SusanRTTI

SusanRTTI Un autre plugin IDA d'analyse RTTI Fonctionnalités Tout en ida-python Conception orientée classe, journalisation des erreurs Algorithme d'analyse RTTI qui recherche d'abord les vtables au lieu de forcer brutalement l'ensemble des sections rdata/data Graphe de la hiérarchie de classes av...

CVE-2025-5548

CVE-2025-5548 Dépôt documentant la vulnérabilité CVE-2025-5548 , incluant la configuration de l'environnement et l'exploitation étape par étape. Structure 1. Installation — Outils requis Python, IDA, Immunity, Mona, Free Float FTP Server, Ncat. 2. Exploitation — Analyse IDA et exploitation étape...

sylvia

Analyseur de syscalls AArch64 pour iOS Un script IDA Pro qui scanne un binaire AArch64 à la recherche d'instructions SVC, résout le numéro de syscall BSD à partir du registre X16 et présente chaque résultat dans une interface utilisateur riche et ancrable, avec navigation par occurrence de syscal...

patching

Patching - Interactive Binary Patching for IDA Pro Overview Patching assembly code to change the behavior of an existing program is not uncommon in malware analysis, software reverse engineering, and broader domains of security research. This project extends the popular IDA Pro disassembler to...

auto_re

AutoRE Features 1. Auto-renaming dummy-named functions, which have one API call or jump to the imported API Before After 2. Assigning TAGS to functions accordingly to called API-indicators inside Sets tags as repeatable function comments and displays TAG tree in the separate view Some screenshots...

diaphora

δiaphora Installation Install with the Hex-Rays plugin manager: root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Manual install instructions are below. Diaphora διαφορά, Greek for 'difference' version 3.4 is the most advanced program diffing...

spectrIDA-Reverse_Engineering_Stack

👻 spectrIDA Fantasma através dos binários. Um assistente de engenharia reversa local com inteligência artificial: análise paralela do IDA Pro, nomeação de funções por IA, um terminal que não é ruim, um grafo de conhecimento Neo4j de tudo que já descobriu e um servidor MCP para que Claude possa...

cosa-nostra

Cosa Nostra Cosa Nostra is an open source software clustering toolkit with a focus on malware analysis. It can create phylogenetic trees of binary malware samples that are structurally similar. It was initially released during SyScan360 Shanghai 2016. I basically maintain it since 2016 for my one...

Ponce

Ponce Ponce pronunciado 'poN θe pon-they é um plugin do IDA Pro que fornece aos utilizadores a capacidade de realizar análise de contaminação taint analysis e execução simbólica sobre binários de forma fácil e intuitiva. Com o Ponce, está a um clique de obter todo o poder da execução simbólica de...

bincat

Introduction What is BinCAT? BinCAT is a static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA or using Python for automation. It features: value analysis registers and memory taint analysis type reconstruction and propagation backward and forward analysis...

bincat

Introduction Qu'est-ce que BinCAT ? BinCAT est une boîte à outils d'analyse statique de code binaire, conçue pour aider les ingénieurs en rétro-ingénierie, directement depuis IDA ou via Python pour l'automatisation. Il propose : analyse de valeur registres et mémoire analyse de contamination tain...

NullSection

NullSection NullSection é uma ferramenta Anti-Reversing que aplica uma técnica que sobrescreve o cabeçalho da seção com nullbytes. Instalação root@kitploit: git clone https://github.com/MatheuZSecurity/NullSection cd NullSection gcc nullsection.c -o nullsection ./nullsection Vantagem Ao executar...

Uchihash

Uchihash Uchihash é uma pequena ferramenta que pode economizar tempo dos analistas de malware ao lidar com valores de hash embutidos usados para várias coisas, como: Importar APIs dinamicamente especialmente em shellcode Verificar processos em execução usados por analistas Anti-Análise Verificar...

yarasafe

YARASAFE - Automatic Binary Function Similarity Checks with Yara SAFE is a tool developed to create Binary Functions Embedding developed by Massarelli L., Di Luna G.A., Petroni F., Querzoni L. and Baldoni R. You can use SAFE to create your function embedding to use inside yara rules. If you are...

idaguides

Guias do IDA Pequeno plugin para IDA que adiciona guias de indentação à visualização do descompilador. Instalação 1. Clone ou baixe este repositório 2. Extraia seu conteúdo para o diretório plugins do IDA 3. Reinicie o IDA Testado Com IDA 9.2, 9.3...

oregami

Oregami """ What is this register used for? Hmm.. I'll just rename it to veryuniquename, do a textual search, and find all references! Ok.. Waiting for the search to end.. any minute now.. Done! Now I just need to understand which of the search result is relevant to the current usage frame of the...

haruspex

haruspex "Hacking is the discipline of questioning all your assumptions all of the time." -- Dave Aitel Haruspex is a blazing fast IDA headless plugin that extracts pseudocode generated by IDA's decompiler in a format that should be suitable to be imported into an IDE, or parsed by static analysi...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...

ntoskrnl-metadata

ntoskrnl-metadata نص برمجي بلغة IDA Python لاستخراج البيانات الوصفية الحرجة لنواة النظام من ملفات ntoskrnl.exe في ويندوز. تستخرج هذه الأداة تلقائيًا عناوين RVA للدوال وإزاحات بنية EPROCESS المطلوبة لتطوير استغلالات تستهدف CVE-2026-40369 وثغرات نواة أخرى. الغرض تساعد هذه الأداة في تجميع استغلالات...

ipyida

= IPyIDA IPyIDA, IDA Pro में IPython कंसोल जोड़ने के लिए एक केवल-पायथन समाधान है। एम्बेडेड Qt कंसोल वाली विंडो खोलने के लिए का उपयोग करें। इसके बाद आप IPython की ऑटोकम्पलीशन, ऑनलाइन सहायता, मोनोस्पेस्ड फ़ॉन्ट इनपुट फ़ील्ड, ग्राफ़ इत्यादि का लाभ उठा सकते हैं। आप ipython console --existing का उपयोग...