ida plugins
1.0.0
这是IDA Pro的插件的全面列表，它更具交互性，也就是说，可以对其进行分类和过滤以帮助查找感兴趣的插件。它还具有额外的元数据，例如插件写的语言，最后更新插件以及将插件分类的尝试。
动态版本托管在GitHub页面上。在下面，您仍然可以找到列表的标准，静态版本。
转到互动列表
欢迎任何贡献以一种或另一种方式。如果您知道可以添加的插件或可以更新的列表中的数据，丢失的类别，错别字..请发送PR！如果您只想向我发送一条消息或电子邮件，那么我的电子邮件应该很容易在Github上找到。
618插件
3DS-CODE-LOADER：IDA Pro 7.6插件从CXI文件加载exefs和CRO代码。
更新：2022 08 01语言：C ++
3DS_IDA：IDA PRO资源用于逆向工程任天堂3DS二进制文件。
更新：2024 11 10语言：Python
3DSX加载程序：3DSX文件的IDA Pro加载程序
更新：2021 12 26语言：Python
AARCH64-SYSREG-IDA：IDA插件可很好地显示ARM MSR。
更新：2023 01 04语言：Python
深渊：后十六进制的分解器输出
更新：2022 10 26语言：Python
ActionScript 3：ActionScript 3处理器模块和Flash调试器插件。
更新：2018 10 05语言：Python
Adobe Flash拆卸器：此档案中存在的两个插件将使IDA能够解析SWF文件，将所有SWF标签加载为快速搜索和检索的段，解析所有可以包含Actionscript2代码的标签，发现所有此类代码（发现所有这些代码）（为其编写了专门的处理器模块），甚至将事件命名为eventials in evectials in ecortials in ecortial in n in It in It in It in It in It in It in in It in It in It in It in It in It in It in It in in It in nit（eg）。下载
语言：C ++
AIDAPAL：AIDAPAL是一个IDA Pro插件，它使用本地运行的LLM，该LLM已针对HEX射线伪代码进行了微调，以协助代码分析。
更新：2024 11 18语言：Python
Alleycat：
Allirt：将所有LIBC转换为IDA Pro Flirt插件的签名。公用事业公司可以轻松地使Sig融入SIG。
更新：2019 02 09语言：Python
Alphagolang：用于分析Golang二进制文件的IDAPYTHON脚本。
更新：2024 02 01语言：Python
艾米：简约的指导扩展器。艾米（Amie）是朋友的python返工，仅专注于ARM架构（仅支持AARCH32和AARCH64）。它既轻巧又无依赖，并且提供了有关ARM系统寄存器和说明的最相关和最新信息。
更新：2023 03 29语言：Python
健忘症：健忘症是一个IDAPYTHON模块，旨在使用字节级启发式方法在IDA Pro数据库中的未定义字节中找到ARM拇指说明。当前，该模块中的启发式方法以几种不同的方式找到代码。一些说明通过查找与特定ARM OPODES相对应的COMON字节序列来识别和定义新代码。该模块中的其他功能根据定义指令的序列定义了新功能。
更新：2018 04 26语言：Python
Android/Linux VMlinux加载器：VMLinux.py是一个Python脚本，可以在两个IDA Pro中加载VMlinux映像
更新：2023 11 18语言：Python
Android调试：此版本既支持通过USB和SDK Adv Manager进行的本地ARM调试。
更新：2015 04 05语言：Python
Android脚本集合：Android反向工程脚本的集合，使我的生活更轻松
更新：2020 05 03语言：Python
Andromeda-Payload：用于解密的仙女座恶意软件有效载荷的IDAPYTHON脚本。
更新：2013 03 30语言：Python
抗Inebugseeker：自动识别和提取恶意软件使用的潜在反欺骗技术。
更新：2024 11 13语言：Python
ANTIVM：ANTIVM的目的是快速识别反文本机器和反式盒子行为。这可以加快恶意软件分析。
更新：2022 09 02语言：Python
AntixorSTR：列举并自动解密使用C ++模板技术实现的加密字符串，而无需谈论加密字符串的算法实现。
更新：2023 05 14语言：Python
Aphroditef5：IDA Pro Collapse插件
更新：2023 07 26语言：Python
APIHASHES V2：自动识别和标记已知的API函数名称的哈希值。
更新：2022 05 12语言：Python
API_PALETTE：IDA API的代码搜索/完成工具。对于那些为IDA编写脚本的人（在CLI或脚本片段窗口中）将很有用。
更新：2022 08 24语言：Python
APISCOUT：此项目旨在简化Windows API导入恢复。作为输入，可以处理针对已知环境的任意内存转储（请注意：必须首先使用APISCOUT/DB_BUILDER构建参考DB）。输出是带有一些元信息的已确定的Windows API引用的有序列表，也是Apivector指纹。包括一个便利的GUI包装器，可在IDA中使用。
更新：2023 03 27语言：Python
AppCut：从IDA分析的二进制文件中获取二进制斑点并通过Python包裹它们的帮助工具。
更新：2022 09 06语言：Python
AutolibCflags：用标准LIBC功能上的枚举替换小数旗的简单插件。
更新：2024 03 11语言：Python
自动：带有标签支持的自动更名插件。
更新：2024 09 05语言：Python
自动名称：自动重命名非常简单的功能。
更新：2024 01 26语言：Python
Autoresolv：在主项目中解决自定义库。重构调用类型和代码。
更新：2022 10 15语言：Python
avey_from_sub_function_in_ida：使用OpenAI帮助您从IDA Pro中的sub_xxxx函数中更好地翻译函数含义和还原符号表。
更新：2024 07 01语言：Python
返回2未来：在Windows上查找漏洞的模式，以找到0天并编写1天的漏洞。我们使用Microsoft安全更新来查找模式。
更新：2021 08 09语言：Python
BankSwitch：Nintendo Entertainment System（NES）银行切换器：NES ROM的插件，模拟银行切换/分页。
更新：2018 12 18语言：C ++
BAP IDA Python：将BAP（二进制分析平台）与IDA集成，提供功能，例如功能信息增强，污点传播，BIR属性标记等。
更新：2020 02 12语言：Python
批处理：一个用于以批处理模式生成IDA Pro文件的Python库，并比较可执行文件在批处理模式下使用Bindiff。
更新：2024 09 19语言：Python
BDSDEVHELPER：IDA插件，可帮助您开发基岩专用服务器。
更新：2023 06 09语言：Python
美化：用于使伪代码更好的IDA插件。
更新：2022 02 01语言：Python
BetterCallStack：在Windows X64调试器中改进呼叫堆栈。
更新：2023 08 14语言：C ++
Bextr helper：使用易于阅读的操作为BEXTR OPCODE创建注释。
更新：2022 11 30语言：Python
Binary2Name IDA客户端：IDA客户端到binary2name，可预测二进制文件中的常见函数名称。
更新：2023 04 04语言：Python
BinaryAi插件：Ghidra/Ida Pro插件可从Binaryai.net加载相似性。
更新：2023 04 11语言：Python
Binauthor：将作者与未知的二进制相匹配。
更新：2020 05 04语言：Python
BINCAT：BINCAT是一种静态二进制代码分析工具包，旨在直接从IDA帮助反向工程。
更新：2024 10 02语言：Python
Binclone：Binclone：检测恶意软件中的代码克隆[SERE 2014]
更新：2015 04 04语言：C ++
BINDIFF：Zynamics（现为Google）的Bindiff是二进制文件的比较工具，可帮助脆弱性研究人员和工程师快速找到分解的代码的差异和相似性。
更新：2021 06 07
Binexport：将拆卸拆分为协议缓冲区。 Binexport是Bindiff的出口商组成部分。它是IDA的插件/扩展程序，将拆卸数据导出到Bindiff所需的协议缓冲区格式中。
更新：2024 11 01语言：C ++
Binkit：IDA的Binkit插件。使用此插件加载扩散结果文件（*.json）...
更新：2020 10 05语言：Python
Binnavi：Binnavi是一种二进制分析IDE-允许用户检查，导航，编辑和注释拆卸代码的控制流式图形，对可执行文件的呼叫图，收集和组合执行痕迹的呼叫图相同，并通常跟踪分析师组中的分析结果。
更新：2020 10 23
双筒望远镜：双筒望远镜是具有集成AI接口的IDA Pro插件。
更新：2024 08 23语言：Python
BIN Souderer：Binsourcerer（又名Re-Source Online）是一个用于二进制审核和恶意软件分析的源代码匹配框架的组件。
更新：2015 02 04语言：Python
BINSYNC：构建基于GIT版本控制系统的分解器协作工具，以实现被罚款的网格逆向工程协作，而不管是分解器如何。
更新：2024 11 05语言：Python
BIP：BIP是一个项目，旨在简化Python与IDA互动的使用。它的主要目标是促进在IDA的交互式游戏机和插件的撰写中使用Python。
更新：2020 09 09语言：Python
BLC：二进制起重装置：将Ghidra的分解剂整合为IDA插件。
更新：2024 06 04语言：C ++
引导室分析库：IBAL是IDA Pro Bootrom分析库，它包含许多有用的功能，用于分析嵌入式ROM。
更新：2015 02 12语言：Python
Bosch ME7：Siemens Bosch ME7.X拆卸器IDA PRO
更新：2018 01 22语言：C ++
野蛮的IDA：块REDO和撤消以实现遗产IDA。
更新：2019 08 01语言：Python
Caesar：使用称为功能列表识别功能的IDA插件。 （存档）。
更新：2023 02 17语言：Python
CAPA Explorer：CAPA Explorer是一个Idapython插件，将Flare团队的开源框架CAPA与IDA Pro集成在一起。 CAPA是一个使用明确定义的规则集合来识别程序中的功能的框架。
更新：2024 11 15语言：Python
CGC加载器：DARPA CGC二进制文件的IDA加载器。
更新：2018 04 09语言：C ++
CGEN：CGEN支持生成IDA Pro IDP模块。
更新：2015 12 28语言：方案
Chuchu：IDA Pro的Sega Dreamcast二进制二元编译器。
更新：2023 11 11语言：C ++
类告密者：扫描具有C ++ RTTI和MFC RTCI类型数据的MSVC 32位目标IDB。将结构防御，名称，标签和评论放置，以使vFtables（“虚拟功能表”）更加有意义，并使它们更容易读取作为反向工程的帮助。使用找到的vftables创建列表窗口。
更新：2018 07 14语言：C ++
ClassInformer-IDA8：IDA类信息插件，用于IDA 8.X（请参阅课程信息器）。
更新：2024 11 12语言：C ++
优雅：帮助用户轻松地管理IDA Pro中的类。可以通过选择一个范围来生成VTABLES，可以将功能分配给类，它们的签名可以很容易地进行编辑和修补，可以分配IDA结构，可以生成C标头，可能更多。
更新：2024 09 12语言：Python
CMAKE-IDA：使用CMAKE构建IDA Pro模块
更新：2018 01 02
编码：
CODATIFY（IDC）：IDC版本的IDCIFY IDAPYTHON脚本。
更新：2024 01 11语言：IDC
编解码：使用LFA和Maxcut算法在IDA Pro中找到对象文件边界。用于测试编解码解决方案的数据集。
更新：2024 09 25语言：Python
CODEMAP：CODEMAP是作为IDA插件提供的“ Run-Trace可视化”的二进制分析工具。
更新：2016 07 01语言：Python
合作：Collabreate是IDA Pro的插件，旨在为在同一二进制文件上工作的多个IDA用户提供协作反向工程功能。
更新：2021 09 01语言：C ++
Collare：多工具逆向工程协作解决方案。 Collare是一种协作逆向工程的工具，旨在允许在项目期间使用一个工具多于一个工具的团队进行协作，而无需在单独的位置共享文件。
更新：2024 03 27语言：Python
Comfinder：com的IDA插件。
更新：2022 09 30语言：Python
Comfinder：com（中文）的IDA插件。
更新：2022 09 30语言：C ++
COMIDA：COMIDA是一个插件，它搜索GUID COM对象（常见对象模型）的所有引用，并使用Hexrays插件推导关联的类型以提高代码的可读性。
更新：2023 07 27语言：Python
condstanta：搜索在条件语句中使用的常数值，例如if and switch-case或包含多个特定常数的函数。
更新：2022 03 29语言：Python
Concuserex Undranding：Concuserex二进制文件的IDA Python Deobfuscation脚本。
更新：2022 09 15语言：Python
Continuum：Continuum是IDA Pro插件，添加了多二进制项目支持，可以在涉及许多共享库的应用程序中快速导航。
更新：2016 09 13语言：Python
COPY_RVA：在光标下复制RVA到剪贴板。
更新：2023 07 28语言：Python
Cortex M固件：Cortex M固件模块修饰一个IDA Pro数据库，该数据库包含来自ARM Cortex Microcontroller的固件。该模块将注释固件向量表，其中包含许多功能指针。此矢量表注释将导致IDA Pro对这些指针指向的功能进行自动分析。
更新：2018 04 26语言：Python
Cranalyzer：通过特定过滤器搜索功能的IDA插件。
更新：2023 05 17语言：Python
CrowdDeTox：Hex射线的CrowdDeTox插件自动删除了Hex射线功能解编码中的垃圾代码和变量。
更新：2021 05 03语言：C ++
CTO：调用树概述器：IDA插件，用于创建简单有效的功能调用树图。它还可以总结功能信息，例如内部功能调用，API调用，静态链接的库函数调用，未解决的间接函数调用，字符串引用，结构成员访问，特定注释。
更新：2024 10 07语言：Python
D-810：D-810是一个IDA Pro插件，可通过修改IDA Pro Microcode在解次编译时间中使用该插件。
更新：2022 08 05语言：Python
Dalvik标头：这是一个简单的Dalvik标头插件
更新：2013 01 22语言：C ++
DataFlowanalysis-MIASM：基于MIASM和IDA PRO的函数生成数据流图和Def-use图。
更新：2022 05 17语言：Python
数据XREF计数器：列举特定段中的所有X-引用，并计算使用频率。该插件在qttableWidget中显示数据，并让用户过滤并对引用进行排序。您还可以将数据导出到CSV文件。
更新：2015 09 17语言：Python
DBGHIDER：IDA插件旨在将调试器隐藏在进程（Windows）中。
更新：2018 06 19语言：Python
Debugautopatch：IDA的修补系统改进插件。
更新：2019 09 06语言：Python
调试器：由Unicorn Engine支持的IDA Pro的调试器插件
更新：2023 04 17语言：C ++
