diff --git a/README.md b/README.md index 24bc397..762da50 100644 --- a/README.md +++ b/README.md @@ -11,7 +11,7 @@ The dynamic version is hosted on [GitHub Pages](https://vmallet.github.io/ida-pl Any contribution is welcome one way or another. If you know of a plugin that could be added, or data in the list that could be updated, missing categories, typos.. please send a PR! If you'd just prefer sending me a message or an email that's fine too, my email should be pretty easy to find on GitHub. ## Plugins (see [interactive version](https://vmallet.github.io/ida-plugins)) -578 plugins +582 plugins * [3DS-Code-Loader](https://github.com/SinaMegapolis/3DS-Code-Loader): IDA Pro 7.6 Plugin to load ExeFS and CRO code from CXI files.
_Updated: 2022 08 01    Language: C++_ @@ -53,7 +53,7 @@ _Updated: 2023 03 29    Language: Python_ _Updated: 2018 04 26    Language: Python_ * [Android/Linux vmlinux Loader](https://github.com/nforest/droidimg): vmlinux.py is a python script which can load vmlinux image in both IDA Pro
-_Updated: 2020 11 22    Language: Python_ +_Updated: 2023 11 18    Language: Python_ * [Android Debugging](https://github.com/techbliss/ADB_Helper_QT_Super_version): This version have both support for native arm debugging via usb and sdk ADV manager.
_Updated: 2015 04 05    Language: Python_ @@ -155,7 +155,7 @@ _Updated: 2020 10 23_ _Updated: 2015 02 04    Language: Python_ * [BinSync](https://github.com/angr/binsync): Decompiler collaboration tool built on the Git versioning system to enable fined grained reverse engineering collaboration regardless of decompiler.
-_Updated: 2023 11 07    Language: Python_ +_Updated: 2023 11 27    Language: Python_ * [Bip](https://github.com/synacktiv/bip): Bip is a project which aims to simplify the usage of python for interacting with IDA. Its main goals are to facilitate the usage of python in the interactive console of IDA and the writing of plugins.
_Updated: 2020 09 09    Language: Python_ @@ -176,7 +176,7 @@ _Updated: 2019 08 01    Language: Python_ _Updated: 2023 02 17    Language: Python_ * [Capa Explorer](https://github.com/fireeye/capa/tree/master/capa/ida/plugin): Capa explorer is an IDAPython plugin that integrates the FLARE team's open-source framework, capa, with IDA Pro. capa is a framework that uses a well-defined collection of rules to identify capabilities in a program.
-_Updated: 2023 11 08    Language: Python_ +_Updated: 2023 12 01    Language: Python_ * [CGC Loader](https://github.com/cseagle/cgc_ldr): IDA Loader for DARPA CGC binaries.
_Updated: 2018 04 09    Language: C++_ @@ -209,7 +209,7 @@ _Updated: 2021 06 02    Language: Python_ _Updated: 2022 09 18    Language: idc_ * [CodeCut](https://github.com/JHUAPL/CodeCut): Locating Object File Boundaries in IDA Pro with LFA and MaxCut algorithms. Datasets for testing CodeCut solutions.
-_Updated: 2023 02 23    Language: Python_ +_Updated: 2023 11 22    Language: Python_ * [Codemap](https://github.com/c0demap/codemap): Codemap is a binary analysis tool for "run-trace visualization" provided as IDA plugin.
_Updated: 2016 07 01    Language: Python_ @@ -281,7 +281,7 @@ _Updated: 2023 11 07    Language: Python_ _Updated: 2017 09 06    Language: Python_ * [decomp2dbg](https://github.com/mahaloz/decomp2dbg): Plugin to introduce interactive symbols into your debugger from your decompiler.
-_Updated: 2023 10 07    Language: Python_ +_Updated: 2023 11 30    Language: Python_ * [Deep Winter](https://github.com/evil33333333/deep-winter): Black IDA pro theme for darkness enthusiasts.
_Updated: 2022 10 13_ @@ -389,7 +389,7 @@ _Updated: 2023 04 03    Language: Python_ _Updated: 2023 05 09    Language: Python_ * [Enhanced PDB Plugin](https://github.com/sonyps5201314/pdb): IDA PDB plugin with enhancements and bugfixes (Chinese).
-_Updated: 2023 06 26    Language: C++_ +_Updated: 2023 11 27    Language: C++_ * [epanos](https://github.com/drvink/epanos): ElectroPaint Automatic No-source Object reaSsembler (a MIPS to C decompiler). This is a very dumb MIPS to C static translator.
