{"id":13484252,"url":"https://github.com/howmp/COMFinder","last_synced_at":"2025-03-27T16:30:37.232Z","repository":{"id":192574985,"uuid":"164647095","full_name":"howmp/COMFinder","owner":"howmp","description":"IDA plugin for COM","archived":false,"fork":false,"pushed_at":"2022-09-30T10:14:33.000Z","size":266,"stargazers_count":45,"open_issues_count":0,"forks_count":15,"subscribers_count":3,"default_branch":"master","last_synced_at":"2024-11-16T08:34:02.830Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/howmp.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null}},"created_at":"2019-01-08T12:45:11.000Z","updated_at":"2024-11-11T07:33:07.000Z","dependencies_parsed_at":"2023-09-05T03:04:38.311Z","dependency_job_id":"b6c434a1-9d04-4d71-8dc5-efab7ef8d8bc","html_url":"https://github.com/howmp/COMFinder","commit_stats":null,"previous_names":["howmp/comfinder"],"tags_count":4,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/howmp%2FCOMFinder","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/howmp%2FCOMFinder/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/howmp%2FCOMFinder/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/howmp%2FCOMFinder/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/howmp","download_url":"https://codeload.github.com/howmp/COMFinder/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":245882204,"owners_count":20687848,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-07-31T17:01:21.408Z","updated_at":"2025-03-27T16:30:36.878Z","avatar_url":"https://github.com/howmp.png","language":"Python","funding_links":[],"categories":["Python"],"sub_categories":[],"readme":"# COMFinder\n\n## IDA plugin for COM\n\n### 这是一个IDA的插件，依赖于IDAPython，用于查找标记COM组件中函数\n\n## 效果图\n\n左侧为IDA中效果，右侧对比了ComRaider\n\n![comfinder](comfinder.png)\n\n## 原理\n\n1. 在IDAPython中通过pywin32的pythoncom获取COM组件中的原型\n\n1. 使用独立的程序获取COM组件中原型对应的虚表\n\n    **特别注意：由于需要加载dll之后获取虚表，所以千万不要用于恶意程序分析**\n\n## 安装\n\n1. 安装IDA的时候，要勾选IDAPython\n\n1. 安装pywin32`pip install pywin32`\n\n1. 将bin目录三个文件复制到插件目录\n\n    默认情况下，在这个目录：`C:\\Program Files\\IDA 7.6\\plugins`\n\n1. 删除或备份插件目录原始的`comhelper.dll`和`comhelper64.dll`文件\n\n## 更新记录\n\n1. 2022-9-30\n   \n   1. 支持IDA7.6,支持Python3\n   \n1. 2020-4-8\n\n    1. 重新编译去除运行库依赖，解决丢失MSVCR90.dll等问题\n\n    1. 增加说明，解决IDA自带comhelper导致本插件无法使用的问题","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhowmp%2FCOMFinder","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fhowmp%2FCOMFinder","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhowmp%2FCOMFinder/lists"}