debugger_timer：IDA的简单计时器插件，使用Ctrl+Shift+D启动和结束计时器。
更新：2023 11 07语言：Python
DEC2结构：使用声明文件轻松在IDA中设置VTABLES。
更新：2017 09 06语言：Python
DECOMP2DBG：插件将交互式符号从分解器中引入调试器。
更新：2024 09 08语言：Python
深冬：黑暗爱好者的黑色IDA专业主题。
更新：2022 10 13
DemangledStructNegning：IDA插件从选择命名中改善创建结构。
更新：2023 08 14语言：C ++
提出：IDA Pro插件，可实现更易于用户友好的注册和堆栈视图。
更新：2024 10 15语言：Python
描述密钥：快速了解捷径的作用。描述键是一个非常简单的IDA Pro插件：调用它，按快捷方式，立即查看与快捷方式相关的操作。快速简便，从IDA中的任何地方称呼它。
更新：2022 04 08语言：Python
diaphora：diaphora（διαφορά，希腊语“差异”）是一个针对IDA Pro的程序扩散插件，类似于Zynamics Bindiff或Foss对应物Darungrim，Turbodiff等...它在Syscan 2015年期间发行了。
更新：2024 09 17语言：Python
Docker IDA：在Docker容器中运行IDA Pro拆卸器，以自动化，扩展和分发IDAPYTHON脚本的使用。
更新：2017 11 19语言：Python
Docker-Idapro：IDA Pro Docker Image（用于IPSW管道）。
更新：2024 07 02
Doelf：IDA Pro的插件以导出识别为ELF符号表的符号。它可以从任何转储文件中创建带有调试信息的精灵。
更新：2022 05 31语言：Python
dotniet：导入丢失的符号（通常几千），这些符号在运行时通过.NET本机汇编的二进制文件解决。这些符号位于sharedLibrary.dll中，并未被该符号导出。
更新：2021 06 30语言：Python
Doxbox调试器：Eric Fry的IDA/DOSBOX调试器插件
更新：2016 02 28语言：C ++
DP701：IDA Pro的深色主题。
更新：2023 01 04
Dracula：Ida Pro的黑暗主题。
更新：2022 06 30
Dragodis：Python框架，允许创建通用拆卸器脚本。支持艾达和吉德拉。
更新：2024 05 23语言：Python
drgadget：这是用于您所有ROP实验需求的交互式拆卸器的IDAPYTHON插件。
更新：2017 02 02语言：Python
Driverbuddy：DriverBuddy是一个IDA Python脚本，可协助Windows内核驱动程序的反向工程。
更新：2018 11 22语言：Python
DriverBuddyreloded：Driver Buddy Reloaded是IDA Pro Python插件，可帮助自动化一些乏味的Windows内核驱动程序逆向工程任务。
更新：2024 10 25语言：Python
Drop：一个实验性IDA Pro插件，能够检测到混淆的二进制文件中的几种类型的不透明谓词。它利用符号执行引擎ANGR及其组件的力量来理解谓词基于其符号上下文的不透明性。
更新：2024 08 28语言：Python
DSYNC：IDAPYTHON插件，该插件同步分解并拆卸代码视图。
更新：2021 01 20语言：Python
DUBRE：IDA Pro的ML驱动功能符号提取插件。
更新：2023 09 05语言：Python
DumpDyn：脚本保存评论，名称，断点，从一个执行到另一个执行的功能，FA进程使用VirtualAlloc，heapalloc，New等分配动态内存，并从该地址继续执行。
更新：2019 02 26语言：Python
Dwarfexport：Dwarfexport是一个IDA Pro插件，允许用户导出矮人调试信息。然后可以将其导入到GDB和其他工具中，即使您无法连接IDA调试器，也可以使用在IDA中恢复的信息进行调试。
更新：2020 11 18语言：C ++
矮插件：IDADWARF是一个IDA插件，将矮人调试符号导入IDA数据库。下载
更新：2009 11 15语言：C ++
动态数据解析器：IDA的插件，旨在使恶意软件的反向工程更容易。功能：代码流跟踪，可搜索的API调用记录，可搜索的字符串记录，解决动态值和自动征服。
更新：2020 12 17语言：Python
动态IDA富集：Die是一个IDA Python插件，旨在用动态数据丰富IDA的静态分析。这是使用IDA调试器API，通过将断点放在关键位置并保存当前系统上下文来完成的。
更新：2021 05 13语言：Python
DynapStalker：使用Dynamorio DRCOV输出来吸引IDA Pro中的块。
更新：2022 11 24语言：Python
DYNLIB：这是一个IDA Pro插件，可通过加载PS4特定的Dynlibdata段来帮助逆向工程PS4用户模式ELF。
更新：2017 12 16语言：C ++
Easyre：插件，使您的生活更轻松。跟踪执行并保存代码/内存以进行详细探索。
更新：2024 03 05语言：Python
E-Decompiler：IDA 7.5插件用于协助分析分析程序，实验项目（中文）。
更新：2022 09 05语言：C ++
EFI脚本（EFITOOLS）：一些IDA脚本和工具，以帮助逆向EFI EFI可执行文件。
更新：2015 07 13语言：Python
EFI脚本（Efitools2）：用于扩展UEFI反向工程功能的插件。基于具有许多修复程序和新功能的IDA-FEFITOOLS（EFI脚本）。
更新：2020 10 19语言：Python
EFI脚本（efiutils）：一些IDA脚本，以协助进行反向工程EFI可执行文件。
更新：2014 06 17语言：Python
EFI瑞士刀：一个IDA插件，用于改进（U）EFI逆转。
更新：2017 06 13语言：C ++
EfixPlorer：用于UEFI固件分析和反向工程自动化的IDA插件。
更新：2024 11 07语言：C ++
弹射IDB：eject_idb是最后的沟渠努力，以冲洗并保存IDA悬挂或插件会导致异常等。
更新：2024 08 13语言：C ++
Elfdumper：IDA的插件，可以轻松地转储ELF文件。
更新：2023 04 03语言：Python
EMUIT：用于代码仿真的易于使用的IDA插件。
更新：2024 03 20语言：Python
增强的PDB插件：IDA PDB插件，带有增强功能和错误插件（中文）。
更新：2024 11 16语言：C ++
Epanos：电点自动无源物体重新组件（COMIPS compler compoler）。这是C静态翻译器的非常愚蠢的误解。
更新：2014 05 05语言：Python
ETHERANTOTATE：解析使用EtherAnnotate XEN修改（https://github.com/inositle/etherannotate_xen）生成的专业指令跟踪文件。从指令跟踪中，IDA Pro通过指令注释和行颜色可视化运行时信息的寄存器值和代码覆盖范围。
更新：2010 05 04语言：C ++
EtherAntantate IDA插件：分析EtherAntantate跟踪文件和标记具有运行时值的IDA拆卸。
更新：2010 05 04语言：Python
ETM_DISPLAYER：显示Perf coresight ETM跟踪的结果。
更新：2018 09 04语言：Python
ETWBREAKER：处理Windows（ETW）的事件跟踪。静态地在PE文件中找到ETW事件，并生成有条件的断点以促进安全研究。
更新：2022 07 08语言：Python
EWS：仿真包装器解决方案是一个IDA Pro插件，它带来仿真器提供诸如调试模拟的功能。
更新：2023 05 25语言：Python
导出QML：从QT程序导出所有QML。 （IDA脚本）。
更新：2022 09 10语言：Python
出口+：查看出口。问题是IDA出于某种原因有时不会在出口中显示某些名称，也不会脱离它们。此插件解决了此问题。
更新：2018 09 21语言：Python
export_source_path：导出源路径到IDA插件的DIR。
更新：2023 01 06语言：Python
提取物：用于自动从Hyper-V Core二进制文件中提取Hyper-V HyperCalls名称和代码的实用程序。
更新：2024 06 03语言：C＃
提取Macho-O：这是一个非常简单的IDA插件，用于提取拆卸任何地方包含的所有Mach-O二进制文件。
更新：2019 05 09语言：C ++
FA：FA代表固件分析，旨在为人类。 FA可以轻松地轻松地执行代码探索，符号搜索和其他功能。
更新：2024 09 15语言：Python
FakePDB：从IDA Pro数据库生成PDB的工具。
更新：2024 10 28语言：Python
FCATALOG：FCATALOG（功能目录）是一种以有效的方式找到不同二元斑点之间相似之处的机制。它对于识别新的二进制斑点非常有用，与以前遇到的二进制斑点有些相似。 FCATALOG的客户端是IDA插件，它允许一组反向工程师管理一个反向功能池。每当遇到新的二进制函数时，Fcatalog都可以将其与所有已知和先前反向的二进制函数进行比较。
更新：2016 08 19语言：Python
芬太尼：iDapython脚本，使修补变得非常容易。
更新：2022 10 12语言：Python
FindCrypt2：搜索已知与加密算法相关的常数。
更新：2006 01 30语言：C ++
FindCrypt-Yara：IDA Pro插件可找到加密常数（以及更多）
更新：2024 11 11语言：Python
FindFunc：高级过滤/发现功能。 FindFunc是一个IDA Pro插件，可找到包含特定汇编或字节模式的代码函数，引用某个名称或字符串，或符合各种其他约束。
更新：2024 09 15语言：Python
FindRPC：IDA脚本从二进制文件中提取RPC接口。
更新：2022 01 25语言：Python
Findyara：Ida Python插件以使用Yara规则扫描二进制文件。
更新：2021 12 28语言：Python
手指：二进制程序的功能符号识别引擎，旨在帮助安全研究人员在给定的二进制文件中识别未知库功能。
更新：2021 10 14语言：Python
Fingermatch：用于收集分析二进制文件的功能，数据，类型和评论的IDA插件，并在另一个二进制文件中匹配它们。
更新：2020 12 30语言：Python
Firmeye：在物联网固件（中文）中找到孔。
更新：2022 11 11语言：Python
公司负载器：自动确定从微控制器提取的固件图像的内存一部分。使用更简单的JSON文件的SVD加载程序的替代方案。
更新：2024 02 06语言：Python
第一：功能识别和恢复签名工具（第一）是IDA Pro的插件，该插件允许用户自动搜索和应用功能元数据（函数名称，参数名称，参数类型，注释等）从不同的IDB /用户提交。此功能类似于IDA的Lumina功能，该功能是在IDA 7.2中引入的，尽管首先使用功能元数据服务器地址是可配置的，并且第一个服务器代码是开源的，这意味着如果需要，用户可以设置私有元数据服务器，以供内部使用。 Cisco Talos还维护了一个社区数据库，并可以免费使用。首先支持IDA 6.9 SP1及以上。
更新：2024 06 19语言：Python
Flare-EMU：Flare-Emu与Unicorn的仿真框架（例如IDA Pro或Radare2）结合了一个支持的二进制分析框架，以为用户提供易于使用和灵活的界面，用于脚本仿真任务。它旨在处理为其支持的体系结构设置灵活且可靠的仿真器的所有管家，以便您可以专注于解决代码分析问题。目前，Flare-EMU支持X86，X86_64，ARM和ARM64架构。
更新：2024 10 27语言：Python
耀斑IDA分解器库（FIDL）：IDA Pro的分解器的理智API。
更新：2022 02 08语言：Python
耀斑插件：耀斑团队逆转存储库集合集合：shellcode哈希，结构typer，stackstrings，msdn注释，applyCalleeType，iDb2pat，argtracker，objc2_analyzer，irustrings，irustrings，ircod grafter，code Grafter，代码grafter
更新：2024 10 29语言：Python
FlirtDB：由社区驱动的IDA调情签名文件集合。
更新：2020 05 23
FLS加载程序：IFX iPhone Baseband Firmand Wares的IDA Pro Loader模块。基于Roxfan的通用散点机脚本。
更新：2012 04 19语言：Python
荧光：联合/突出显示功能呼叫指令
更新：2021 06 02语言：Python
FRAPL：FRAPL是一个逆向工程框架，旨在用Frida简化动态仪器。
更新：2016 12 26语言：Python
释放辩论者：免费提供所有文件的IDA Pro Debugger。
更新：2015 02 07语言：Python
弗里达：这是IDA Pro Thar使用Frida API的插件。主要是跟踪功能。
更新：2015 04 05语言：Python
朋友：灵活的注册/指令扩展器和文档。 Friend是创建的IDA插件，旨在改善拆卸，并将注册/指令文档直接带入IDA视图。 （另请参阅：艾米）
更新：2022 09 27语言：C ++
fugue FDB IDB出口商：IDA Pro的赋格数据库进口商和出口商。
更新：2023 06 02语言：C ++
funcap：此脚本记录函数呼叫（以及返回）在使用IDA调试器API的可执行文件上以及所有通过的参数。它将信息转储到文本文件中，并将其插入IDA的内联注释中。这样，通常会在分析恶意软件时进行行为运行时分析的静态分析，可以直接用运行时信息（例如在Function的参数中返回的解密字符串）馈送。
更新：2022 09 05语言：Python
FuncScanner：从IDA Pro数据库中收集扩展功能属性。这在没有或少量符号信息的反向工程代码中特别有用，嵌入式固件通常是这样。
更新：2020 12 06语言：Python
FunctionInliner：一个IDA插件，可简化已通过函数概述为代码大型优化的二进制文件的逆转。
更新：2024 07 01语言：Python
功能+：IDA Pro插件以使功能树视图。插件解析函数名称并按名称空间分组。
更新：2021 04 17语言：Python
功能标记器：此IDAPYTHON脚本标签子例程，根据其使用导入功能
更新：2021 05 26语言：Python
FunctionTrapperkeeper：用于编写和存储功能相关的注释的插件。文本输入在编辑窗口中并显示在预览窗口中。
更新：2023 03 04语言：Python
Funkbuster：用于分析，过滤和跟踪功能并调用流量的IDA插件。
更新：2023 11 06语言：Python
GameCube DSP：此项目为GameCube中存在的DSP和Wii增加了支持，即IDA，即交互式拆卸器[1]。这可以轻松分析DSP UCODE，处理交叉引用，控制流等等。
更新：2014年12 13语言：Python
GameCube扩展名：这是Gekko CPU配对的单个扩展指令插件IDA Pro 5.2
更新：2018 04 25语言：C ++
GameCube Rel Loader：Nintendo GameCube的.rel文件的IDA Pro加载器。基于RSO_IDA_LOADER。
更新：2022 06 10语言：Python
伽玛：IDA十六进制插件，用于突出显示您有趣的变量或结构成员。
更新：2020 07 31语言：Python
GandCrab String Decryptor: IDC script for decrypting strings in the GandCrab v5.1-5.3
Updated: 2019 04 24 Language: idc
garmin-ida-loader: IDA loader for Garmin firmwares.
