and related pseudocode from a binary file.

* [AutoRE](https://github.com/a1ext/auto_re): Auto-renaming plugin with tagging support.

* [BinAuthor](https://github.com/g4hsean/BinAuthor): Match an author to an unknown binary.
Expand Down Expand Up @@ -164,6 +166,8 @@ I'll be organizing the plugins over time. Please submit PRs if you have any othe

* [Graph Slick](https://github.com/lallousx86/GraphSlick): Automated detection of inlined functions. It highlights similar groups of nodes and allows you to group them, simplifying complex functions. The authors provide an accompanying presentation which explains the algorithms behind the plugin and shows sample use cases.

* [haruspex](https://github.com/0xdea/haruspex): Headless plugin for vulnerability research that extracts pseudocode from the IDA Hex-Rays decompiler.

* [HashDB IDA](https://github.com/OALabs/hashdb-ida): [HashDB](https://github.com/OALabs/hashdb) API hash lookup plugin for IDA Pro.

* [HeapViewer](https://github.com/danigargu/heap-viewer): An IDA Pro plugin to examine the heap, focused on exploit development.
Expand Down Expand Up @@ -236,6 +240,8 @@ I'll be organizing the plugins over time. Please submit PRs if you have any othe

* [IDA IPython](https://github.com/james91b/ida_ipython): This is a plugin to embed an IPython kernel in IDA Pro. The Python ecosystem has amazing libraries (and communities) for scientific computing. IPython itself is great for exploratory data analysis. Using tools such as the IPython notebook make it easy to share code and explanations with rich media. IPython makes using IDAPython and interacting with IDA programmatically really fun and easy.

* [idalib](https://github.com/binarly-io/idalib): Idiomatic Rust bindings for the IDA SDK, enabling the development of standalone analysis tools using IDA v9.x's idalib.

* [IDAngr](https://github.com/andreafioraldi/IDAngr): Use angr in the ida debugger generating a state from the current debug session

* [IDA BPF Processor](https://github.com/bnbdr/ida-bpf-processor): BPF Bytecode Processor for IDA (python). Supports the old BPF bytecode only (no eBPF).
Expand All @@ -247,7 +253,6 @@ I'll be organizing the plugins over time. Please submit PRs if you have any othe
* A lightweight easy way of creating small backups of the current work.
* For w/e reason, the current idb instance you're working on gets corrupted.


* [IDAMagicStrings](https://github.com/joxeankoret/idamagicstrings): An IDA Python plugin to extract information from string constants. The current version of the plugin is able to:
* Display functions to source files relationships (in a tree and in a plain list, a chooser in IDA language).
* Display guessed function names for functions.
Expand Down Expand Up @@ -404,6 +409,8 @@ Labeless provides easy to use dynamic dumping tool, which supports automatic on-

* [REtypedef](https://github.com/zyantific/REtypedef): REtypedef is an IDA PRO plugin that allows defining custom substitutions for function names. It comes with a default ruleset providing substitutions for many common STL types.

* [rhabdomancer](https://github.com/0xdea/rhabdomancer): Headless plugin for vulnerability research that locates calls to potentially insecure API functions in a binary file.

* [rizzo](https://github.com/devttys0/ida/tree/master/plugins/rizzo): Identifies and re-names functions between two or more IDBs based on:
* Formal signatures (i.e., exact function signatures)
* References to unique string
Expand Down