Nampa - FLIRT for (binary) ninjas

Pure-python implementation of IDA Pro's FLIRT technology. Also Binary Ninja plugin.

Description

Nampa is a package for reading IDA Pro's .sig files. It comes with its own command-line tool for analyzing such files: dumpsig.py.

Nampa the package is completely decoupled from the Binary Ninja plugin.

Nampa the plugin comes with a small library of .sig files, automatically downloaded from 3rd-party GitHub repositories when needed.

Screenshot

Installation

For use as a python library:

pip install nampa

For use as a Binary Ninja plugin:

cd ~/.binaryninja/plugins/
git clone [email protected]:thebabush/nampa.git
cd nampa
pip install -r requirements.txt # or sudo apt-get install python-future

NOTE: apparently, Binary Ninja for Windows ships with its own python distribution so pip install accordingly.

About

Meaning of Nampa (ナンパ).

Limitations

Ref functions are not implemented at the moment.

Thanks

• radare people, since this is basically a python port of radare's FLIRT implementation.
• trib0r3 for updating the Binary Ninja integration

License

The original radare's flirt.c is under LGPL, so my deep knowledge of software licenses tells me that I must keep it that way.