Updated: 2013 05 30 Language: C++
gdbida: A visual bridge between a GDB session and IDA Pro's disassembler
Updated: 2018 04 23 Language: Python
genmc: Genmc is an IDAPython script/plugin hybrid that displays Hexrays decompiler microcode, which can help in developing microcode plugins.
Updated: 2022 11 13 Language: Python
genpatch: Plugin that generates a python script for patching binary from Patched Byte on IDA.
Updated: 2023 12 21 Language: Python
Geolocator: Lookup (geolocate) IP's and http/https addresses, using google maps, and MaxMind databases.
Updated: 2019 03 10 Language: Python
Gepetto: Query OpenAI's davinci-003 language model to speed up reverse-engineering.
Updated: 2024 11 17 Language: Python
Gepetto-ChatGPT: IDA plugin which queries OpenAI's ChatGPT model to speed up reverse-engineering (based on JusticeRage/Gepetto) (Chinese).
Updated: 2022 12 08 Language: Python
GhIDA: GhIDA is an IDA Pro plugin that integrates the Ghidra decompiler in IDA.
Updated: 2020 12 16 Language: Python
GhidraDec: Ghidra Decompiler Plugin for IDA Pro.
Updated: 2024 05 16 Language: C++
GoFastAnalyzer: Go fastcall analysis for ida decompiler.
Updated: 2024 05 13 Language: Python
golang_loader_assist: Making GO reversing easier in IDA Pro.
Updated: 2020 06 22 Language: Python
golang_struct_builder: Script that auto-generates structs and interfaces from runtime metadata found in golang binaries.
Updated: 2021 08 22 Language: Python
go_parser: Yet Another Golang binary parser for IDAPro. Inspired by golang_loader_assist and jeb-golang-analyzer, I wrote a more complete Go binaries parsing tool for IDAPro.
Updated: 2024 01 12 Language: Python
grap: Define and match graph patterns within binaries. grap takes patterns and binary files, uses a Casptone-based disassembler to obtain the control flow graphs from the binaries, then matches the patterns against them.
Updated: 2022 05 05 Language: Python
GraphGrabber: Grab full-resolution images of IDA graphs.
Updated: 2023 11 23 Language: Python
Graph Slick: Automated detection of inlined functions. It highlights similar groups of nodes and allows you to group them, simplifying complex functions. The authors provide an accompanying presentation which explains the algorithms behind the plugin and shows sample use cases.
Updated: 2014 11 20 Language: C++
GUID-Finder: Find GUID/UUIDs. The COM side of RE'ing (at least with "dead listing") can be pretty elusive. With this you can at least partially glean what interfaces and classes a target is using.
Updated: 2016 01 24 Language: Python
HashDB IDA: Malware string hash lookup plugin for IDA Pro. This plugin connects to the OALABS HashDB Lookup Service.
Updated: 2024 10 15 Language: Python
HeapViewer: An IDA Pro plugin to examine the heap, focused on exploit development.
Updated: 2022 07 25 Language: Python
heimdallr-ida: Plugin to enable linking to locations in an IDB with a ida:// URI (using the Heimdallr client).
Updated: 2023 10 18 Language: Python
herast: Framework to automate working with AST in IDA Pro.
Updated: 2024 04 03 Language: Python
Hexagon Processor Module: Hexagon (aka QDSP6) processor module for IDA Pro disassembler.
Updated: 2024 05 22 Language: C++
HexCopy: IDA plugin for quickly copying disassembly as encoded hex bytes.
Updated: 2021 10 11 Language: Python
HexExt: Improve the output of the hexrays decompiler through microcode manipulation.
Updated: 2019 08 04 Language: C++
Hexext: An old Hexrays plugin for IDA 7.0 that backported the microcode API. Manipulate the internal IR of the Hexrays decompiler with the aim of improving code generation.
Updated: 2019 08 04 Language: C++
Hex-Rays Block Highlighter: Highlight code blocks in the Hex-Rays decompiler output. In some cases the decompilation output can be quite hairy with lots of nested blocks and it can be hard to follow where one ends and the other begins. This plugin will highlight blocks in a sticky way, allowing one to navigate within the window while keeping the block highlight around.
Updated: 2022 04 17 Language: Python
HexRays CodeXplorer: The Hex-Rays Decompiler plugin for better code navigation in RE process. CodeXplorer automates code REconstruction of C++ applications or modern malware like Stuxnet, Flame, Equation, Animal Farm ...
Updated: 2024 08 25 Language: C++
HexRaysDeob: A Hex-Rays microcode API plugin breaking an obfuscating compiler used to create an in-the-wild malware family. The plugin is fully automatic and requires no user intervention; upon installation, the decompilation listings presented to the user will be free of obfuscation.
Updated: 2019 08 27 Language: C++
hexrays_hlight3: Port of HexLight (by Milan Bohacek) to Python 3: highlight matching curly brace in the pseudocode view and let/ you jump from one brace to the other.
Updated: 2024 08 10 Language: Python
hexraysIDAplus: Fold decompiled code.
Updated: 2021 11 26 Language: C++
HexRaysPyTools: Plugin assists in creation classes/structures and detection virtual tables. Best to use with Class Informer plugin, because it helps to automatically get original classes names.
Updated: 2020 02 15 Language: Python
hexrays_scripts: Various scripts for the Hexrays decompiler (kloppy, shuffle, arachno, IDA coffee, screenrecorder, ricky).
Updated: 2023 07 22 Language: Python
Hexrays Toolbox: Find code patterns within the Hexrays AST
Updated: 2023 06 20 Language: Python
HexRays Tools:
hexviewjump: IDA 7.0 plugins that helps to jump at hexview and extends JumpAsk expression.
Updated: 2019 02 27 Language: Python
HightLight: A plugin for ida of version 7.2 to help know F5 window codes better.
Updated: 2019 08 26 Language: C++
HRDEV: This is an IDA Pro Python plugin to make Hex-Rays Decompiler output bit more attractive. HRDEV plugin retrieves standard decompiler output, parses it with Python Clang bindings, does some magic, and puts back.
Updated: 2018 09 21 Language: Python
HrDevHelper: HexRays decompiler plugin that visualizes the ctree of decompiled functions using IDA's graph engine.
Updated: 2024 09 06 Language: Python
Hyara: A plugin to create pattern-matching rules. It helps creating rules for the YARA pattern-matching tool directly in IDA. It includes a simple detection of relocatable bytes in x86 opcodes for improved matching. It also provides a checker feature for testing the rules on the loaded binary.
Updated: 2024 10 18 Language: Python
iBoot64helper: IDAPython loader to help with AArch64 iBoot, iBEC, and SecureROM reverse engineering.
Updated: 2022 02 21 Language: Python
IBT: IDA Pro Back Tracer - Initial project toward automatic customized protocols structure extraction.
Updated: 2017 05 01 Language: Python
IDA2Obj: IDA2Obj is a tool to implement SBI (Static Binary Instrumentation).
Updated: 2021 09 24 Language: Python
ida2pwntools: IDA 7.0 plugins that helps to attach process created by pwntools and debug pwn.
Updated: 2023 03 29 Language: Python
IDA2SQL: As the name implies this plugin can be used to export information from IDA databases to SQL databases. This allows for further analysis of the collected data: statistical analysis, building graphs, finding similarities between programs, etc.
Updated: 2012 01 10 Language: Python
IDA 7.x VS2017 Sample Project: This is a sample Visual Studio 2017 (Community Edition) project for IDA 7.x plugins on Windows.
Updated: 2018 05 10 Language: C++
IDA7-SegmentSelect: IDA-SegmentSelect library by sirmabus, ported to IDA 7: A memory segment dialog to allow user to select one or more for processing.
Updated: 2018 01 08 Language: C++
ida-arm-system-highlight: This script will give you the list of ARM system instructions used in your IDA database. This is useful for locating specific low-level pieces of code (setting up the MMU, caches, fault handlers, etc.).
Updated: 2021 09 28 Language: Python
IDA-Assistant: IDA plugin to support automatic reverse engineering (using Claude-3 AI).
Updated: 2024 03 15 Language: Python
IDA Autoruns: IDA-Autoruns is a simple plugin to make a script run automatically every time you open a specific IDB.
Updated: 2024 02 27 Language: Python
IDA Batch Decompile: Batch decompile multiple files and their imports with additional annotations (xref, stack var size) to a pseudocode .c file.
Updated: 2018 07 12 Language: Python
IDABB: Loader for Blitz3D BlitzBasic Code (*.bbc).
Updated: 2023 02 13 Language: Python
ida bitfields: A simple IDA Pro plugin to make bitfields and bitflags in them easier to reason about.
Updated: 2024 04 06 Language: C++
ida_bochs_windows: Helper script for Windows kernel debugging with IDA Pro on native Bochs debugger (including PDB symbols).
Updated: 2023 08 11 Language: Python
IDA BPF Processor: BPF Bytecode Processor for IDA (python). Supports the old BPF bytecode only (no eBPF).
Updated: 2018 08 27 Language: Python
IDABuddy: IDABuddy is a reverse-engineer's best friend. Designed to be everything Clippy the Office Assistant was, and more!
