Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/patois/IDACyber
Data Visualization Plugin for IDA Pro
https://github.com/patois/IDACyber
color-filter cyber data-visualization exploitation firmware-analysis ida ida-pro idapython-plugin memory-forensics memory-hacking pixel-art reverse-engineering
Last synced: 25 days ago
JSON representation
Data Visualization Plugin for IDA Pro
- Host: GitHub
- URL: https://github.com/patois/IDACyber
- Owner: patois
- License: mit
- Created: 2017-01-12T06:58:54.000Z (almost 8 years ago)
- Default Branch: master
- Last Pushed: 2022-12-06T22:10:47.000Z (almost 2 years ago)
- Last Synced: 2024-10-26T07:39:15.226Z (25 days ago)
- Topics: color-filter, cyber, data-visualization, exploitation, firmware-analysis, ida, ida-pro, idapython-plugin, memory-forensics, memory-hacking, pixel-art, reverse-engineering
- Language: Python
- Homepage:
- Size: 28.6 MB
- Stars: 287
- Watchers: 22
- Forks: 35
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# IDACyber
## Data Visualization Plugin for IDA Pro
IDACyber is an interactive data visualization plugin for IDA Pro. It consists of external "color filters" that transform raw data bytes into a canvas that can be used to inspect and navigate data interactively. Depending on the filter in context, browsing this data visually can reveal particular structures and patterns, literally from a zoomed-out perspective.
### Requirements
* IDA 7.3+
* This IDAPython project is compatible with Python3 only. For compatibility with older versions of IDA, you may want to check out the Python2 branch of this project. The Python2 branch is no longer maintained and thus contains outdated code.
### Installation
* Updating: It's recommended to delete "idacyber.py" and the "cyber" folder if you're updating from a previous IDACyber version.
* Installation: Copy "idacyber.py" and the "cyber" folder to the IDA Pro "plugins" folder.
### Usage
Ctrl-Shift-C starts the plugin and creates a new dockable window. Multiple instances can be created by re-running the plugin which allows several color filters to be run in parallel. The resulting canvas can be interacted with using keyboard and mouse controls. With an instance of IDACyber on focus, a quick manual can be opened by pressing Ctrl-F1, help about the currently active filter can be shown by pressing Ctrl-F2.
### Writing custom color filters
IDACyber is meant to be easily customizable by offering the ability to add new "color filters" to it.
A color filter is an external IDAPython script that must be placed within the "cyber" folder, which IDACyber will then load during startup. Its main workhorse consists of the callback function "on_process_buffer()" which each color filter is expected to implement. This function is passed the raw data to be processed by a color filter, which then is supposed to return a list of colors in RGB format. IDACyber will take this list of colors and draw it onto the interactive canvas.
For example code, please check out the existing color filters that can be found in the "cyber" folder. The two filters "NES" and "GameBoy" are two simple examples that can be used as a basic skeleton for writing new color filters.
### Example filters
### Known bugs
Yes :[