插件『IDA/OD/IMMDbg Plugin』

IDA Binary Copy & Paste

5 条评论


Seeing there isn’t any binary copy-and-paste functionality in IDA, this plug-in will take care of both
copy and paste operations allowing you to take a chunk of binary from one place and overwrite
another with it. You need to modify your plugins.cfg file as this is a multi-function plug-in, needing
one invocation for copy and another for paste. Obviously it only supports copying and pasting
within IDA, however it could probably be extended to go beyond that.

Continue Reading

插件『IDA/OD/IMMDbg Plugin』, 破解/汇编『Crack/Asm』

Ida Plugin Wizard For VS2010

5 条评论

 
安装说明：
1.请按照提示信息进行操作，如果选择错误目录将会导致模板无法正常加载或者无法正常创建工程；
2.请确认安装目录为VS的vc根目录：如果是Win7 + vs2010则默认目录如下所示：
C:Program Files (x86)Microsoft Visual Studio 10.0VC

3.本工具的修改版本去除了插件自动复制功能，如果需要开启该功能请手工编辑
appwizIDA ProScripts1033default.js文件，去掉如下几行的注释：

否则会导致无法找到include目录或文件，或者无法生成plw文件。
4.部分错误目前尚未修正，将在未来版本进行修正。

393行 //PostBuildTool.Description = 'Copying "$(TargetFileName)" to "' + strCopyToFolder + '"...';
397行 //PostBuildTool.CommandLine = 'copy /b /y "$(TargetDir)$(TargetFileName)" "' + strCopyToFolder + '"';
Continue Reading

插件『IDA/OD/IMMDbg Plugin』

Fast IDB2Sig and LoadMap plugins(IDA)

没有评论

Click Here to Download these plugins!

It took me two weeks to write two IDA plugins, a renew, fast IDB2Sig plugin and a new, very fast LoadMap plugin.
The IDB2SIG plugin I rewrote base on the orginal source code and idea of:
– Quine (quine@blacksun.res.cmu.edu)
– Darko
– IDB2PAT of J.C. Roberts <mercury@abac.com>
Thanks all of you very much. I think all of you will allow me to public the new source code.
The LoadMap plugin I wrote base on the idea of Toshiyuki Tega. It will supports loading and parsing VC++, Borland (Delphi/BC++/CBuilder) and DeDe map files.
And with two plugins, I need only two days to create two signature file for Delphi 6/7. Very fast and convenience. Hereafter, we can use two above plugins to create signature files, load map symbols…

Source is included, and plugins are precompiled for IDA 4.5 and 5.2.

插件『IDA/OD/IMMDbg Plugin』

FullDisasm : plugin OllyDbg & Immunity Debugger

没有评论

This is a plugin for OllyDbg 1.10 and Immunity Debugger 1.xx to replace the old disasm engine by a more recent one : BeaEngine 4.0.

You just have to press Ctrl+W to change the disasm engine.

If you want to use BeaEngine only on selected lines, then just press Ctrl+X.

With this plugin, you can decode recent instructions for the following technologies : MMX, FPU, SSE, SSE2, SSE3, SSSE3, SSE4.1, SSE4.2 , VMX, CLMUL and AES.

You can even decode undocumented instructions usually used in malicious codes.

If you want to use a specific syntax, BeaEngine allows you to disassemble code in masm32 syntax, nasm syntax, GoAsm syntax or GNU Assembler syntax.

Current version : 3.0

Close Menu