Updated: 2017 09 17 Language: Python
IDA C#: Scripting IDA with C#, download here. (All in Chinese).
Updated: 2010 06 05
IDAChristmas: IDA pro Christmas Plugin: coloring plugin brings christmas mood into IDA-View.
Updated: 2022 03 15 Language: Python
IDA cLEMENCy Tools: Tools to work with the cLEMENCy architecture developed by LegitBS for use during the Defcon 25 Capture the Flag event.
Updated: 2017 07 31 Language: Python
ida-climacros: ida-climacros is a productivity plugin that allows you to define macros that will be expanded when interfacing with IDA's command line interpreter (in the output window).
Updated: 2023 05 15 Language: C++
IdaClu: Version-agnostic plugin for grouping similar functions. Pick an existing grouping algorithm or create your own.
Updated: 2024 11 17 Language: Python
ida-cmake: This is not an IDA plugin but a CMake project generator for IDA plugins development.
Updated: 2024 10 29
ida-cmake: CMake build scripts and a Python helper allowing compilation of C++ IDA plugins for Windows, macOS and Linux without much user effort.
Updated: 2017 09 02
IDACode: An integration for IDA and VS Code which connects both to easily execute and debug IDAPython scripts.
Updated: 2022 12 27 Language: Python
IDA Color Schemer: tool to easily design IDA color schemes outside IDA. This will hopefully allow simplifying & automating the generation of color schemes and help create colorblind-friendly settings.
Updated: 2019 01 05 Language: Python
ida-comment-view: A list of all the comments throughout the project in one convenient window (Chinese).
Updated: 2022 11 01 Language: C++
IDA Compare: IDA disassembly level diffing tool, find patches and modifications between malware variants. Helps you line up functions across two separate disassemblies. See mydoom A/B sample database and video trainer for usage.
Updated: 2019 05 30 Language: C++
idaConsonance: Consonance, a dark color scheme for IDA.
Updated: 2013 02 19
IDACyber: IDACyber is a plugin that visualizes an IDA database's content.
Updated: 2022 12 06 Language: Python
IDA Debug Bridge: IDA Debugger Module to Dynamically Synchronize Memory and Registers with third-party Backends (Tenet, Unicorn, GDB, etc.)
Updated: 2021 11 10 Language: C++
IDADeflat: Deflat plugin for ida pro (Chinese).
Updated: 2023 08 25 Language: Python
idadiff: IDAPython script to auto-rename subs using the MACHOC algorithm.
Updated: 2017 05 17 Language: Python
IDADiscord: Discord RPC plugin for IDA 7.x.
Updated: 2022 08 22 Language: C++
IDA EA: A set of exploitation/reversing aids for IDA. Provides a context viewer, instruction emulator, heap explorer, trace dumper, GDB integration, Styling
Updated: 2017 11 28 Language: Python
IDA Embed arch disasm: Allows you to disassemble x86-64 code (like inlined WOW64 one) while you using 32-bit IDA database. This would be helpfull to analyze WOW64 mode switches.
Updated: 2021 12 27 Language: Python
ida-emotionengine: Plugin that implements disassembly of PlayStation 2 COP2 MIPS instructions.
Updated: 2022 07 08 Language: Python
idaemu: Emulate code in IDA Pro. it is based on unicorn-engine.
Updated: 2016 12 15 Language: Python
idaenv: IDAPython Plugin Management. It is a plugin manager which bridges the gap between IDA Pro and the greater Python ecosystem of setuptools/virtualenv.
Updated: 2023 01 23 Language: Python
IDA-EVM: IDA Processor Module for the Ethereum Virtual Machine (EVM).
Updated: 2023 06 29 Language: Python
ida-extends: An extension module for IDAPython API focused on ease of development.
Updated: 2022 12 16 Language: Python
IDA Extrapass: An IDA Pro Win32 target clean up plug-in by Sirmabus. It does essentially four cleaning/fixing steps: Convert stray code section values to "unknown", fix missing "align" blocks, fix missing code bytes, and locate and fix missing/undefined functions.
Updated: 2018 07 13 Language: C++
IDA Eye: Plugin that enables you to perform different operations at the mnemonic level, independent of any particular processor type. These operations are facilitated through a parameterized template, which include the capabilities to de/highlight instructions, gather statistical information about the frequency of each instruction, and search for sequences of mnemonics, among other features.
Updated: 2018 03 10 Language: C++
IDA Fit: A ringcon-based IDA Pro controller for fitness lovers: manipulate IDA with ringcon & legging joycon.
Updated: 2024 01 26 Language: C++
IDA-For-Delphi: IDA Python Script to Get All function names from Event Constructor (VCL).
Updated: 2022 11 27 Language: Python
IDAFrida: IDA Frida Plugin for tracing something interesting. Plugin to generate FRIDA script.
Updated: 2022 12 18 Language: Python
ida_functioncolor: IDA Plugin to colorize function definition in pseudocode.
Updated: 2024 09 30 Language: Python
IDAFunctionsDecompiler: An IDAPython script to decompile all the functions of an executable and dump the pseudocode.
Updated: 2022 09 13 Language: Python
IDAFuzzy: IDAFuzzy is fuzzy searching tool for IDA Pro. This tool helps you to find command/function/struct and so on. (a la Mac Spotlight).
Updated: 2019 12 16 Language: Python
ida_game_elf_loaders (gel): A collection of IDA loaders for various game console ELF's: PS3, PSVita, WiiU.
Updated: 2019 10 03 Language: C++
IDA GCC RTTI: Class informer plugin for IDA which supports parsing GCC RTTI.
Updated: 2018 03 04 Language: C++
ida-genesis: Suite of IDA scripts for SEGA Genesis ROM hacking. ROM Loader, Branch Table Enumeration.
Updated: 2020 02 16 Language: Python
ida-genpatch: IDA Pro Plugin to automate patch generation for external tools.
Updated: 2024 10 09 Language: Python
IDAGolangHelper: Set of IDA Pro scripts for parsing GoLang types information stored in compiled binary.
Updated: 2022 07 29 Language: Python
ida_gpt: Basic idapython script to get you started with analyzing disassembly with GPT (OpenAI).
Updated: 2022 12 04 Language: Python
IdaGrabStrings: Search strings in a specified range of addresses and map it to a C struct.
Updated: 2017 05 12 Language: Python
IDA Graph Exporter: Layout-preserving graph view exporter plugin for IDA Pro (SVG/JSON).
Updated: 2023 04 24 Language: C++
IDAGraphity: An Interactive Binary Data Visualization Plugin for IDA Pro
Updated: 2022 05 05 Language: Python
ida-helpers: Collection of IDA helpers: Heap Viewer, Segment Dumper, Base Address, P/P/R (find pop/pop/ret gadgets), Func Complexity.
Updated: 2022 07 25 Language: Python
idahunt: idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro. It is command line tool to analyse all executable files recursively from a given folder. It executes IDA in the background so you don't have to open manually each file. It supports executing external IDA Python scripts.
Updated: 2023 09 21 Language: Python
IDA iBoot Loader: IDA loader for Apple's 64 bits iBoot, SecureROM and AVPBooter.
Updated: 2024 11 02 Language: Python
idaidle: idaidle is a plugin for the commercial IDA Pro disassembler that warns users if they leave their instance idling for too long. After a predetermined amount of idle time, the plugin first warns and later then saves the current disassemlby database and closes IDA.
Updated: 2021 02 17 Language: C++
IDA Images: Image preview plugin for IDA disassembler.
Updated: 2022 09 17 Language: Python
IDA IPython: This is a plugin to embed an IPython kernel in IDA Pro. The Python ecosystem has amazing libraries (and communities) for scientific computing. IPython itself is great for exploratory data analysis. Using tools such as the IPython notebook make it easy to share code and explanations with rich media. IPython makes using IDAPython and interacting with IDA programmatically really fun and easy.
Updated: 2017 08 05 Language: C++
IdaJava: Java integration for Hex-Rays IDA Pro. IdaJava is to Java like IDAPython is to Python: write IDA plugins in Java.
Updated: 2017 02 15 Language: C++
IDA JScript: Javascript IDE for IDA with Debugger, Syntax highlighting & Intellisense. Write plugins in Javascript.
Updated: 2022 05 19 Language: C++
ida-kallsyms: IDA script for parsing kallsyms.
Updated: 2023 09 27 Language: Python
ida_kcpp: An IDAPython module for enhancing c++ support on top of ida_kernelcache. Makes it more convenient to Reverse Engineer iOS kernelcaches.
Updated: 2023 06 29 Language: Python
IDAKern: Raw IDA Kernel API for IDAPython: An IDAPython wrapper for IDA Pro's kernel dll.
Updated: 2022 04 10 Language: Python
ida_kernelcache: An IDA Toolkit for analyzing iOS kernelcaches.
Updated: 2018 11 30 Language: Python
ida_kernelcache 7.5: An IDA Toolkit for analyzing iOS kernelcaches. This fork was updated to work on IDA7.5/Python3/iOS 14.0.1.
Updated: 2023 06 18 Language: Python
ida_kern_til: Tools for building TIL for IDA SDK & exporting them to python wrapper
Updated: 2023 06 26 Language: Python
IDA Key Checker: IDA Pro key checker tool, check IDA keys from the command line.
Updated: 2021 09 22 Language: C++
idalink: Some glue facilitating remote use of IDA Python API. idalink works by spawning an IDA CLI session in the background (in a detached screen session), and connects to it using RPyC.
Updated: 2020 07 14 Language: Python
ida-linux-alternatives: Analyze and annotate Linux kernel alternatives (content of .altinstructions and .altinstr_replacement sections).
Updated: 2021 12 14 Language: Python
idallama: Use llama2 from neuroengine to use AI to help with decompilation. Fork of Gepetto.
Updated: 2023 09 14 Language: Python
IDAMagicStrings: An IDA Python plugin to extract information from string constants. The current version of the plugin is able to:
idamagnum: A plugin for integrating MagnumDB requests within IDA. MagNumDB is a database that contains about 380,000 items. These items are constants, names, values all extracted from more than 6,000 header files (.h, .hxx, .hpp, .idl, etc.) provided by standard Windows and Visual Studio SDKs and WDKs.
Updated: 2020 04 10 Language: Python
IDA-MapSymbolParser: IDA Map File Symbol Renamer.
Updated: 2024 03 15 Language: Python
ida_medigate: Medigate plugin for c++ reverse engineering and other utils. Two parts:
IDAMetrics: IDA plugins for static software complexity metrics collection. Collects static software complexity metrics for binary executables of x86 architecture.
Updated: 2018 01 04 Language: Python
IDA Migrator: IDA Migrator plugin makes the job of migrating symbols and type informations from one IDA database instance to another. It will help migrating function names, structures and enums. This comes in handy when:
IDA-minsc: A plugin that assists a user with scripting the IDAPython plugin that is bundled with the disassembler. This plugin groups the different aspects of the IDAPython API into a simpler format which allows a reverse engineer to script different aspects of their work with very little investment.
Updated: 2024 02 21 Language: Python
IDA-names: IDA-names automatically renames pseudocode windows with the current function name.
Updated: 2022 12 24 Language: Python
ida-netnode: Humane API for storing and accessing persistent data in IDA Pro databases.
Updated: 2020 06 29 Language: Python
IDAngr: Use angr in the ida debugger generating a state from the current debug session.
Updated: 2020 07 22 Language: Python
IDA - Nightfall: A dark color theme for IDA Pro
Updated: 2019 06 25 Language: Python
IDAObjcTypes: A collection of (public and private) types and functions definitions useful for Objective-C binaries analysis.
Updated: 2024 09 15 Language: Python
IDA-Operand-Analysis: Operand Analysis with IDA Pro: per-operand read/write status, operand type, operand id.
Updated: 2022 06 05 Language: Python
idapatch: IDA plugin to patch IDA Pro in memory.
Updated: 2016 09 03 Language: C++
IDA Patcher: IDA Patcher is a plugin for Hex-Ray's IDA Pro disassembler designed to enhance IDA's ability to patch binary files and memory.
Updated: 2014 09 23 Language: Python
IDAPatchExpression: Patch Expression Plugin lets you search for an expression in IDA and replace all bytes in the matches to the selected value.
Updated: 2023 04 05 Language: Python
IDA Patchwork: Stitching against malware families with IDA Pro (tool for the talk at Spring9, https://spring2014.gdata.de/spring2014/programm.html). In essence, I use a somewhat fixed / refurbished version of PyEmu along IDA to demonstrate deobfuscation of the different patterns found in the malware family Nymaim.
Updated: 2014 11 04 Language: Python
IDA Pattern Search: IDAPatternSearch adds a capability of finding functions according to bit-patterns into the well-known IDA Pro disassembler based on Ghidra's function patterns format.
Updated: 2021 09 14 Language: Python
IDA P-Code: IDA plugin displaying the P-Code for the current function.
