diaphora-mcp

Читать на русском языке Diaphora MCP Diaphora MCP is an MCP Model Context Protocol server for automated binary diffing. It connects Diaphora the diffing engine and IDA Pro the disassembler via the MCP protocol, allowing AI agents such as Claude Code to perform binary file comparison, find securit...

yarasafe

YARASAFE - Automatic Binary Function Similarity Checks with Yara SAFE is a tool developed to create Binary Functions Embedding developed by Massarelli L., Di Luna G.A., Petroni F., Querzoni L. and Baldoni R. You can use SAFE to create your function embedding to use inside yara rules. If you are...

sylvia

iOS AArch64 Syscall Analyzer An IDA Pro script that scans an AArch64 binary for SVC instructions, resolves the BSD syscall number from the X16 register, and presents every result in a rich dockable UI, with per-syscall occurrence navigation and live man-page documentation fetching. Built for iOS ...

Kam1n0-Community

What Is Kam1n0 v2?...

IDA2Obj

IDA2Obj IDA2Obj is a tool to implement SBI Static Binary Instrumentation. The working flow is simple: Dump object files COFF directly from one executable binary. Link the object files into a new binary, almost the same as the old one. During the dumping process, you can insert any data/code at an...

IDAssist

IDAssist AI-Powered Reverse Engineering Plugin for IDA Pro Author: Jason Tang Description IDAssist is an IDA Pro plugin that integrates LLM-powered analysis directly into IDA's interface, providing AI-assisted binary reverse engineering through configurable LLM providers, semantic knowledge graph...

Uchihash

Uchihash Uchihash is a small tool that can save malware analysts the time of dealing with embedded hash values used for various things such as: Dynamically importing APIs especially in shellcode Checking running process used by analysts Anti-Analysis Checking VM or Antivirus artifacts Anti-Analys...

hashdb-ida

HashDB IDA Plugin Malware string hash lookup plugin for IDA Pro. This plugin connects to the OALABS HashDB Lookup Service. Adding New Hash Algorithms The hash algorithm database is open source and new algorithms can be added on GitHub here. Pull requests are mostly automated and as long as our...

IDAssistMCP

IDAssistMCP Standalone MCP Model Context Protocol server plugin for IDA Pro 9.x that exposes IDA's analysis capabilities to LLM clients like Claude Desktop. Features 41 MCP tools covering binary analysis, decompilation, cross-references, symbol management, type system, navigation, patching, expor...

findyara-ida

FindYara Use this IDA python plugin to scan your binary with yara rules. All the yara rule matches will be listed with their offset so you can quickly jump to them! 🍻 All credit for this plugin and the code goes to David Berard @p0ly 🍻 This plugin is copied from David's excellent findcrypt-yara...

uEmu

Overview uEmu is a tiny cute emulator plugin for IDA based on unicorn engine. Supports following architectures out of the box: x86 , x64 , ARM , ARM64 , MIPS , MIPS64 What is it GOOD for? Emulate bare metal code bootloaders, embedded firmware etc Emulate standalone functions What is it BAD for?...

spectrIDA-Reverse_Engineering_Stack

👻 spectrIDA Ghost through binaries. A local, AI-powered reverse engineering assistant: parallel IDA Pro analysis, AI function naming, a terminal that doesn't suck, a Neo4j knowledge graph of everything it's ever figured out, and an MCP server so Claude can search and chain through that graph...

CVE-2024-44083

CVE-2024-44083 the original PoC repos got deleted github.com/Azvanzed/CVE-2024-44083, github.com/Azvanzed/IdaMeme so here it is. figured id recreate it for anyone who wants to understand how it works or test their setup. IDA Pro ≤ 8.4 crashes when analyzing binaries with excessive jump chains. th...

deREferencing

deREferencing deReferencing is an IDA Pro plugin that implements new registers and stack views. Adds dereferenced pointers, colors and other useful information, similar to some GDB plugins e.g: PEDA, GEF, pwndbg, etc. Supports following architectures: x86, x86-64, ARM, ARM64, MIPS32 and MIPS64...

FindFunc

FindFunc: Advanced Filtering/Finding of Functions in IDA Pro FindFunc is an IDA Pro plugin to find code functions that contain a certain assembly or byte pattern, reference a certain name or string, or conform to various other constraints. FindFunc won third place in the 2022 HexRays IDA Pro Plug...

crauEmu

Mascot designed by@kottsarapkin crauEmu is an uEmu extension for developing and analyzing payloads for code-reuse attacks. Slides from ZeroNights 2019 Demo 1 - X32-64, Edge, rop-gadgets from pwnjs Demo 2 - ARM64, checkm8 callback-chain RopEditor Installation 1. Put the file crauEmu.py in same...

VulFi

VulFi v3.0 Introduction The VulFi Vulnerability Finder tool is a plugin to IDA Pro which can be used to assist during bug hunting in binaries. Its main objective is to provide a single view with all cross-references to the most interesting functions such as strcpy, sprintf, system, etc.. For case...

auto_re

AutoRE Features 1. Auto-renaming dummy-named functions, which have one API call or jump to the imported API Before After 2. Assigning TAGS to functions accordingly to called API-indicators inside Sets tags as repeatable function comments and displays TAG tree in the separate view Some screenshots...

idacode

IDACode IDACode facilita la ejecución y depuración de scripts de Python en su entorno IDA sin salir de Visual Studio Code. La extensión de VS Code se puede encontrar en el marketplace. IDACode aún se encuentra en una etapa muy temprana y se espera que haya errores. Por favor, abra un nuevo issue ...

RESim

RESim Reverse engineering using a full system simulator. Dynamic analysis by instrumenting simulated hardware using Simics1 Trace process trees, system calls and individual programs Reverse execution to selected breakpoints and events Integrated with IDA Protm debugging client Ghidra plugins for...