https://github.com/mandiant/FIDL

A sane API for IDA Pro's decompiler. Useful for malware RE and vulnerability research
https://github.com/mandiant/FIDL

api decompiler ida malware research reversing vulnerability

Last synced: 2 months ago
JSON representation

A sane API for IDA Pro's decompiler. Useful for malware RE and vulnerability research

• Host: GitHub
• URL: https://github.com/mandiant/FIDL
• Owner: mandiant
• License: mit
• Created: 2019-11-21T15:45:27.000Z (about 5 years ago)
• Default Branch: master
• Last Pushed: 2023-04-10T00:55:44.000Z (over 1 year ago)
• Last Synced: 2024-04-10T07:09:18.536Z (9 months ago)
• Topics: api, decompiler, ida, malware, research, reversing, vulnerability
• Language: Python
• Homepage: https://fidl.readthedocs.io
• Size: 10.7 MB
• Stars: 436
• Watchers: 31
• Forks: 74
• Open Issues: 2
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
[![GitHub](https://img.shields.io/github/license/fireeye/FIDL)](https://en.wikipedia.org/wiki/MIT_License)

![PyPI - Status](https://img.shields.io/pypi/status/FIDL)

[![GitHub release (latest by date)](https://img.shields.io/github/v/release/fireeye/FIDL)](https://github.com/fireeye/FIDL/releases)

[![PyPI](https://img.shields.io/pypi/v/FIDL.svg)](https://pypi.org/project/FIDL)

[![PyPI - Python Version](https://img.shields.io/pypi/pyversions/fidl)](https://pypi.org/project/FIDL)

[![Documentation Status](https://readthedocs.org/projects/fidl/badge/?version=latest)](https://fidl.readthedocs.io/en/latest/?badge=latest)


███████╗██╗██████╗ ██╗     

██╔════╝██║██╔══██╗██║     

█████╗  ██║██║  ██║██║     

██╔══╝  ██║██║  ██║██║     

██║     ██║██████╔╝███████╗

╚═╝     ╚═╝╚═════╝ ╚══════╝



# FLARE IDA Decompiler Library

_FIDLing with the decompiler API_

This is a set of utilities wrapping the decompiler API into something sane. This code focus on vulnerability research and bug hunting, however most of the functionality is generic enough to be used for broader reverse engineering purposes.

# Installation

The recommended way to install this is to use python's `pip`. Keep in mind that you have to use the `pip` corresponding to the Python installation IDA is using.

In case you have more than one installation (for example 32 and 64 bits), you can find which one IDA uses by typing this into the console:

```python

import sys

sys.version

```

`cd` to the directory containing `setup.py`

__Release mode:__ `pip install .`

__Development (editable) mode:__ `pip install -e .[dev]`

In _development mode_, `pip` will install `pytest` and some linters helpful while developing, as well as creating symbolic links under python's packages directory instead of copying FIDL to it. This allows you to modify your `.py` files and test on the fly, without needing to reinstall every time you make a change :)

# Documentation

You can find up to date **documentation online** [here](https://fidl.readthedocs.io/en/latest/)

The source distribution has built-in documentation [here](./FIDL/docs/_build/html/index.html)