Updated: 2023 10 27 Language: Python
IDA PDB Loader (IPL): Simple plugin to load PDB symbols. The problem is that sometimes IDA crashes for me when trying to load symbols, so I came up with this quick and dirty alternative.
Updated: 2018 09 21 Language: Python
IDAPerl: Adds perl scripting support to ida.
Updated: 2016 07 24 Language: C++
idapin: A debugger backend for IDA Pro built on top of of Intel's PIN framework.
Updated: 2024 02 17 Language: C++
IDAPinLogger: Logs instruction hits to a file which can be fed into IDA Pro to highlight which instructions were called.
Updated: 2013 07 05 Language: C++
IDA Plugin Loader: Random IDA scripts, plugins, example code (some of it may be old and not working anymore).
Updated: 2019 10 27 Language: Python
idaplugins: Random IDA scripts, plugins, example code (some of it may be old and not working anymore).
Updated: 2017 02 05 Language: C++
idaplugins: Plugins for IDA: Plugin Proxy, Function Strings, LCA Graph, Autoenum, Autostruct, Function Flow, Quick Copy.
Updated: 2015 05 31 Language: Python
ida-plugins: Interactive IDA Plugin List: a great list of plugins for IDA which can be sorted and filtered dynamically to make it easier to find plugins of interest.值得一试！ :)
IDA-Plugin-Template: A basic C++ Plugin template for new IDA Plugins.
Updated: 2023 12 16 Language: C++
idapm: idapm is IDA Plugin Manager. It works perfectly on macOS, it probably works on Windows and Linux.
Updated: 2020 09 05 Language: Python
IDA Pro Auto Decompile: Get Decompile code without executing IDA Pro GUI using IDAPython and idat.exe or ida.exe.
Updated: 2022 10 19 Language: Python
IDA-Pro-Dark-Theme: Dark theme for IDA Pro <V7.
Updated: 2022 03 20
IDA Pro Function Hunter: Script to find interesting syscalls and patterns in binaries.
Updated: 2024 10 18 Language: Python
ida-pro-loadmap: Plugin for IDA Pro disassembler which allows loading .map files.
Updated: 2024 06 19 Language: C++
idapro_m6502: Extends existing support in IDA Pro for the m6502 processor family by adding gdb XML support, and step-over and type information support. Aim was to debug NES roms.
Updated: 2020 11 10 Language: Python
idapro_m68k: Extends existing support in IDA for the Motorola m68k processor family by adding gdb step-over and type information support. Enable type information support so you can press "y" on functions and have the parameters propagate inside and back out of the function.
Updated: 2019 07 14 Language: Python
IDA Pro SigMaker: Signature Maker Plugin for IDA Pro 8.1.
Updated: 2024 09 26 Language: C++
IDA Pro Solarized Theme: Solarized Theme for IDA Pro 7.3 and above.
Updated: 2022 08 14
IDA Pro Translator: Assists in decoding arbitrary character sets in an IDA Pro database into Unicode, then automatically invoking a web-based translation service (currently Google Translate) to translate that foreign text into English.
Updated: 2015 02 09 Language: Python
IDA Pro Unity PDB Downloader: Simple IDA Pro plugin to download Unity debug symbols from their symbol server.
Updated: 2024 04 11 Language: C++
ida-psx-gte: IDA Pro plugin that implements disassembly of PlayStation CP2 MIPS instructions.
Updated: 2024 08 10 Language: Python
IDAPyHelper: IDAPyHelper is a script for the Interactive Disassembler that helps writing IDAPython scripts and plugins.
Updated: 2022 10 18 Language: Python
ida-py-plugin-fix-function-tails: Plugin for fixing function tails.
Updated: 2023 03 11 Language: Python
IDAPython: IDAPython project for Hex-Ray's IDA Pro: the official source for the Python integration plugin for IDA.
Updated: 2024 02 21 Language: C++
IDA Python Embedded Toolkit: IDAPython scripts for automating analysis of firmware of embedded devices.
Updated: 2019 08 14 Language: Python
idapython_virtualenv: Multiples virtual envs support for IDAPython. Enable Virtualenv or Conda in IDAPython.
Updated: 2020 11 11 Language: Python
IDA-QuickRunPython-Plugin: Quickly execute any python script.
Updated: 2023 12 16 Language: Python
IDARay: IDARay is an IDA Pro plugin that matches the database against multiple YARA files. Maybe your rules are scattered over multiple YARA files or you simply want to match against as much rules as possible, IDARay is here to help.
Updated: 2018 11 16 Language: Python
IDARE: Automation plugins for various reversing tasks in IDA: JumpTableFuncRename, VulnCandidateFinder.
Updated: 2021 09 07 Language: Python
IdaRef: IDA Pro Full Instruction Reference Plugin - It's like auto-comments but useful.
Updated: 2021 10 20 Language: Python
IDA Rest: A simple REST-like API for basic interoperability with IDA Pro.
Updated: 2015 03 21 Language: Python
IDArling: IDArling is a collaborative reverse engineering plugin for IDA Pro and Hex-Rays. It allows to synchronize in real-time the changes made to a database by multiple users, by connecting together different instances of IDA Pro.
Updated: 2021 02 17 Language: Python
IDArling (Fork): IDArling is a collaborative reverse engineering plugin for IDA Pro and Hex-Rays. This is an actively maintained fork of the now-abandoned IDARling above.
Updated: 2022 08 02 Language: Python
Idarop: ROP database plugin for IDA: list and store all the ROP gadgets presents within the opened binary. (inspired from idasploiter).
Updated: 2018 06 05 Language: Python
ida-rpc: Discord rich presence plugin for IDA Pro 7.0
Updated: 2019 04 26 Language: C++
IDA-RPyC: IDA plugin that allows you call IDA python APIs from remote.
Updated: 2023 03 25 Language: Python
IDA-RunLastScript: IDA Pro plugin with a shortcut to run the most previously used script.
Updated: 2023 08 16 Language: Python
IDARustDemangler: Rust Demangler & Normalizer plugin for IDA, makes it easier to read and understand the code.
Updated: 2023 07 24 Language: Python
IDA-RustFunDemangle: Auto RUST function demangler plugin.
Updated: 2022 12 27 Language: Python
IDARustler: IDA plugin helping reverse-engineering rust binaries.
Updated: 2024 07 31 Language: Python
ida_rust_plugin: Write IDA-Plugin with rust language.
Updated: 2022 10 03 Language: rs
ida-rust-untangler: An IDA plugin for demangling Rust function names.
Updated: 2023 07 03 Language: Python
IDAscope: IDAscope is an IDA Pro extension with the goal to ease the task of (malware) reverse engineering with a current focus on x86 Windows. It consists of multiple tabs, containing functionality to achieve different goals such as fast identification of semantically interesting locations in the analysis target, seamless access to MSDN documentation of Windows API, and finding of potential crypto/compression algorithms.
Updated: 2022 08 02 Language: Python
IDA Screenshot: High-resolution screenshot capture plugin for IDA Pro.
Updated: 2024 05 31 Language: Python
idascripts: IDC and idapython script collection. enumerators.py contains several iterators.
Updated: 2020 11 25 Language: Python
ida-scripts: Misc IDA Pro scripts: cyclomatic_complexity, go_stripped_helper.
Updated: 2016 10 17 Language: Python
ida-scripts (cra0): Various IDA scripts for Reverse Engineering: Cra0 Signature Definition File Importer, Cra0 VTable Definition File Importer, cvutils-getoffset, cvutils-gotooffset.
Updated: 2024 10 29 Language: Python
idascripts (maiyao1988): Common IDA scripts for effective Reverse Engineering: comment-trace, dbg-loc-off, deopt, findsvc, get_all_code, get_all_svc, ida_trace, trace.
Updated: 2023 02 15 Language: Python
ida-scripts (sam-b): Dumping ground for whatever IDA Pro scripts I write: call_graph, export2neo4j, find_device_name, mem_complexity, most_refs.
Updated: 2016 10 09 Language: Python
idasec: IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform.
Updated: 2017 11 19 Language: Python
ida-settings: Fetch and set configuration values from IDAPython scripts.
Updated: 2020 09 09 Language: Python
idasetup: Custom setup.py file for IDA plugins.
Updated: 2017 10 28 Language: Python
IDAShell: IDAShell is a shell extension for launching IDA from the context menu of executables (Windows).
Updated: 2023 02 17 Language: C++
IDA_ShowCallStack: Display call stacks during debugging.
Updated: 2022 10 02 Language: Python
IDA Signature Matching Tool: Tool for searching signatures inside files, extremely useful as help in reversing jobs like figuring or having an initial idea of what encryption/compression algorithm is used for a proprietary protocol or file. It can recognize tons of compression, multimedia and encryption algorithms and many other things like known strings and anti-debugging code which can be also manually added since it's all based on a text signature file read at run-time and easy to modify.
Updated: 2018 07 13 Language: C++
idasix: IDAPython compatibility library. idasix aims to create a smooth ida development process and allow a single codebase to function with multiple IDA/IDAPython versions.
Updated: 2018 08 02 Language: Python
IDA Skins: Plugin providing advanced skinning support for the Qt version of IDA Pro utilizing Qt stylesheets, similar to CSS.
Updated: 2019 06 15 Language: Python
idasm: A Python Assembler Script Tool for IDA Pro based on "patching".
Updated: 2022 08 02 Language: Python
IDA Sploiter: IDA Sploiter is a plugin for Hex-Ray's IDA Pro disassembler designed to enhance IDA's capabilities as an exploit development and vulnerability research tool. Some of the plugin's features include a powerful ROP gadgets search engine, semantic gadget analysis and filtering, interactive ROP chain builder, stack pivot analysis, writable function pointer search, cyclic memory pattern generation and offset analysis, detection of bad characters and memory holes, and many others.
Updated: 2019 05 13 Language: Python
IDA Stealth: IDAStealth is a plugin which aims to hide the IDA debugger from most common anti-debugging techniques. The plugin is composed of two files, the plugin itself and a dll which is injected into the debuggee as soon as the debugger attaches to the process. The injected dll actually implements most of the stealth techniques either by hooking system calls or by patching some flags in the remote process.
Updated: 2014 09 14 Language: C++
IDA StrikeOut: IDA strike-out: A Hex-Rays decompiler plugin to patch the Ctree (eg remove statements).
Updated: 2024 08 22 Language: C++
IDA StringCluster: This plugin extends IDA Pro's capabilities to display strings within the binary by clustering found strings on a per-function basis.
Updated: 2018 03 14 Language: Python
IDAStringFindNet: String search plugin (Chinese).
Updated: 2022 09 17 Language: C++
IDA-String-Reference-Locator: Finds all first occurring string references near another reference.
Updated: 2021 12 16 Language: C++
IDASync: A lovely IDA collaboration plugin for IDA 6.8 (x86 & x64) by @Freeeaky.
Updated: 2018 11 02 Language: C++
IDA Taco: Bring Cuckoo Sandbox-generated output into IDA Pro to assist in reverse engineering malware as well as combining some commonly used tools into one UI.
Updated: 2016 06 14 Language: Python
IDATag: Tag explorer for IDA Pro. The plugin leverages IDA as a platform to map, explore, and visualize collected tags. Tags can come from multiple sources such as IDA itself or different other clients.
Updated: 2019 07 19 Language: C++
IdaThemer: Seamlessly convert your favorite Visual Studio Code themes to IDA Pro themes.
Updated: 2024 01 26 Language: go
IDA Toolbag: The IDA Toolbag plugin provides many handy features, such as:
IDATopaqueminator: IDA plugin for simple opaque predicates removal using symbolic execution with angr.
Updated: 2023 09 19 Language: Python
idatrace2tree: A tool for converting a trace obtained from IDA PRO to a text tree view.
Updated: 2022 06 23 Language: C++
IDAtropy: IDAtropy is a plugin for Hex-Ray's IDA Pro designed to generate charts of entropy and histograms using the power of idapython and matplotlib.
Updated: 2021 04 16 Language: Python
IDAVenv: An IDAPYthon plugin to create and use Python virtual environments.
Updated: 2024 08 22 Language: Python
ida_vmware_windows_gdb: Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols).
Updated: 2023 08 11 Language: Python
ida_vmx128_helper: Plugin to fix misinterpreted VMX128 A register in IDA.
Updated: 2024 03 03 Language: Python
IDAVSCode: Debug IDAPython in VSCode. (docs in Chinese).
Updated: 2023 03 20 Language: Python
IdaVSHelp: IDAPython plugin to integrate Visual Studio Help Viewer in IDA Pro >= 6.8
Updated: 2017 05 13 Language: Python
idaware: Create python hooks and (x64) AoB signatures in Ida Pro.