_Updated: 2014 05 05    Language: Python_ @@ -544,8 +544,8 @@ _Updated: 2018 04 23    Language: Python_ * [genmc](https://github.com/patois/genmc): Genmc is an IDAPython script/plugin hybrid that displays Hexrays decompiler microcode, which can help in developing microcode plugins.
_Updated: 2022 11 13    Language: Python_ -* [genpatch](https://github.com/tkmru/genpatch): Plugin that generates a python script for patching binary from Patched Byte on IDA.
-_Updated: 2019 05 04    Language: Python_ +* [genpatch](https://github.com/sterrasec/genpatch): Plugin that generates a python script for patching binary from Patched Byte on IDA.
+_Updated: 2023 11 20    Language: Python_ * [Geolocator](https://github.com/techbliss/ida_pro_http_ip_geolocator): Lookup (geolocate) IP's and http/https addresses, using google maps, and MaxMind databases.
_Updated: 2019 03 10    Language: Python_ @@ -578,7 +578,7 @@ _Updated: 2023 09 12    Language: Python_ _Updated: 2022 05 05    Language: Python_ * [GraphGrabber](https://github.com/tmr232/GraphGrabber): Grab full-resolution images of IDA graphs.
-_Updated: 2017 11 20    Language: Python_ +_Updated: 2023 11 23    Language: Python_ * [Graph Slick](https://github.com/lallousx86/GraphSlick): Automated detection of inlined functions. It highlights similar groups of nodes and allows you to group them, simplifying complex functions. The authors provide an accompanying presentation which explains the algorithms behind the plugin and shows sample use cases.
_Updated: 2014 11 20    Language: C++_ @@ -596,7 +596,7 @@ _Updated: 2022 07 25    Language: Python_ _Updated: 2023 10 18    Language: Python_ * [herast](https://github.com/Mizari/herast): Framework to automate working with AST in IDA Pro.
-_Updated: 2023 10 31    Language: Python_ +_Updated: 2023 12 02    Language: Python_ * [Hexagon Processor Module](https://github.com/n-o-o-n/idp_hexagon): Hexagon (aka QDSP6) processor module for IDA Pro disassembler.
_Updated: 2023 09 11    Language: C++_ @@ -898,7 +898,7 @@ _Updated: 2018 01 04    Language: Python_ _Updated: 2021 05 28    Language: Python_ * [IDA-minsc](https://github.com/arizvisa/ida-minsc): A plugin that assists a user with scripting the IDAPython plugin that is bundled with the disassembler. This plugin groups the different aspects of the IDAPython API into a simpler format which allows a reverse engineer to script different aspects of their work with very little investment.
-_Updated: 2023 06 29    Language: Python_ +_Updated: 2023 12 02    Language: Python_ * [IDA-names](https://github.com/archercreat/ida_names): IDA-names automatically renames pseudocode windows with the current function name.
_Updated: 2022 12 24    Language: Python_ @@ -1200,6 +1200,9 @@ _Updated: 2023 03 30    Language: Python_ * [ifred](https://github.com/Jinmo/ifred): IDA command palette & more (Ctrl+Shift+P, Ctrl+P).
_Updated: 2023 10 03    Language: C++_ +* [IISHelper](https://github.com/PwCUK-CTO/iis-helper-plugin): IDA Pro plugin to aid with the analysis of native IIS modules.
+_Updated: 2023 11 13    Language: Python_ + * [IPyIDA](https://github.com/eset/ipyida): PyIDA is a python-only solution to use a IPython console in the context of IDA Pro. It spawns an IPython kernel that you can connect to with `ipython console --existing` in your shell or by opening a *QT Console* window in IDA Pro with ``
_Updated: 2022 12 23    Language: Python_ @@ -1265,7 +1268,7 @@ _Updated: 2023 06 15    Language: go_ _Updated: 2012 09 12    Language: C++_ * [mark_executed_code](https://github.com/lzyddf/mark_executed_code): Mark the code which is executed while debugging, including pseudo-code and assembly code.
-_Updated: 2022 06 01    Language: Python_ +_Updated: 2023 11 27    Language: Python_ * [Match4IDA](https://github.com/riskeco/Match4IDA): Helps convert relative offsets to linear addresses pulled from rule engines like YARA and ROST, with a UI to navigate between them.
_Updated: 2023 09 14    Language: Python_ @@ -1326,6 +1329,9 @@ _Updated: 2012 01 10    Language: Python_ * [msp430emu](https://github.com/cseagle/msp430emu): An msp430 emulator plugin for Ida Pro.
