IDAssistMCP

IDAssistMCP Servidor plugin MCP Model Context Protocol independente para IDA Pro 9.x que expõe as capacidades de análise do IDA para clientes LLM como o Claude Desktop. Funcionalidades 41 ferramentas MCP cobrindo análise binária, descompilação, referências cruzadas, gerenciamento de símbolos,...

yarasafe

YARASAFE - Verificações Automáticas de Similaridade de Funções Binárias com Yara SAFE é uma ferramenta desenvolvida para criar Embeddings de Funções Binárias, desenvolvida por Massarelli L., Di Luna G.A., Petroni F., Querzoni L. e Baldoni R. Você pode usar SAFE para criar seu embedding de função...

deREferencing

deREferencing deREferencing एक IDA Pro प्लगइन है जो नए रजिस्टर और स्टैक व्यू को लागू करता है। यह डीरेफ़रेंस किए गए पॉइंटर्स, रंग और अन्य उपयोगी जानकारी जोड़ता है, जो कुछ GDB प्लगइन्स जैसे: PEDA, GEF, pwndbg, आदि के समान है। निम्नलिखित आर्किटेक्चर समर्थित हैं: x86, x86-64, ARM, ARM64, MIPS32 और...

VulFi

VulFi v3.0 Introdução A ferramenta VulFi Vulnerability Finder é um plugin para o IDA Pro que pode ser usado para auxiliar na caça de bugs em binários. Seu principal objetivo é fornecer uma visão única com todas as referências cruzadas para as funções mais interessantes como strcpy, sprintf, syste...

yarasafe

YARASAFE - Automatic Binary Function Similarity Checks with Yara SAFE is a tool developed to create Binary Functions Embedding developed by Massarelli L., Di Luna G.A., Petroni F., Querzoni L. and Baldoni R. You can use SAFE to create your function embedding to use inside yara rules. If you are...

BinAIVulHunter

BinAIVulHunter बाइनरी में भेद्यताएँ खोजने में मदद करने के लिए एक IDA PRO प्लगइन। बाइनरी में संभावित भेद्यताएँ खोजने के लिए OpenAIChatGPT के साथ IDA PRO HexRays डीकंपाइलर का उपयोग करें। अस्वीकरण: AI का उपयोग करके बाइनरी भेद्यताएँ खोजने का प्रयास करते समय प्राप्त उत्तर गलत-सकारात्मक false positive ...

ida_ifl

IFL - इंटरैक्टिव फ़ंक्शन सूची लाइसेंस: CC-BY https://creativecommons.org/licenses/by/3.0/ एक छोटा प्लगइन जिसका लक्ष्य फ़ंक्शन और उनके संदर्भों के बीच नेविगेट करने के लिए उपयोगकर्ता-अनुकूल तरीका प्रदान करना है। इसके अतिरिक्त, यह IDA में PE-sieve जैसे टूल द्वारा उत्पन्न रिपोर्टों को आयात करने की...

capa 2.0: Better, Stronger, Faster

We are excited to announce version 2.0 of our open-source tool called capa. capa automatically identifies capabilities in programs using an extensible rule set. The tool supports both malware triage and deep dive reverse engineering. If you haven’t heard of capa before, or need a refresher, check...

Defeating Compiler-Level Obfuscations Used in APT10 Malware

Summary The Carbon Black Threat Analysis Unit TAU recently analyzed a series of malware samples that utilized compiler-level obfuscations. For example, opaque predicates were applied to Turla mosquito and APT10 ANEL. Another obfuscation, control flow flattening, was applied to APT10 ANEL and Dhar...

[CrowdRE] Reverse Engineering Tool

A new project called CrowdRE aims to make it easy for the reverse engineering of complex applications working in collaboration with other users. Normally, the process reversing software from a complicated binary can consume much time, CrowdRE will help accelerate this process through teamwork...