Updated: 2024 01 14 Language: Python
idawasm: These IDA Pro plugins add support for loading and disassembling WebAssembly modules.
IDA Wax: IDA x86 Executable Analysis Cleanup Plugin.
Updated: 2022 09 04 Language: C++
idawilli: IDA Pro resources, scripts, and configurations.
Updated: 2024 03 21 Language: Python
IdaWorkSpace: IDA structure build plugin. Assist the reversing of multiple files, handles interdependencies.
Updated: 2022 08 06 Language: Python
idax: idax is a set of C++ extensions for the IDASDK. These extensions are a work in progress and are not meant to be used in production code yet. As of now, only my personal IDA plugins use idax.
Updated: 2024 08 02 Language: C++
IDA x64dbgExport: A binary x64dbg debugger export plugin for IDA Pro. A binary plugin version of mrexodia's official Python version (x64dbgida) but only with an export, no 'import' option.
Updated: 2022 01 15 Language: C++
idaxex: Xbox360/Xenon loader plugin for IDA 7.2+, supporting most known Xbox360/Xenon .XEX executable file formats.
Updated: 2024 10 30 Language: C++
IDA Xtensa: This is a processor plugin for IDA, to support the Xtensa core found in Espressif ESP8266. It does not support other configurations of the Xtensa architecture, but that is probably (hopefully) easy to implement.
Updated: 2019 08 20 Language: Python
ida_yara: A python script that can be used to scan data within in an IDB using Yara.
Updated: 2018 09 04 Language: Python
ida-yara-processor: Compiled YARA Rules Processor for IDA.
Updated: 2019 01 22 Language: Python
idb2pat: IDB to Pat, fixed to work with IDA 6.2. Create patterns for IDA objects.
Updated: 2011 10 08 Language: C++
idb-import-plugin: IDA Database Importer plugin for Binary Ninja, written in Rust.
Updated: 2024 09 13 Language: rs
idbutil: IDBTOOL - Library and tool for reading IDApro databases. (See Python version 'pyidbutil')
Updated: 2023 11 08 Language: C++
idcinternals: IDA plugin investigating the internal representation of IDC scripts
Updated: 2023 10 27 Language: C++
idenLib: Library Function Identification plugin for IDA Pro.
Updated: 2019 02 26 Language: Python
IFL: Interactive Functions List is an user-friendly way to navigate between functions and their references.
Updated: 2024 10 30 Language: Python
ifred: IDA command palette & more (Ctrl+Shift+P, Ctrl+P).
Updated: 2024 10 25 Language: C++
IISHelper: IDA Pro plugin to aid with the analysis of native IIS modules.
Updated: 2024 08 01 Language: Python
import-kallsyms: IDA Pro Plugin to import /proc/kallsyms for Linux Kernel.
Updated: 2024 04 23 Language: Python
In Too Deep: IDA Folder Management Made Easy.
Updated: 2024 11 09 Language: Python
IPyIDA: PyIDA is a python-only solution to use a IPython console in the context of IDA Pro. It spawns an IPython kernel that you can connect to with ipython console --existing in your shell or by opening a QT Console window in IDA Pro with <Shift-.>
Updated: 2024 09 06 Language: Python
JARVIS: Just Another ReVersIng Suite: a small bughunting suite comprising three elements: a fuzzer, a tracer based on INTEL PIN, a plugin for IDA Pro thought to assist you with the most common reversing tasks. It integrates with the tracer.
Updated: 2018 10 19 Language: Python
JNIDA: Helps to rename JNI native methods and restore their C signatures
Updated: 2024 08 19 Language: Python
jni_helper: Find JNI function signatures in APK, Load JNI function signatures and apply to IDA-Pro
Updated: 2024 10 29 Language: Python
Kam1n0: Kam1n0 is a scalable system that supports assembly code clone search. It allows a user to first index a (large) collection of binaries, and then search for the code clones of a given target function or binary file. Kam1n0 tries to solve the efficient subgraph search problem (ie graph isomorphism problem) for assembly functions.
Updated: 2023 02 27 Language: Python
Karta: "Karta" (Russian for "Map") is a source code assisted fast binary matching plugin for IDA. Karta identifies and matches open-sourced libraries in a given binary using a unique technique that enables it to support huge binaries (> 200,000 functions) with almost no impact on the overall performance.
Updated: 2022 03 15 Language: Python
Keypatch: A multi-architecture assembler for IDA. Keypatch allows you enter assembly instructions to directly patch the binary under analysis. Powered by Keystone engine.
Updated: 2024 09 06 Language: Python
kirk: Theoretical Processor Module for IDA Pro.
Updated: 2024 08 17 Language: C++
kpwd: Keep the pseudo-code interface display while debugging.
Updated: 2022 06 01 Language: Python
Labeless: Labeless is a plugin system for dynamic, seamless and realtime synchronization between IDA Database and Olly. Labels, function names and global variables synchronization is supported. Labeless provides easy to use dynamic dumping tool, which supports automatic on-the-fly imports fixing as well as convenient tool for IDA-Olly Python scripting synergy.
Updated: 2022 03 25 Language: C++
LazyIDA: LazyIDA lets you perform many tasks simply and quickly (eg, remove function return type in Hex-Rays, convert data into different formats, scan for format string vulnerabilities and a variety of shortcuts)
Updated: 2024 11 11 Language: Python
lib2smda: Helper tool to use IDA Pro to convert lib files into SMDA format.
Updated: 2023 08 23 Language: Python
Lighthouse: Lighthouse is a Code Coverage Plugin for IDA Pro. The plugin leverages IDA as a platform to map, explore, and visualize externally collected code coverage data when symbols or source may not be available for a given binary.
Updated: 2024 02 05 Language: Python
linux_kernel_debug_disassemble_ida_vmware: Helper script for Linux kernel disassemble or debugging with IDA Pro on VMware + GDB stub (including some symbols helpers).
Updated: 2023 08 11 Language: Python
LLVMAnalyzer: Based on a retdec open source decompiler tool and on the LLVM compiler architecture, the author integrates the klee symbolic execution tool, and dynamically simulates the decompiled llvm ir (intermediate instruction set) operation through the Symbolic Execution engine. （中国人）。
Updated: 2022 04 06 Language: C++
lm32: LatticeMico32 IDA Pro Processor Module.
Updated: 2024 08 17 Language: C++
LoadProcConfig: LoadProcConfig is an IDA plugin to load processor configuration files.
Updated: 2022 09 27 Language: C++
Localxrefs: Finds references to any selected text from within the current function.
Updated: 2021 06 02 Language: Python
Lucid: Lucid is a developer-oriented IDA Pro plugin for exploring the Hex-Rays microcode. It was designed to provide a seamless, interactive experience for studying microcode transformations in the decompiler pipeline.
Updated: 2020 09 15 Language: Python
Lumen: A private Lumina server for IDA Pro written in Rust.
Updated: 2024 08 24 Language: rs
lumina-go: A Go library speaking (IDA Pro) lumina protocol, and a proxy server that may help if you have any privacy concerns using the Hex-Rays' official lumina server.
Updated: 2023 06 15 Language: go
MadNES: This plugin exports IDA names to FCEUXD SP symbols. These can be loaded by FCEUXD SP to allow symbolic debugging.
Updated: 2012 09 12 Language: C++
mark_executed_code: Mark the code which is executed while debugging, including pseudo-code and assembly code.
Updated: 2023 11 27 Language: Python
Match4IDA: Helps convert relative offsets to linear addresses pulled from rule engines like YARA and ROST, with a UI to navigate between them.
Updated: 2023 09 14 Language: Python
MazeWalker: Toolkit for enriching and speeding up static malware analysis. MazeWalker's goal is to reduce malware analysis time by automating runtime data collection and better visualization eventually helping a researcher to concentrate on static analysis and less on its dynamic part.
Updated: 2022 01 16 Language: Python
M-CORE_IDA-Pro: M-CORE processor support module for IDA Pro (Motorola low-power microcontroller).
Updated: 2024 04 20 Language: C++
MED17 parser: Python script to parse MED17 / DSG files.
Updated: 2024 02 23 Language: Python
Memory Loader: IDA loader that allows loading malicious buffers to IDA without writing them to the disk.
MicroAllegrex: Allegrex Plugin for IDA Hexrays Mips Decompiler, to help with basic decompilation of Allegrex specific opcodes.
Updated: 2024 05 23 Language: Python
MicroAVX: An AVX Lifter for the Hex-Rays Decompiler. It adds partial support for a number of common instructions from Intel's Advanced Vector Extensions (AVX). This plugin demonstrates how the Hex-Rays microcode can be used to lift and decompile new or previously unsupported instructions.
Updated: 2020 07 22 Language: Python
mIDA: MIDL Decompiler for IDA. Extracts RPC interfaces and recreates the associated IDL file. mIDA supports inline, interpreted and fully interpreted server stubs.
Updated: 2022 11 29 Language: C++
MILF: An IDA Pro swiss army knife (with a sexy name!) MILF is an IDA Pro plugin which automates several typical tasks in a RE session.
Updated: 2013 03 15 Language: Python
mipsAudit: Static scan script, assembly audit helper script (IDA MIPS静态扫描脚本，汇编审计辅助脚本).
Updated: 2021 11 25 Language: Python
mipslocalvars: Names stack variables used by the compiler for storing registers on the stack, simplifying stack data analysis (MIPS only).
Updated: 2021 06 02 Language: Python
mipsrop:
Missing Link: IDA Plugin that fills in missing indirect CALL & JMP target information in TTD windows trace files.
Updated: 2023 06 27 Language: C++
Mizari's scripts: Various scripts for IDA Pro: const_adder, demangler, detect_offset, fastclear, recolour_calls, remove_spaces_from_structs.
Updated: 2023 06 08 Language: Python
mkYARA IDA Plugin: IDA plugin to easily create YARA signatures with mkYARA.
Updated: 2019 12 16 Language: Python
mrfarhadi-IDA_Plugin: Extract Call Graphs and Control Flow Graphs from an assembly file.
Updated: 2015 10 20 Language: Python
MrsPicky: An IDAPython decompiler script that helps auditing calls to the memcpy() and memmove() functions.
Updated: 2024 03 14 Language: Python
msdnGrab: Allows a user to grab documentation from online MSDN for a given function name in IDA, and import the documentation as a repeatable comment for that function. Handles queries for the Win32 API and C/C++.
Updated: 2012 07 22 Language: Python
MSDN Helper: This tool will help you to get to Offline MSDN help while using IDA Pro.
Updated: 2016 09 05
MSDN IDA Pro Plugin: Imports MSDN documentation into IDA Pro (by zynamics).
Updated: 2012 01 10 Language: Python
msp430emu: An msp430 emulator plugin for Ida Pro.
Updated: 2019 03 22 Language: C++
myda: General Purpose IDA Plugin, currently a wrapper around vmrun to facilitate remote debugging of Windows PEs.
Updated: 2023 11 20 Language: Python
MyNav: MyNav is a plugin for IDA Pro to help reverse engineers in the most typical task like discovering what functions are responsible of some specifical tasks, finding paths between "interesting" functions and data entry points.
Updated: 2010 09 03 Language: C++
nao: nao (no-meaning assembly omitter) is dead code eliminator plugin for IDA pro.
Updated: 2021 05 05 Language: Python
navigation_plugin: Help navigate among the large number of unexplored functions in the ida pro disassembler.
Updated: 2023 09 03 Language: Python
NDSLdr: Nintendo DS ROM loader module for IDA Pro.
Updated: 2017 02 05 Language: C++
NECromancer: IDA Pro V850 Processor Module Extension.
Updated: 2018 05 08 Language: Python
nesdbg: Failed attempt in creating an IDA Pro debugger plugin for NES ROMs
Updated: 2018 12 18 Language: C++
NES Loader: Nintendo Entertainment System (NES) ROM loader module for IDA Pro.
Updated: 2020 02 26 Language: C++
NES Loader (py): Nintendo Entertainment System (NES) ROM loader module for IDA Pro (Python port for IDA 7.x).
Updated: 2021 07 15 Language: Python
NIOS2: An IDA Pro processor module for Altera Nios II Classic/Gen2 microprocessor architecture.
Updated: 2018 09 24 Language: Python
nmips: IDA plugin to enable nanoMIPS processor support. This is not limited to simple disassembly, but fully supports decompilation and even fixes up the stack in certain functions using custom microcode optimizers. It also supports relocations and automatic ELF detection (even though the UI might not show it, it kinda works). Debugging also works thanks to GDB and it also does some other stuff, such as automatic switch detections.
Updated: 2021 09 15 Language: Python
NOP_Plugin: Plugin for NOPing instructions in IDA.
Updated: 2023 04 07 Language: Python
NoVmpy: Proof of Concept, IDA integration of a static devirtualizer for VMProtect x64 3.x. powered by VTIL.