_Updated: 2019 03 22    Language: C++_ +* [myda](https://github.com/fevral/myda): General Purpose IDA Plugin, currently a wrapper around vmrun to facilitate remote debugging of Windows PEs.
+_Updated: 2023 11 20    Language: Python_ + * [MyNav](https://code.google.com/p/mynav/): MyNav is a plugin for IDA Pro to help reverse engineers in the most typical task like discovering what functions are responsible of some specifical tasks, finding paths between "interesting" functions and data entry points.
_Updated: 2010 09 03    Language: C++_ @@ -1444,7 +1450,7 @@ _Updated: 2023 05 31    Language: Python_ _Updated: 2018 08 03    Language: Python_ * [pwndbg](https://github.com/pwndbg/pwndbg): GDB plug-in that makes debugging with GDB suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. NOTE: IDA integration through small XMLRPC server.
-_Updated: 2023 11 02    Language: Python_ +_Updated: 2023 11 29    Language: Python_ * [pyhexraysdeob](https://github.com/idapython/pyhexraysdeob): A port of Rolf Rolles' HexRaysDeob to Python.
_Updated: 2019 10 15    Language: Python_ @@ -1691,7 +1697,7 @@ _Updated: 2011 12 13    Language: C++_ _Updated: 2021 08 03    Language: Python_ * [uEmu](https://github.com/alexhude/uEmu): uEmu is a tiny cute emulator plugin for IDA based on unicorn engine. Supports following architectures out of the box: x86, x64, ARM, ARM64, MIPS, MIPS64
-_Updated: 2023 02 08    Language: Python_ +_Updated: 2023 11 20    Language: Python_ * [unity_metadata_loader](https://github.com/nevermoe/unity_metadata_loader): Load strings and method/class names in global-metadata.dat to IDA.
_Updated: 2018 07 18    Language: Python_ @@ -1711,6 +1717,9 @@ _Updated: 2023 02 21    Language: C++_ * [VMAttack](https://github.com/anatolikalysch/VMAttack): Static and dynamic virtualization-based packed analysis and deobfuscation.
_Updated: 2017 11 30    Language: Python_ +* [VmpHelper](https://github.com/fjqisba/VmpHelper): A vmp-analysis ida-plugin based on Ghidra, currently under development. Only supports Vmp3.5 x86. (In Chinese, no source).
+_Updated: 2023 11 15    Language: C++_ + * [Void](https://github.com/dovezp/ida.plugin.void): A 'No Operation' Generator Plugin to effortlessly create NOP'd areas in your disassembly view. (Archived).
_Updated: 2023 08 20    Language: Python_ @@ -1721,13 +1730,13 @@ _Updated: 2022 11 15    Language: Python_ _Updated: 2013 03 27    Language: C++_ * [VT-IDA Plugin](https://github.com/VirusTotal/vt-ida-plugin): This is the official VirusTotal plugin for Hex-Rays IDA Pro. This plugin integrates functionality from VirusTotal web services into the IDA Pro's user interface.
-_Updated: 2023 07 10    Language: Python_ +_Updated: 2023 11 27    Language: Python_ * [VulChatGPT](https://github.com/ke0z/VulChatGPT): Use IDA PRO HexRays decompiler with OpenAI(ChatGPT) to find possible vulnerabilities in binaries.
_Updated: 2023 02 23    Language: Python_ * [VulFi](https://github.com/Accenture/VulFi): The VulFi (Vulnerability Finder) tool is a plugin to IDA Pro which can be used to assist during bug hunting in binaries. Its main objective is to provide a single view with all cross-references to the most interesting functions (such as strcpy, sprintf, system, etc.).
-_Updated: 2023 09 01    Language: Python_ +_Updated: 2023 11 16    Language: Python_ * [Waffda](https://github.com/OmriLevy888/Waffda): IDA HexRays decompiler wrapper library.
_Updated: 2021 06 17    Language: Python_ @@ -1745,10 +1754,10 @@ _Updated: 2009 07 10    Language: Python_ _Updated: 2018 08 22    Language: Python_ * [WinIOCtlDecoder](https://github.com/tandasat/WinIoCtlDecoder): An IDA Pro plugin which decodes a Windows Device I/O control code into DeviceType, FunctionCode, AccessType and MethodType.
-_Updated: 2015 06 02    Language: Python_ +_Updated: 2023 12 01    Language: Python_ * [WPeChatGPT](https://github.com/WPeace-HcH/WPeChatGPT): Plugin that can help to analyze binary files using OpenAI's ChatGPT training API.
-_Updated: 2023 11 10    Language: Python_ +_Updated: 2023 11 30    Language: Python_ * [WWCD](https://github.com/sektioneins/wwcd): What Would Capstone Decode - IDA plugin that implements a Capstone powered IDA view.
_Updated: 2016 11 29    Language: C++_ @@ -1789,6 +1798,9 @@ _Updated: 2022 09 17    Language: C++_ * [YaraScan](https://github.com/snk37/yarascan-ida): Scan file with Yara rules.
_Updated: 2023 02 20    Language: Python_ +* [Yarka](https://github.com/AzzOnFire/yarka): IDA plugin for YARA signature creation from selections.
+_Updated: 2023 11 25    Language: Python_ + ## Credits diff --git a/data.js b/data.js index fa2d59e..1f47133 100644 --- a/data.js +++ b/data.js @@ -84,7 +84,7 @@ var tabledata = [ url: "https://github.com/nforest/droidimg", src: "py", cats: "loader", - last: "20201122", + last: "20231118", vers: "7.0", desc: "vmlinux.py is a python script which can load vmlinux image in both IDA Pro"}, @@ -319,7 +319,7 @@ var tabledata = [ url: "https://github.com/angr/binsync", src: "py", cats: "collab", - last: "20231107", + last: "20231127", vers: "7.3", desc: "Decompiler collaboration tool built on the Git versioning system to enable fined grained reverse engineering collaboration regardless of decompiler."}, @@ -366,7 +366,7 @@ var tabledata = [ url: "https://github.com/fireeye/capa/tree/master/capa/ida/plugin", src: "py", cats: "int", - last: "20231108", + last: "20231201", vers: "7.7", desc: "Capa explorer is an IDAPython plugin that integrates the FLARE team's open-source framework, capa, with IDA Pro. capa is a framework that uses a well-defined collection of rules to identify capabilities in a program."}, @@ -433,7 +433,7 @@ var tabledata = [ {name: "CodeCut", url: "https://github.com/JHUAPL/CodeCut", src: "py", - last: "20230223", + last: "20231122", vers: "7.0", desc: "Locating Object File Boundaries in IDA Pro with LFA and MaxCut algorithms. Datasets for testing CodeCut solutions."}, @@ -601,7 +601,7 @@ var tabledata = [ url: "https://github.com/mahaloz/decomp2dbg", src: "py", cats: "decomp, debug, int", - last: "20231007", + last: "20231130", vers: "7.0", desc: "Plugin to introduce interactive symbols into your debugger from your decompiler."}, @@ -853,7 +853,7 @@ var tabledata = [ {name: "Enhanced PDB Plugin", url: "https://github.com/sonyps5201314/pdb", src: "c++", - last: "20230626", + last: "20231127", vers: "8.0", desc: "IDA PDB plugin with enhancements and bugfixes (Chinese)."}, @@ -1218,10 +1218,10 @@ var tabledata = [ desc: "Genmc is an IDAPython script/plugin hybrid that displays Hexrays decompiler microcode, which can help in developing microcode plugins."}, {name: "genpatch", - url: "https://github.com/tkmru/genpatch", + url: "https://github.com/sterrasec/genpatch", src: "py", - last: "20190504", - vers: "7.2", + last: "20231120", + vers: "7.4", desc: "Plugin that generates a python script for patching binary from Patched Byte on IDA."}, {name: "Geolocator", @@ -1302,7 +1302,7 @@ var tabledata = [ {name: "GraphGrabber", url: "https://github.com/tmr232/GraphGrabber", src: "py", - last: "20171120", + last: "20231123", vers: "7.0", desc: "Grab full-resolution images of IDA graphs."}, @@ -1345,7 +1345,7 @@ var tabledata = [ url: "https://github.com/Mizari/herast", src: "py", cats: "decomp, dev", - last: "20231031", + last: "20231202", vers: "7.4", desc: "Framework to automate working with AST in IDA Pro."}, @@ -2032,7 +2032,7 @@ var tabledata = [ url: "https://github.com/arizvisa/ida-minsc", src: "py", cats: "dev", - last: "20230629", + last: "20231202", vers: "7.4", desc: "A plugin that assists a user with scripting the IDAPython plugin that is bundled with the disassembler. This plugin groups the different aspects of the IDAPython API into a simpler format which allows a reverse engineer to script different aspects of their work with very little investment."}, @@ -2723,6 +2723,14 @@ var tabledata = [ last: "20231003", desc: "IDA command palette & more (Ctrl+Shift+P, Ctrl+P)."}, +{name: "IISHelper", + url: "https://github.com/PwCUK-CTO/iis-helper-plugin", + src: "py", + cats: "decomp", + last: "20231113", + vers: "8.3", + desc: "IDA Pro plugin to aid with the analysis of native IIS modules."}, + {name: "IPyIDA", url: "https://github.com/eset/ipyida", src: "py", @@ -2883,7 +2891,7 @@ var tabledata = [ url: "https://github.com/lzyddf/mark_executed_code", src: "py", cats: "debug", - last: "20220601", + last: "20231127", vers: "7.5", desc: "Mark the code which is executed while debugging, including pseudo-code and assembly code."}, @@ -3011,6 +3019,14 @@ var tabledata = [ vers: "7.1", desc: "An msp430 emulator plugin for Ida Pro."}, +{name: "myda", + url: "https://github.com/fevral/myda", + src: "py", + cats: "debug, int", + last: "20231120", + vers: "8.3", + desc: "General Purpose IDA Plugin, currently a wrapper around vmrun to facilitate remote debugging of Windows PEs."}, + {name: "MyNav", url: "https://code.google.com/p/mynav/", src: "c++", @@ -3295,7 +3311,7 @@ var tabledata = [ url: "https://github.com/pwndbg/pwndbg", src: "py", cats: "debug, int", - last: "20231102", + last: "20231129", vers: "7.0", desc: "GDB plug-in that makes debugging with GDB suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. NOTE: IDA integration through small XMLRPC server."}, @@ -3860,7 +3876,7 @@ var tabledata = [ {name: "uEmu", url: "https://github.com/alexhude/uEmu", src: "py", - last: "20230208", + last: "20231120", vers: "7.2", desc: "uEmu is a tiny cute emulator plugin for IDA based on unicorn engine. Supports following architectures out of the box: x86, x64, ARM, ARM64, MIPS, MIPS64"}, @@ -3906,6 +3922,12 @@ var tabledata = [ vers: "6.9", desc: "Static and dynamic virtualization-based packed analysis and deobfuscation."}, +{name: "VmpHelper", + url: "https://github.com/fjqisba/VmpHelper", + src: "c++", + last: "20231115", + desc: "A vmp-analysis ida-plugin based on Ghidra, currently under development. Only supports Vmp3.5 x86. (In Chinese, no source)."}, + {name: "Void", url: "https://github.com/dovezp/ida.plugin.void", src: "py", @@ -3929,7 +3951,7 @@ var tabledata = [ url: "https://github.com/VirusTotal/vt-ida-plugin", src: "py", cats: "int", - last: "20230710", + last: "20231127", desc: "This is the official VirusTotal plugin for Hex-Rays IDA Pro. This plugin integrates functionality from VirusTotal web services into the IDA Pro's user interface."}, {name: "VulChatGPT", @@ -3942,7 +3964,7 @@ var tabledata = [ {name: "VulFi", url: "https://github.com/Accenture/VulFi", src: "py", - last: "20230901", + last: "20231116", vers: "7.5", desc: "The VulFi (Vulnerability Finder) tool is a plugin to IDA Pro which can be used to assist during bug hunting in binaries. Its main objective is to provide a single view with all cross-references to the most interesting functions (such as strcpy, sprintf, system, etc.)."}, @@ -3985,14 +4007,14 @@ var tabledata = [ {name: "WinIOCtlDecoder", url: "https://github.com/tandasat/WinIoCtlDecoder", src: "py", - last: "20150602", + last: "20231201", desc: "An IDA Pro plugin which decodes a Windows Device I/O control code into DeviceType, FunctionCode, AccessType and MethodType."}, {name: "WPeChatGPT", url: "https://github.com/WPeace-HcH/WPeChatGPT", src: "py", cats: "decomp", - last: "20231110", + last: "20231130", desc: "Plugin that can help to analyze binary files using OpenAI's ChatGPT training API."}, {name: "WWCD", @@ -4094,4 +4116,11 @@ var tabledata = [ last: "20230220", desc: "Scan file with Yara rules."}, +{name: "Yarka", + url: "https://github.com/AzzOnFire/yarka", + src: "py", + cats: "int", + last: "20231125", + desc: "IDA plugin for YARA signature creation from selections."}, + ];