The output is an ordered list of identified Windows API references with some meta information, and an ApiVector fingerprint. As input, arbitrary memory dumps for a known environment can be processed (please note: a reference DB has to be built first, using apiscout/db_builder).

Other functions in this module define new functions based on sequences of defined instructions.Īndroid Debugging: This version have both support for native arm debugging via usb and sdk ADV manager.Īndroid Scripts Collection: Collection of Android reverse engineering scripts that make my life easierĪPIScout: This project aims at simplifying Windows API import recovery. Some instructions identify and define new code by looking for comon byte sequences that correspond to particular ARM opcodes.

Currently, the heuristics in this module find code in a few different ways.

Finds paths between two or more functionsĪmnesia: Amnesia is an IDAPython module designed to use byte level heuristics to find ARM thumb instructions in undefined bytes in an IDA Pro database.

Finds paths to a given code block inside a function.

TODOģDSX Loader: IDA PRO Loader for 3DSX filesĪbyss Postprocess Hexrays Decompiler OutputĪctionScript 3: An ActionScript 3 processor module and Flash debugger plugin.Īdobe Flash disassembler: The 2 plugins present in this archive will enable IDA to parse SWF files, load all SWF tags as segments for fast search and retrieval, parse all tags that can potentially contain ActionScript2 code, discover all such code(a dedicated processor module has been written for it) and even name the event functions acording to event handled in it (eg. If a plugin is only a source repo with no description or documentation, I am not adding it. I would like to tag each plugin with its corresponding IDA version, but it will take me a long time to test. Please submit PRs if you have any other outstanding plugins. I'll be organizing the plugins over time. If you can help categorize plugins based on version, it would be much appreciated. This repository is quite popular and spans all versions of IDA.

Ida pro hex rays decompiler