Updated: 2023 04 22 Language: Python
NSIS Reversing Suite: NRS is a set of Python libraries used to unpack and analyse NSIS installer's data. It also features an IDA plugin used to disassemble the NSIS Script of an installer.
Updated: 2023 05 15 Language: Python
obfDetect: A plugin to automatically detect obfuscated code and state machines in binaries.
Updated: 2022 04 29 Language: Python
Obpo: Obfuscated Binary Pseudocode Optimizer: Obpo is a microcode-based hex-rays optimizer, uses techniques such as static-program-analysis, dataflow-tracking, concolic-execution to rebuild the obfuscated control flow (such as: OLLVM).
Updated: 2023 12 05 Language: Python
oldidc: IDA Python's idc.py <= 7.3 compatibility module.
Updated: 2019 10 11 Language: Python
OpenLumina: IDA plugin that allows connecting to third party Lumina servers.
Updated: 2024 03 17 Language: C++
Optimice: This plugin enables you to remove some common obfuscations and rewrite code to a new segment. Currently supported optimizations are: Dead code removal, JMP merging, JCC opaque predicate removal, Pattern based deobfuscations
Updated: 2012 08 05 Language: Python
Oregami: A plugin analyzing the current function to find the usage frame of registers. Oregami eases the work when tracking the use of a register within a function, by limiting the search to occurrences related to the one currently highlighted instead of the whole function. It also allows localized renaming of the registers, and batch type giving to multiple opcodes using the registers.
Updated: 2023 06 08 Language: Python
Package Manager: Packages for IDA Pro (written in python but supports all).
Updated: 2021 01 04 Language: Python
PacXplorer: IDA plugin to find code cross references to virtual functions using PAC codes in ARM64e binaries.
Updated: 2022 03 16 Language: Python
patchdiff2: IDA binary differ.
Updated: 2015 04 09 Language: C++
Patching: Interactive Binary Patching for IDA Pro. This project extends the popular IDA Pro disassembler to create a more robust interactive binary patching workflow designed for rapid iteration.
Updated: 2022 02 10 Language: Python
PCodeGPT: A ChatGPT based IDA automated analysis plugin (based off gepetto / WPeChatGPT).
Updated: 2023 12 29 Language: Python
PE Tree: Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5.
Updated: 2021 05 17 Language: Python
Pigaios: Pigaios ('πηγαίος', Greek for 'source' as in 'source code') is a tool for diffing/matching source codes directly against binaries.
Updated: 2022 07 19 Language: Python
pikabot-deobfuscator: An IDA plugin to deobfuscate Pikabot's strings using RC4 and AES.
Updated: 2024 04 08 Language: C++
Pinokio: Use OpenAI's davinci-003 model to help with vulnerabilities research on functions decompiled by IDA Pro.
Updated: 2022 12 27 Language: Python
pixel_loader: An IDA Pro loader module for Pixel phone bootloader (abl stage), setting correct offsets, fixing function names, adding some C-style structs and annotations.
Updated: 2024 08 25 Language: Python
Plus22: Plus22 transforms x86_64 executables to be processed with 32-bit version of Hex-Rays Decompiler.
Updated: 2015 01 11 Language: PHP
Plympton: A gem to read program disassembly from a YAML dump. The YAML dump is generated from an IDA Pro python script. This script is included along with this Gem (func.py)
Updated: 2014 11 25 Language: Python
Pomidor: IDA Pomidor is a plugin for Hex-Ray's IDA Pro disassembler that will help you retain concentration and productivity during long reversing sessions by encouraging you to take breaks.
Updated: 2014 09 23 Language: Python
Ponce: Taint analysis and symbolic execution over binaries in an easy and intuitive fashion.
Updated: 2023 05 11 Language: C++
PopPySig: Make byte signatures and scan for byte signatures.
Updated: 2022 11 27 Language: Python
PortAddresses: IDA plugin aiding in porting memory addresses from one build executable to another.
Updated: 2024 02 01 Language: Python
Post HexRays ANalysis Kit: Phrank helps with structure analysis and function pointers. Phrank works on top of HexRays ctrees.
Updated: 2024 03 20 Language: Python
PPLorer: Plugin that resolves PPL calls to the actual underlying PPL function.
Updated: 2023 02 28 Language: Python
Prefix: Prefix is a small function prefixing plugin for IDA Pro. The plugin augments IDA's function renaming capabilities by adding a handful of convenient prefixing actions to relevant right click menus.
Updated: 2020 04 24 Language: Python
Processor changer: Change processor without restarting IDA.
Updated: 2014 08 11 Language: Python
proc_mem_ida_loader: A /proc/mem IDA loader to snapshot a running process. This IDA loader can snapshot a running 32-bit or 64-bit Linux process, as well as 32-bit and 64-bit WINE processes on Linux, load it into IDA with the actual processes memory permissions, and then apply DWARF symbols using IDA's built-in DWARF loader for each loaded binary (that has DWARF symbols)!
Updated: 2022 05 26 Language: Python
Protobuf Finder: IDA plugin for reconstructing original .proto files from binary.
Updated: 2022 06 27 Language: Python
ps2_ida_vu_micro: Plugin that tries to find and disassemble vu microcode in ps2 executables.
Updated: 2024 11 16 Language: Python
PS5 .elf: PS5 elf loader for IDA 7.5
Updated: 2024 01 23 Language: Python
PSIDA: PSIDA is a collection of useful Python scripts for IDA. At this point, PSIDA focuses on collaborative reverse engineering in two models.
Updated: 2018 08 03 Language: Python
pwndbg: GDB plug-in that makes debugging with GDB suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. NOTE: IDA integration through small XMLRPC server.
Updated: 2024 11 18 Language: Python
pyhexraysdeob: A port of Rolf Rolles' HexRaysDeob to Python.
Updated: 2019 10 15 Language: Python
pyidbutil: IDBTOOL - Library and tool for reading IDApro databases. (See C++ version 'idbutil').
Updated: 2024 07 27 Language: Python
pypyc2c: PowerPC to C plugin for IDA converted to python.
Updated: 2024 11 15 Language: Python
pySigMaker: Port of IDA plugin SigMaker-x64 to IDAPython: plugin to make creating code signatures quick and simple.
Updated: 2022 10 03 Language: Python
pytest-idapro: A pytest module for The Interactive Disassembler and IDAPython; Record and Replay IDAPython API, execute inside IDA or use mockups of IDAPython API.
Updated: 2018 11 03 Language: Python
Python Editor: Python editor based IDA Pro. The plugin helps python devs with scripting and running python scripts, and creating them. IT have many functions, code recognition and more.
Updated: 2020 12 25 Language: Python
python-idb: not an IDA Pro plugin but allows to open IDA databases ( *.idb and *.i64 ) and run a simple subset of IDAPython API on top of them, without the IDA Pro itself.
Updated: 2021 08 06 Language: Python
qb-sync: qb-sync is an open source tool to add some helpful glue between IDA Pro and Windbg. Its core feature is to dynamically synchronize IDA's graph windows with Windbg's position.
Updated: 2015 07 13 Language: Python
QScripts: An IDA scripting productivity plugin. With this plugin, you will be able to easily write and test scripts using your favorite editor. ida-qscripts will automatically detect changes to your script or one of its dependencies and automatically reload them and re-execute your script.
Updated: 2024 10 10 Language: C++
QtMetaParser: IDA plugin to parse qt meta data.
Updated: 2023 05 16 Language: C++
QuakeVM: Loader and processor modules for the Quake 3 Virtual Machine used in the video game and the Rhadamanthys malware.
Language: C++
Qualcomm Loader: IDA loader plugin for Qualcomm Bootloader Stages
Updated: 2014 01 23 Language: C++
quicksec: IDAPython script for quick vulnerability analysis.
Updated: 2014 05 10 Language: Python
Quokka: A Fast and Accurate Binary Exporter. From the disassembly of a program, it generates an export file that can be used without the disassembler.
Updated: 2024 05 28 Language: C++
RDR2 IDA Native Renamer: A simple python script which names all natives for Red Dead Redemption 2.
Updated: 2023 09 08 Language: Python
Rebased Comment: Rebase comments when you rebase your IDA database, by searching for hexadecimal numbers that are within range of your program's segments, and fixing your comments after every rebase.
Updated: 2020 04 06 Language: Python
Recompiler: IDA recompiler, no docs no help.
Updated: 2014 12 08 Language: Python
RECON2017: RECON 2017 IDA skin & color scheme
Updated: 2017 06 16 Language: Python
Reef: IDAPython plugin for finding Xrefs from a function.
Updated: 2016 07 14 Language: Python
Referee: Find where structure members are used (Python port of James Koppel's Referee IDA plugin).
Updated: 2021 02 19 Language: Python
RefHUnter: User-friendly reference finder in IDA. RefHunter provides a summary of references for a function, which includes more information than the built-in “Function calls” widget.
Updated: 2022 12 17 Language: Python
REmatch: REmatch, a complete binary diffing framework that works by revealing and identifying previously reverse engineered similar functions and migrating documentation and annotations to current IDB.
Updated: 2018 11 28 Language: Python
Renamaida: Create your own signature database and rename open library functions.
Updated: 2023 04 21 Language: Python
REobjc: REobjc is an IDAPython module designed to make proper cross references between calling functions and called functions in Objective-C methods. The current form of the module supports X64, and will be updated to also support ARM in the future.
Updated: 2018 04 26 Language: Python
RePEconstruct: RePEconstruct is a tool for automatically unpacking binaries and rebuild the binaries in a manner well-suited for further analysis, specially focused on further manual analysis in IDA pro.
Updated: 2016 10 28
RE Plugins: Misc reverse engineering plugins released over the year: IDA_Jscript, IDA_JScript_w_DukDbg, IDASrvr, IDASRVR2, uGrapher, IdaVbScript, IdaUdpBridge, Wingraph32, gleegraph.
Updated: 2020 10 27 Language: C++
REProgram: A way of making almost-arbitrary changes to an executable when run under a debugger -- even changes that don't fit.
Updated: 2011 12 27 Language: C++
resourcer: PE file resource enumeration plugin for IDA.
Updated: 2019 06 19 Language: C++
retdec: IDA plugin for retdec - a retargetable machine-code decompiler based on LLVM.
Updated: 2024 03 01 Language: C++
ret-sync: ret-sync stands for Reverse-Engineering Tools synchronization. It's a set of plugins that help to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA disassembler. The underlying idea is simple: take the best from both worlds (static and dynamic analysis).
Updated: 2023 01 10 Language: Python
REtypedef: REtypedef is an IDA PRO plugin that allows defining custom substitutions for function names. It comes with a default ruleset providing substitutions for many common STL types.
Updated: 2015 01 03 Language: C++
RevEng.AI IDA Plugin: RevEng.AI IDA Pro Plugin.
Updated: 2024 10 22 Language: Python
Revsync: Realtime sync plugin for IDA Pro, Binary Ninja and Vivisect: realtime cross-tool collaborative reverse engineering.
Updated: 2022 05 27 Language: Python
rizzo: Identifies and re-names functions between two or more IDBs based on:
rso_ida_loader: First step at Nintendo GameCube RSO/REL loading in IDA.
Updated: 2013 09 02 Language: C++
RTTI Parser: IDA script to parse RTTI information in executable.
Updated: 2023 03 10 Language: Python
rust_reverser_helper: Ida Pro plugin to aid in reverse engineering Rust binaries.
Updated: 2023 05 10 Language: Python
Samsung S4 Rom Loader: IDA Pro Loader Plugin for Samsung Galaxy S4 ROMs
Sark: Sark, (named after the notorious Tron villain,) is an object-oriented scripting layer written on top of IDAPython. Sark is easy to use and provides tools for writing advanced scripts and plugins.
Updated: 2024 03 13 Language: Python
ScatterBee_Analysis: IDA scripts to aid analysis of files obfuscated with ScatterBee.
Updated: 2023 01 06 Language: Python
ScratchABit: ScratchABit is an interactive incremental disassembler with data/control flow analysis capabilities. ScratchABit is dedicated to the efforts of the OpenSource reverse engineering community (reverse engineering to produce OpenSource drivers/firmware for hardware not properly supported by vendors).
Updated: 2020 11 25
Screen recorder: IDA Pro Qt Plugin for recording reversing sessions.
Updated: 2016 07 27 Language: Python
Sega Genesis/Megadrive Tools 2: Special IDA Pro tools for the Sega Genesis/Megadrive romhackers. Updated to at least IDA 7.5
Updated: 2024 10 25 Language: C++
Seida: Symbolic Execution plugin for IDA.
Updated: 2022 09 15 Language: Python
Shannon Baseband Loader: Exynos Modem / Shannon baseband firmware loader for IDA Pro 8.x.
