idapython | Clone of the IDAPython repo | Plugin library

by zachriggle Python Version: Current License: Non-SPDX

X-Ray Key Features Code Snippets Community Discussions(2)Vulnerabilities Install Support

kandi X-RAY | idapython Summary

idapython is a Python library typically used in Plugin applications. idapython has no bugs, it has no vulnerabilities and it has low support. However idapython build file is not available and it has a Non-SPDX License. You can download it from GitHub.

IDAPython is an IDA plugin which makes it possible to write scripts for IDA in the Python programming language. IDAPython provides full access to both the IDA API and any installed Python module. Check the scripts in the examples directory to get an quick glimpse.

Support

Quality

Security

License

Reuse

Support

idapython has a low active ecosystem.

It has 18 star(s) with 6 fork(s). There are 3 watchers for this library.

It had no major release in the last 6 months.

idapython has no issues reported. There are no pull requests.

It has a neutral sentiment in the developer community.

The latest version of idapython is current.

Quality

idapython has 0 bugs and 0 code smells.

Security

idapython has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

idapython code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

idapython has a Non-SPDX License.

Non-SPDX licenses can be open source with a non SPDX compliant license, or non open source licenses, and you need to review them closely before use.

Reuse

idapython releases are not available. You will need to build from source code and install.

idapython has no build file. You will be need to create the build yourself to build the component from source.

Installation instructions are available. Examples and code snippets are not available.

idapython saves you 5794 person hours of effort in developing the same functionality from scratch.

It has 12110 lines of code, 1648 functions and 90 files.

It has high code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi has reviewed idapython and discovered the below as its top functions. This is intended to give you an instant insight into idapython implemented functionality, and help decide if they suit your requirements.

Generate stub for the given generator
Call the test stage
Registers an idc function with the given arguments
Event handler
Encode multipart form data
Fetch a single file report
Make a multipart POST request
Populate scan_id
Walk the stack and return the result
Determine the previous call instruction
Find the first occurrence of ea
Registers an IDC function
Generate documentation
Extract documentation from given lines
Generate documentation from a file
Run VirusTotalForm
Execute the form
Reads configuration file
Write config file
Fetch a file report
Find imports of dllname
Find imported functions
Fix the file
Called when the user clicks
Displays the form
Called when a form is created
Collect all files in a directory

Get all kandi verified functions for this library.

idapython Key Features

No Key Features are available at this moment for idapython.

idapython Examples and Code Snippets

No Code Snippets are available at this moment for idapython.

Community Discussions

Trending Discussions on idapython

How to get the actual main address use idapython when starting IDA in batch mode?

Getting the Value of a CPP Object using IDA Pro and IDAPython

QUESTION

How to get the actual main address use idapython when starting IDA in batch mode?

Asked 2022-Mar-22 at 03:02

When starting IDA in GUI mode to analyze the binary, it automatically locates and displays the actual main function code (not the entry point encapsulated by the compiler, but the main function corresponding to the source code).

My question is how to get that address in batch mode (without GUI) via idapython script? I don't see the relevant interface in the IDAPython documentation.

For example, _mainCRTStartup --> ___mingw_CRTStartup --> _main is a sequence of function calls, where _mainCRTStartup is the entry point of the binary, but I want to get the address of _main, can it be done?

Any help or direction would be much appreciated.!

...

ANSWER

Answered 2022-Mar-22 at 03:02

Know the answer, it is idaapi.inf_get_main()

Source https://stackoverflow.com/questions/71319464

QUESTION

Getting the Value of a CPP Object using IDA Pro and IDAPython

Asked 2021-Jul-28 at 15:28

I've set a breakpoint using IDA Pro on a function that returns a cocos2d::Image object pointer as a response, as can be seen in the screenshot below.

However, I'm at a complete loss at how I can use IDAPython to print out the Object members, and such. Is there a way to do it? The Docs haven't been too helpful, and only seem to have methods to check for C-like structs.

...

ANSWER

Answered 2021-Jul-28 at 15:28

Use print Dword(addr) for printing dword-sized members and print Byte(addr) for printing byte-sized members. Result is stored in eax, so you can use relative offsets from eax to get member addresses. To print all the members from the screenshot that will be:

Source https://stackoverflow.com/questions/68510375

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

CVE-2011-4783 HIGH

The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper handling of certain swig_runtime_data files in the current working directory.

http://code.google.com/p/idapython/downloads/detail?name=idapython-1.5.2.3_ida6.1_py2.6_win32.zip

http://secunia.com/advisories/47295

http://technet.microsoft.com/en-us/security/msvr/msvr11-015

http://code.google.com/p/idapython/source/detail?r=361

https://exchange.xforce.ibmcloud.com/vulnerabilities/71936

Install idapython

Install 2.6 or 2.7 from http://www.python.org/
Copy the whole "python" directory to %IDADIR%
Copy the contents of the "plugins" directory to the %IDADIR%\plugins\
Copy "python.cfg" to %IDADIR%\cfg

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: