{"id":31880756,"url":"https://github.com/antoniovazquezblanco/ghidrafindcrypt","last_synced_at":"2026-02-15T12:04:04.367Z","repository":{"id":204551034,"uuid":"623999209","full_name":"antoniovazquezblanco/GhidraFindcrypt","owner":"antoniovazquezblanco","description":"Ghidra analysis plugin to locate cryptographic constants","archived":false,"fork":false,"pushed_at":"2026-01-26T07:35:29.000Z","size":470,"stargazers_count":77,"open_issues_count":1,"forks_count":6,"subscribers_count":1,"default_branch":"main","last_synced_at":"2026-01-26T21:50:37.268Z","etag":null,"topics":["criptography","ghidra","ghidra-analyzer","ghidra-extension","reverse-engineering"],"latest_commit_sha":null,"homepage":"https://github.com/antoniovazquezblanco/ghidra-findcrypt","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"TorgoTorgo/ghidra-findcrypt","license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/antoniovazquezblanco.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2023-04-05T14:29:43.000Z","updated_at":"2026-01-26T07:35:27.000Z","dependencies_parsed_at":"2024-06-02T03:32:19.683Z","dependency_job_id":"740d60f4-5711-448e-9cdd-1657290e229f","html_url":"https://github.com/antoniovazquezblanco/GhidraFindcrypt","commit_stats":null,"previous_names":["antoniovazquezblanco/ghidra-findcrypt","antoniovazquezblanco/ghidrafindcrypt"],"tags_count":13,"template":false,"template_full_name":null,"purl":"pkg:github/antoniovazquezblanco/GhidraFindcrypt","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/antoniovazquezblanco%2FGhidraFindcrypt","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/antoniovazquezblanco%2FGhidraFindcrypt/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/antoniovazquezblanco%2FGhidraFindcrypt/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/antoniovazquezblanco%2FGhidraFindcrypt/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/antoniovazquezblanco","download_url":"https://codeload.github.com/antoniovazquezblanco/GhidraFindcrypt/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/antoniovazquezblanco%2FGhidraFindcrypt/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28947567,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-31T14:26:55.697Z","status":"ssl_error","status_checked_at":"2026-01-31T14:26:52.545Z","response_time":128,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["criptography","ghidra","ghidra-analyzer","ghidra-extension","reverse-engineering"],"created_at":"2025-10-13T01:30:43.524Z","updated_at":"2026-01-31T16:01:16.868Z","avatar_url":"https://github.com/antoniovazquezblanco.png","language":"Java","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Ghidra FindCrypt\n\n![Bug eyed Ghidra looks at complex algorithms](docs/findcrypt_logo.png)\n\n[![Build](https://github.com/antoniovazquezblanco/GhidraFindcrypt/actions/workflows/main.yml/badge.svg)](https://github.com/antoniovazquezblanco/GhidraFindcrypt/actions/workflows/main.yml)\n\nThis is a fork of another [Ghidra FindCrypt](https://github.com/TorgoTorgo/ghidra-findcrypt) that is a re-write of another [Ghidra FindCrypt](https://github.com/d3v1l401/FindCrypt-Ghidra/) script as an auto analysis module. It also takes better advantage of the Ghidra API to label found constants.\n\n\n## Installing\n\nGo to the [releases page](https://github.com/antoniovazquezblanco/GhidraFindcrypt/releases) and download the latest version for your Ghidra distribution.\n\nIn Ghidra main window go to `File` \u003e `Install extensions...`. In the new window press the `+` icon to import the downloaded zip.\n\n\n## Using\n\nOnce the script is installed, a new Analysis is added to the Auto Analyze window called \"Find Crypt\", it's enabled by default and it's safe to re-run.\nIf you have an existing file, open the \"Analysis\" menu in the CodeBrowser tool and click \"Auto Analyze\".\nSelect the \"Find Crypt\" analysis from the list and click Analyze.\n\nOnce the analysis is complete, any found crypt constants will be labeled with the algorithm they're associated with.\nYou can find these labels in the \"Labels\" folder in the Symbol Tree window.\nThe labels are prefixed with `CRYPT_` to group them together.\n\nThe analysis will also try to set the datatype for the found constants, but if a datatype has been applied by another analysis module that other module will take precedence.\n\nA comment is always placed when a crypt constant is found to tell you the type and the size of the constant, just in case the datatype wasn't applied.\n\n\n## Development\n\n### Development environment\n\n1. First, install [Eclipse for Java Developers](https://www.eclipse.org/downloads/packages/).\n2. Once installed, open Eclipse and click on `Help` \u003e `Install New Software...`. A window will pop up.\n3. Click on `Add...` \u003e `Archive...`. It will open a file selection dialog. In this dialog, please select `GhidraDev.zip` file from `\u003cYour Ghidra install dir\u003e/Extensions/Eclipse/GhidraDev/`.\n4. Check Ghidra category (or GhidraDev entry).\n5. Repeatedly click `Next`.\n6. Accept the terms of the license agreement.\n7. Check the `Unsigned` table entry and click `Trust Selected`.\n8. Restart Eclipse...\n\n### Importing the project\n\nAfter all of that, if you still want to develop and/or contribute to the project, first clone this repository:\n```bash\ngit clone git@github.com:antoniovazquezblanco/GhidraFindcrypt.git\n```\n\nIn Eclipse:\n1. Click on `File` \u003e `Import...`.\n2. In the dialog click on `General` \u003e `Projects from Folder or Archive` \u003e `Next`.\n3. Click on `Directory...` and select the `GhidraFindcrypt` folder you have just cloned.\n4. Click on `Finish`.\n5. Right click on the just imported project `GhidraDev` \u003e `Link Ghidra...`.\n6. Select your desired Ghidra installation and click on `Finish`.\n\nYou are now ready to develop!\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fantoniovazquezblanco%2Fghidrafindcrypt","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fantoniovazquezblanco%2Fghidrafindcrypt","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fantoniovazquezblanco%2Fghidrafindcrypt/lists"}