Updated: 2024 11 06 Language: Python
ShannonRE: Helpful scripts for various tasks performed during reverse engineering the Shannon Baseband with the goal to exploit the Samsung Galaxy S6.
Updated: 2016 08 02 Language: Python
ShowComments: Conveniently view all comments in a database, and navigate quickly between them.
Updated: 2024 03 29 Language: Python
Sig Maker: Can create sigs automatically and has a wide variety of functions.
Updated: 2022 07 16 Language: C++
SigMakerEx: Enhanced IDA Pro signature generator plugin.
Updated: 2022 08 07 Language: C++
SimplifyGraph: An IDA Pro plugin to assist with complex graphs.
Updated: 2018 01 29 Language: C++
Simulator: IDASimulator is a plugin that extends IDA's conditional breakpoint support, making it easy to augment / replace complex executable code inside a debugged process with Python code.
Updated: 2014 09 02 Language: Python
Sk3wlDbg: Debugger plugin for IDA Pro. Front end for using the Unicorn Engine to emulate machine code that you are viewing with IDA.
Updated: 2023 04 17 Language: C++
SmartDec Plugin: SmartDec integration for IDA. SmartDec is a native code to C/C++ decompiler.
Updated: 2015 05 06 Language: C++
SmartJump: IDA Pro plugin to enhance the JumpAsk 'g' keyboard shortcut.
Updated: 2023 07 24 Language: Python
Snippet Detector: Snippet Detector is an IDA Python scripts project used to detect snippets from 32bit disassembled files. snippet is the word used to identify a generic sequence of instructions (at the moment a snippet is indeed a defined function). The aim of the tool is to collect many disassembled snippets inside a database for the detection process.
Updated: 2015 04 24 Language: Python
Snowman Decompiler: Snowman is a native code to C/C++ decompiler. Standalone and IDA Plugin.源代码
Updated: 2023 03 08 Language: C++
solana-ebpf-ida-processor: Solana Virtual Machine bytecode processor for IDA Pro (eBPF-based).
Updated: 2024 01 28 Language: Python
SpiritIDAPlugin: SpiritIDAPlugin is an IDAPython-based plugin that offers an assortment of MapleStory client-reverse engineering tools.
Updated: 2024 03 06 Language: Python
Splode: Augmenting Static Reverse Engineering with Dynamic Analysis and Instrumentation
Updated: 2014 10 10 Language: C++
spu3dbg: Ida Pro debugger module for the anergistic SPU emulator.
Updated: 2016 03 28 Language: C++
Stadeo: Stadeo is a set of tools primarily developed to facilitate analysis of Stantinko, which is a botnet performing click fraud, ad injection, social network fraud, password stealing attacks and cryptomining, using IDA.
Updated: 2021 11 08 Language: Python
static-analysis-plugin: An IDA Python plugin for CFG generation and data flow analysis on x86 binaries.
Updated: 2022 10 25 Language: Python
Stingray: Stingray is an IDAPython plugin for finding function strings. The search is from the current position onwards in the current function. It can do it recursively also with configurable search depth. The results order is the natural order of strings in the BFS search graph.
Updated: 2021 03 19 Language: Python
Stm8Ida: STM8 Ida Pro processor module. Support for STMicroelectronics' STM8 series of microcontrollers.
Updated: 2019 10 31 Language: C++
StrAnnotate: Simple string annotation plugin for IDA. Annotate your IDB with externally decrypted strings tables. A few lines of python to make a tedious task into a click.
Updated: 2022 09 29 Language: Python
StrikeOut: IDA strike-out: A Hex-Rays decompiler plugin to patch the Ctree and hide junk code.
Updated: 2024 08 22 Language: C++
structo: Tool to merge structs generated with hexrays, or insert elements into pad.
Updated: 2021 02 01 Language: Python
Structure Dump: StructDump is an IDA plugin, allowing you to export IDA types into high-level language definitions. Currently, C++ is supported.
Updated: 2007 04 05 Language: C++
Styler: Small Plugin to change the style of Ida Pro.
Updated: 2014 07 25 Language: Python
SusanRTTI: Another RTTI Parsing IDA plugin (GCC/MSVC).
Updated: 2023 06 28 Language: Python
Swift Demangle: Demangle Swift function names. It currently only works for ELF files.
Updated: 2016 04 23 Language: Python
SwitchIDAProLoader: Loader for IDA Pro to support the Nintendo Switch NRO binaries.
Updated: 2023 12 19 Language: C++
SymExPorter: A plugin for IDA, radare2, cutter & rizin to export recognized symbols to the ELF symbol table.
Updated: 2024 03 30 Language: Python
Symless: Automatic structures recovering plugin for IDA. Able to reconstruct structures/classes and virtual tables used in a binary.
Updated: 2023 09 25 Language: Python
syms2elf: A plugin for IDA Pro and radare2 to export the symbols recognized to the ELF symbol table.
Updated: 2021 11 17 Language: Python
symseghelper: Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode.
Updated: 2023 08 11 Language: Python
SyncReven: Reven integration plugin: synchronize the Axion current analysis window with some code opened in IDA.
Updated: 2021 09 15 Language: Python
Synergy: A combination of an IDAPython Plugin and a control version system that result in a new reverse engineering collaborative addon for IDA Pro. By http://cubicalabs.com/
Updated: 2015 01 28 Language: Python
Syscall Parser: A tool that allows you to quickly get the Windows api name from syscall number.
Updated: 2024 08 08 Language: Python
SysNR-FuncFinder: Rename functions by system call numbers.
Updated: 2023 09 20 Language: Python
Tarkus: Tarkus is a plugin manager for IDA Pro, modelled after Python's pip.
Updated: 2015 08 13 Language: Python
Tenet: A Trace Explorer for Reverse Engineers. Provide more natural, human controls for navigating execution traces against a given binary.
Updated: 2021 09 14 Language: Python
ttddbg: Time Travel Debugging IDA plugin. Adds a new debugger to IDA which can read TTD traces generated by WinDBG or Visual Studio.
Updated: 2024 06 27 Language: C++
TurboDiff: Turbodiff is a binary diffing tool developed as an IDA plugin. It discovers and analyzes differences between the functions of two binaries.
Updated: 2011 12 13 Language: C++
UEFI_RETool: IDA Plugin for UEFI firmware analysis. This plugin allows you to automatically analyse the input UEFI images, as well as search for dependencies between UEFI images in firmware.
Updated: 2021 08 03 Language: Python
uEmu: uEmu is a tiny cute emulator plugin for IDA based on unicorn engine. Supports following architectures out of the box: x86, x64, ARM, ARM64, MIPS, MIPS64
Updated: 2024 08 13 Language: Python
unity_metadata_loader: Load strings and method/class names in global-metadata.dat to IDA.
Updated: 2018 07 18 Language: Python
UserComment: An IDA pro plugin to display user-added comments in disassembly and pseudocode views.
Updated: 2023 06 30 Language: Python
Virtuailor: Virtuailor is an IDAPython tool that reconstructs vtables for C++ code written for intel architechture and both 32bit and 64bit code.
Updated: 2020 06 06 Language: Python
VirusBattle: The plugin is an integration of Virus Battle API to the well known IDA Disassembler. Virusbattle is a web service that analyses malware and other binaries with a variety of advanced static and dynamic analyses.
Updated: 2015 05 26 Language: Python
Vitaldr: IDA Pro loader plugin for PS Vita.
Updated: 2023 02 21 Language: C++
VMAttack: Static and dynamic virtualization-based packed analysis and deobfuscation.
Updated: 2017 11 30 Language: Python
VmpHelper: A vmp-analysis ida-plugin based on Ghidra, currently under development. Only supports Vmp3.5 x86. (In Chinese, no source).
Updated: 2024 07 02 Language: C++
Void: A 'No Operation' Generator Plugin to effortlessly create NOP'd areas in your disassembly view. (Archived).
Updated: 2023 08 20 Language: Python
vtable-namer: IDA Pro python script to search for and label vtable methods in an executable dump.
Updated: 2022 11 15 Language: Python
VTBL: VTBL is an IDA script which identifies all the virtual tables found in any module of a native process. The virtual tables can be related to a COM or a C++ class.
Updated: 2013 03 27 Language: C++
VT-IDA Plugin: This is the official VirusTotal plugin for Hex-Rays IDA Pro. This plugin integrates functionality from VirusTotal web services into the IDA Pro's user interface.
Updated: 2023 11 27 Language: Python
VulChatGPT: Use IDA PRO HexRays decompiler with OpenAI(ChatGPT) to find possible vulnerabilities in binaries.
Updated: 2023 02 23 Language: Python
VulFi: The VulFi (Vulnerability Finder) tool is a plugin to IDA Pro which can be used to assist during bug hunting in binaries. Its main objective is to provide a single view with all cross-references to the most interesting functions (such as strcpy, sprintf, system, etc.).
Updated: 2024 10 02 Language: Python
Waffda: IDA HexRays decompiler wrapper library.
Updated: 2021 06 17 Language: Python
WakaTime: WakaTime integration for IDA Pro: time tracking plugin showing the time you spend using IDA.
Updated: 2024 09 11 Language: Python
wilhelm: Alternative API for IDA and Hex-Rays. wilhelm is an API for working with IDA, and in particular the Hex-Rays decompiler. It aims to wrap around the existing SDK's API, plus provide additional features and concepts that make reverse engineering easier.
Updated: 2022 02 03 Language: Python
Win32 LST to Inline Assembly: Python script which extracts procedures from IDA Win32 LST files and converts them to correctly dynamically linked compilable Visual C++ inline assembly.
Updated: 2009 07 10 Language: Python
Windows Driver Plugin: A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
Updated: 2018 08 22 Language: Python
WinIOCtlDecoder: An IDA Pro plugin which decodes a Windows Device I/O control code into DeviceType, FunctionCode, AccessType and MethodType.
Updated: 2023 12 01 Language: Python
WPeChatGPT: Plugin that can help to analyze binary files using OpenAI's ChatGPT training API.
Updated: 2024 08 14 Language: Python
WWCD: What Would Capstone Decode - IDA plugin that implements a Capstone powered IDA view.
Updated: 2016 11 29 Language: C++
x64dbgida: Official x64dbg plugin for IDA Pro.
Updated: 2024 09 24 Language: Python
X86Emu: Embedded x86 emulator for Ida Pro. Its purpose is to allow a reverse engineer the chance to step through x86 code while reverse engineering a binary. The plugin can help you step through any x86 binary from any platform. For Windows binaries, many common library calls are trapped and emulated by the emulator, allowing for a higher fidelity emulation. I find it particularly useful for stepping through obfuscated code as it automatically reorganizes an IDA disassembly based on actual code paths.
Updated: 2023 01 23 Language: C++
xdeobf: Experimental deobfuscation plugin for IDA 7.2. It aims to reverse control flow flattening transformation that I encountered (probably a variation of obfuscator-llvm).
Updated: 2020 03 24 Language: C++
Xex Loader for IDA 6.6: This adds the ability to load xex files into IDA directly without having to first process them in any way. It processes the xex file as much as possible while loading to minimise the work required by the user to get it to a state fit for reversing.
Updated: 2013 09 23
xorstr-decrypt-idaplugin: This is a plugin for IDA Pro that will help you deobfuscate xorstr strings in a windows x64 application.
Updated: 2023 04 15 Language: Python
Xorstr Decryption Plugin: Attempts to decrypt JM Xorstr obfuscated strings in some x64 binaries.
Updated: 2023 03 09 Language: Python
xray: Hexrays decompiler plugin that colorizes and filters the decompiler's output based on regular expressions
Updated: 2023 12 08 Language: Python
XRaysComments: A simple IDA Pro plugin to show all HexRays decompiler comments written by user.
Updated: 2021 09 03 Language: Python
YaCo: Collaborative Reverse-Engineering for IDA. When enabled, an unlimited number of users can work simultaneously on the same binary. Any modification done by any user is synchronized through git version control. It has been initially released at SSTIC 2017
Updated: 2018 11 14 Language: Python
Yagi: Yet Another Ghidra Integration for IDA. Yagi intends to include the wonderful Ghidra decompiler into both IDA pro and IDA Free.
Updated: 2022 08 04 Language: C++
YaraForge: A plugin that integrates capa explorer's scanning result and using mkYARA's rule generation logic to automatic export yara rules.
Updated: 2024 05 31 Language: Python
YARA for IDA: Unofficial YARA IDA Pro plugin, along with an unparalleled crypto/hash/compression rule set based on Luigi Auriemma's signsrch signatures.
Updated: 2022 09 17 Language: C++
YaraScan: Scan file with Yara rules.
Updated: 2024 01 23 Language: Python
Yarka: IDA plugin for YARA signature creation from selections.
Updated: 2024 10 19 Language: Python
The original list of 200 plugins came from onethawt's excellent idaplugins-list. His and other contributors' work was essential in putting together this interactive list.
