All Projects → patois → Idacyber

patois / Idacyber

Licence: mit
Data Visualization Plugin for IDA Pro

Programming Languages

python
139335 projects - #7 most used programming language

Projects that are alternatives of or similar to Idacyber

Rematch
REmatch, a complete binary diffing framework that is free and strives to be open source and community driven.
Stars: ✭ 141 (-42.21%)
Mutual labels:  ida, ida-pro, reverse-engineering
Reversing List
Reversing list
Stars: ✭ 106 (-56.56%)
Mutual labels:  ida, ida-pro, reverse-engineering
Amie
A Minimalist Instruction Extender for the ARM architecture and IDA Pro
Stars: ✭ 136 (-44.26%)
Mutual labels:  ida, ida-pro, reverse-engineering
Flare Ida
IDA Pro utilities from FLARE team
Stars: ✭ 1,374 (+463.11%)
Mutual labels:  ida, ida-pro, reverse-engineering
Idarling
Collaborative Reverse Engineering plugin for IDA Pro & Hex-Rays
Stars: ✭ 588 (+140.98%)
Mutual labels:  ida, ida-pro, reverse-engineering
Lumen
A private Lumina server for IDA Pro
Stars: ✭ 257 (+5.33%)
Mutual labels:  ida, ida-pro, reverse-engineering
Redasm
The OpenSource Disassembler
Stars: ✭ 1,042 (+327.05%)
Mutual labels:  ida, ida-pro, reverse-engineering
Keypatch
Multi-architecture assembler for IDA Pro. Powered by Keystone Engine.
Stars: ✭ 939 (+284.84%)
Mutual labels:  ida, ida-pro, reverse-engineering
Ida For Delphi
IDA Python Script to Get All function names from Event Constructor (VCL)
Stars: ✭ 92 (-62.3%)
Mutual labels:  ida, ida-pro, reverse-engineering
Mazewalker
Toolkit for enriching and speeding up static malware analysis
Stars: ✭ 132 (-45.9%)
Mutual labels:  ida-pro, reverse-engineering
Jarvis
"Just Another ReVersIng Suite" or whatever other bullshit you can think of
Stars: ✭ 137 (-43.85%)
Mutual labels:  ida, reverse-engineering
Stingray
IDAPython plugin for finding function strings recursively
Stars: ✭ 110 (-54.92%)
Mutual labels:  ida-pro, reverse-engineering
Ida Evm
IDA Processor Module for the Ethereum Virtual Machine (EVM)
Stars: ✭ 185 (-24.18%)
Mutual labels:  ida, ida-pro
Lighthouse
A Code Coverage Explorer for Reverse Engineers
Stars: ✭ 1,348 (+452.46%)
Mutual labels:  ida-pro, reverse-engineering
Magisk Frida
🔐 Run frida-server on boot with Magisk, always up-to-date
Stars: ✭ 144 (-40.98%)
Mutual labels:  exploitation, reverse-engineering
Invtero.net
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
Stars: ✭ 237 (-2.87%)
Mutual labels:  memory-hacking, reverse-engineering
Native Shim
A "shim" for loading native jni files for Android active debugging
Stars: ✭ 145 (-40.57%)
Mutual labels:  ida-pro, reverse-engineering
Ida Batch decompile
*Decompile All the Things* - IDA Batch Decompile plugin and script for Hex-Ray's IDA Pro that adds the ability to batch decompile multiple files and their imports with additional annotations (xref, stack var size) to the pseudocode .c file
Stars: ✭ 198 (-18.85%)
Mutual labels:  ida, reverse-engineering
Hrdevhelper
Context-sensitive HexRays decompiler plugin that visualizes the ctree of decompiled functions.
Stars: ✭ 193 (-20.9%)
Mutual labels:  ida, ida-pro
Hexraystoolbox
Hexrays Toolbox - Find code patterns within the Hexrays AST
Stars: ✭ 202 (-17.21%)
Mutual labels:  ida-pro, reverse-engineering

IDACyber

Data Visualization Plugin for IDA Pro

IDACyber is an interactive data visualization plugin for IDA Pro. It consists of external "color filters" that transform raw data bytes into a canvas that can be used to inspect and navigate data interactively. Depending on the filter in context, browsing this data visually can reveal particular structures and patterns, literally from a zoomed-out perspective.

IDACyber animation

Requirements

  • IDA 7.3+
  • This IDAPython project is compatible with Python3 only. For compatibility with older versions of IDA, you may want to check out the Python2 branch of this project. The Python2 branch is no longer maintained and thus contains outdated code.

Installation

  • Updating: It's recommended to delete "idacyber.py" and the "cyber" folder if you're updating from a previous IDACyber version.
  • Installation: Copy "idacyber.py" and the "cyber" folder to the IDA Pro "plugins" folder.

Usage

Ctrl-Shift-C starts the plugin and creates a new dockable window. Multiple instances can be created by re-running the plugin which allows several color filters to be run in parallel. The resulting canvas can be interacted with using keyboard and mouse controls. With an instance of IDACyber on focus, a quick manual can be opened by pressing Ctrl-F1, help about the currently active filter can be shown by pressing Ctrl-F2.

Writing custom color filters

IDACyber is meant to be easily customizable by offering the ability to add new "color filters" to it. A color filter is an external IDAPython script that must be placed within the "cyber" folder, which IDACyber will then load during startup. Its main workhorse consists of the callback function "on_process_buffer()" which each color filter is expected to implement. This function is passed the raw data to be processed by a color filter, which then is supposed to return a list of colors in RGB format. IDACyber will take this list of colors and draw it onto the interactive canvas.

For example code, please check out the existing color filters that can be found in the "cyber" folder. The two filters "NES" and "GameBoy" are two simple examples that can be used as a basic skeleton for writing new color filters.

Known bugs

Yes :[

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].