Questions tagged [ida-plugin]
Refer to any programs specifically designed to be a plugin of IDA Pro.
168 questions
0 votes
1 answer
194 views
Installing python's labeless (needs protobuf) module and then linking it with x64dbg/x32dbg as a plugin
I am trying to install the labeless plugin for x64dbg (and IDA Pro) in Windows 11 (64 bit). I don't know why I am not succeeding. Perhaps packages are incomplete, because are too old (as tutorials [e....
- 133
0 votes
1 answer
163 views
code coverage for Ida /Ghidra
Long time ago I used lighthouse that attach Frida and output a file that I can load to Ida to see code coverage . I see that the repo is not maintenance. 1. 2 etc. Do you know another tool that do ...
- 1
1 vote
0 answers
83 views
What scripts or plugins would you like to see for Ghidra? [closed]
For those of you using Ghidra, are there any scripts or plugins you wish existed to make certain tasks easier or fill a specific gap? Whether it’s a small utility or a more advanced feature, I’d love ...
- 13
1 vote
0 answers
73 views
Automatically rename known functions from libraries in IDA
I have a binary file written in c and c++ which uses some libraries. The C/C++ source code of these libraries is publicly accessible online (github). Is there a way in IDA to somehow import this ...
- 11
0 votes
0 answers
67 views
Hex-View in IDA [TMS320C3x]
For the target processor TMS320C3x, IDA does not display all data in HEX-VIEW as ASCII, only every 4th byte. The minimum addressable data block for this target processor is a 32-bit word. It seems ...
- 96
1 vote
2 answers
252 views
How to make a plugin python function available to IDA's console?
I want to have utility functions shared between all databases, for example: from idautils import * from idaapi import * from idc import * from ida_name import * def FindFunctionImpl(...
- 356
0 votes
0 answers
111 views
Import function symbols from a reflection system into IDA
I'd like to import structs and functions from a reflection system into IDA. The problem I have is with functions. So I have all the type information: namespace, class name, function name, calling ...
- 356
1 vote
0 answers
167 views
Log functions called in IDA Pro?
When I run an exe in IDA how could I log which functions were called into a text file? log.txt: call func1 call func2 call func1 call func1 Not worried about indirect calls. This is for differential ...
- 11
3 votes
1 answer
143 views
How to highlight all external registers in a function
What I want: detect all potentially usercall, userpurge - functions; when entering the function, immediately see all external entities: arguments passed through registers; i.e., in order not to ...
user42316
2 votes
0 answers
75 views
Is it possible to create nested memory mapped registers in IDA Processor Modules?
Let's look at this very simple example: we have an AX (16-bit) register, which splits into two 8-bit registers: AH and AL (imagine x86). Then, imagine that these registers are memory mapped starting ...
- 111
2 votes
0 answers
77 views
Make IDA pro decompiler to show me the destination of trampoline calls instead of the trampoline function?
Right now I have a obfuscated driver, that in order to call something like KeDelayExecutionThread, it does the following: mov rax, cs:KeDelayExecutionThrea lea r8, [rsp+28h+arg_0] xor edx, ...
- 528
2 votes
0 answers
90 views
Ida pro doesn't list windbg in debugger lists when the input file is a not a normal PE file? (Windows kernel debug)
Ida has a really weird feature/bug that when you input a non-normal PE file like a memory dump of a kernel buffer, or an EFI file (even though EFI is PE..), you cannot select the windbg as the ...
- 528
3 votes
0 answers
217 views
IDA Processor Module: How to maintain register values if instruction doesn't modify them directly (ex. STATUS register, FLAGS, etc.)?
I'm developing a processor module for a specific microcontroller. There are cases, when instruction modifies some register (lets call it STATUS) indirectly. By indirectly, I mean, that STATUS is not ...
- 111
2 votes
1 answer
127 views
Is it possible to tap into IDAPython from within a (C) plugin? ... or at least use that Python instance?
I'm wondering whether it is possible to write a plugin for IDA and/or Hex-Rays which would use Python callbacks to perform certain tasks. In particular I am wondering if there is an official way to ...
- 11k
3 votes
0 answers
371 views
What computer components improve the speed of disassembly in IDA Pro and plugins like BinDiff?
I’m disassembling binaries in IDA Pro. It usually takes 15+ minutes just to pre-process/open one binary, Then another 20-30 min before IDA is fully done disassembling and finally becomes idle. ...
