One of must-have features of a reverse engineering tool is the ability to add comments to the output listing. Without this feature, the output stays difficult to understand. The user copies it to a text editor to continue the analysis but this is a bad solution because the dynamic nature of the output is lost. […]
Read MoreIDA Pro being and old and time-proven platform for binary analysis, many plugins grew on it. There are custom made plugins for new processors and file formats. There are deobfuscators, exporters, data visualizers, object reconstructors and other stuff.
Read MoreA quite interesting document for everyone who programs in C++: http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2007/n2271.html I’m even tempted to switch to it when/if it becomes available.
Read MoreThis short entry is just to tell you that the decompiler got a name: Hex-Rays and it goes to the phase of closed beta testing. The qualified beta testers already received their copies and I have some very positive feedback. Thank you, guys! For the curious about the decompiler, I put the user manual online. It […]
Read MoreAnalyzing binary executables can be a very boring activity, especially when you get used to the regular patterns. You see the same things again and again. A tool to automate the analysis or diminish the amount of text to browse quickly becomes a dream.
Read MoreIDA v5.1 introduces the notion of dynamic colors. Plugins can install a callback which dynamically calculates colors and provides them to the user interface. In the previous versions of IDA plugins were forced to change the item color in the database thus overwriting any user-defined colors. The new IDA makes it possible to calculate colors on the fly.
Read MoreEver tried to run many instances of IDA simultaneously? I mean, not only one or two, but much more, tens of them at the same time? Not everyone needs it but sometimes a whole directory must be analyzed. Imagine you have created a plugin which finds something interesting in binaries…
Read MoreDid you know that you can add your own cross-references to the listing? There are even several different methods for that: Open xrefs window and press Ins Write an IDC script Write a plugin Adding xrefs is very useful if IDA missed some of them and the graph looks ugly. Another benefit is replicated comments. See a […]
Read MoreWriting boot code is useful for many reasons, whether you are: Developing your own operating system Developing disk encryption systems Experimenting and researching Or even writing a bootkit
Read More