Function call graph plugin sample
IDA Pro already has a function call graph facility, nonetheless it employs WinGraph32.
IDA Pro 5.5 goes alpha
After many months of work, IDA Pro 5.5 is now in alpha stage and this week the beta will be out for testing.
IDA v5.4 demo
Just a quick note for interested parties: we prepared the new demo version of IDA Pro. The new demo includes the bochs debugger. The debugger is fully functional with just one limitation: it will become inactive after a number of commands. I prefer to tell you this in advance rather than this limitation to be […]
Advanced Windows Kernel Debugging with VMWare and IDA’s GDB debugger
We have already published short tutorial on Windows kernel debugging with IDA and VMWare on our site, but the debugging experience can still be improved. VMWare’s GDB stub is very basic, it doesn’t know anything about processes or threads (for Windows guests), so for anything high-level we’ll need to do some extra work. We will show […]
IDA Pro has 9 debugger modules
Since the number of debugger modules in IDA surpassed the magical number seven plus or minus two, we created a small table describing what is available and what is not: http://www.hex-rays.com/idapro/debugger/index.htm Direct links to tutorials are available here: http://www.hex-rays.com/idapro/idasupport.htm I know, I know – we need to add 64-bit support for all platforms, port the Bochs […]
Kernel debugging with IDA
When IDA introduced debugging facilities years ago, the task of analyzing hostile code became more enriched: no more looking at static code and figuring out what it does, instead just run the malware in a virtual machine and debug it remotely, even debug just a small code […]
IDA v5.4 release is not that far away
I’m happy to inform you that we are entering the beta stage of IDA v5.4! In addition to numerous small and not that small improvements, the new version will have three debugger modules: bochs, gdb, and windbg, selectable on the fly (the active debugger session will be closed, though ;)) With the bochs debugger, we offer […]
IDA and MIPS
If you analyze MIPS binaries, you may find useful the following addition to IDA: http://www.binary-art.net/?p=1002 This is MIPS emulator for Linux. It can generate an IDC script after emulation, which then can be applied to the database and make it more readable.
Bochs plugin goes alpha
Bochs debugger plugin is in alpha stage now, all of the 3 loaders mentioned in the previous blog entry, are now complete.
Bochs Emulator and IDA?
The next version of IDA will be released with a bochs debugger plugin, and what is nice about it is that you will be able to use it easily by just downloading bochs executables and telling IDA where to find them.